My antivirus throws an error when visiting a wiki full of code

Had this pop up from Bitdefender antivirus when browsing the dev wiki. Not sure if this is the right place to report it.

Infected web page detected
Feature:
Online Threat Prevention

We blocked this dangerous page for your protection: https://wiki.facepunch.com/sbox/From_Lua_to_CSharp?format=json Threat name: Generic.Ransom.Evil.B10FF394 Dangerous pages attempt to install software that can harm the device, gather personal information or operate without your consent.

I expect it’s just your antivirus going wild over nothing. That page is just JSON data and I strongly doubt a publicly operating company is doing any of this: Dangerous pages attempt to install software that can harm the device, gather personal information or operate without your consent.

https://www.virustotal.com/gui/url/0b954a5e7dfc3205fb998da79ecc6a7f0bfb50634025b20fb5398cb6805cd0e1/detection

maybe his antivirus just detected something random in that json which looks like bad stuff

at least virustotal doesnt say anything about that

The content of the response doesn’t look malicious. Possibly the lua code included in json response might be the cause for false positive since none of the other pages triggered it and I think it’s the only page with any Lua in it.

i dont think that this page is the only one with lua examples if you speak about the gmod wiki :eyes:

most likely just a false positive.

What site was it specifically and what AV are you using? There’s definitely a possibility of a false positive - look at Discord, where an image with plaintext code in it triggered Windows Defender. It’s still worth investigating though.