Malware infection or not on phone

[Raven]

Hello

My Samsung A52-5G wanted to contact "customer.thewayofmoney.us" but the AirProtection of my Router (RT-AX86U Merlin firmware 3004_388.9_2) prevented that (hurray).
Now I read that this is a C&C Server and blacklisted because this server spreads malware, malware alias: FakeUpdate, GhoLoader, SocGholish and Confidence level is high (100%).

My question is whether my phone is infected with malware or the router (AirProtection) prevented this?
Sophos Intercept X reports that there is no malware on the phone, threats and PUAs 0 and low reputation apps 0.

Greetings Raven

 

[Treadler]

Hello

My Samsung A52-5G wanted to contact "customer.thewayofmoney.us" but the AirProtection of my Router (RT-AX86U Merlin firmware 3004_388.9_2) prevented that (hurray).
Now I read that this is a C&C Server and blacklisted because this server spreads malware, malware alias: FakeUpdate, GhoLoader, SocGholish and Confidence level is high (100%).

My question is whether my phone is infected with malware or the router (AirProtection) prevented this?
Sophos Intercept X reports that there is no malware on the phone, threats and PUAs 0 and low reputation apps 0.

Greetings Raven

I’d be thinking you’re ok.

 

[Ripshod]

What does your samsungs own security app have to say about this?

*edit* revisiting this as this site is classified by Trend as Dangerous (phishing)

https://www.scamadviser.com/check-website/customer.thewayofmoney.us

 

[XIII]

If you didn't type in the mentioned domain yourself, something else must have wanted to contact it.

Doesn't that then mean that your phone is already infected?

(But just couldn't get (new?) instructions from the C&C server because your router blocked that request)

 

[Ripshod]

Yes, it's the phone that's infected and AiProtection has successfully prevented the malware from "phoning home".
Just need to establish which app is doing this. Since this has only come up now it has to be an app that's been installed recently, or it's been installed by one of those many popular free game apps.
Look at your apps listed by install date. It still may not even show there as it could be disguised as a game addon/upgrade/expansion.