Question

I have seen many proxies being able to reach Facebook without any warning from the Antivirus.
Why does this code below (which is working) is treated as a Phishing Website for Antivirus like Kaspersky?

<?php
$header = NULL;
$url = "http://www.facebook.com";
$cookie = NULL;
$ch = curl_init();
    curl_setopt($ch, CURLOPT_HEADER, $header);
    curl_setopt($ch, CURLOPT_NOBODY, $header);
    curl_setopt($ch, CURLOPT_URL, $url);
    curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, 0);
    curl_setopt($ch, CURLOPT_COOKIE, $cookie);
    curl_setopt($ch, CURLOPT_USERAGENT, $_SERVER['HTTP_USER_AGENT']);
    //curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
    curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, 0);
    curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);;
curl_exec($ch);
?>

Thanks in advance.

PD: Antivirus isn’t showing any warning for Twitter though.

Answer 1

It’s not because of the code. It’s because of the URL that is loading the code.

This one is giving me the “Phishing warning”:

http://127.0.0.1/proxy/?url=http://facebook.com

However, a more trusted site with https doesn’t give any warning from the AntiVirus.

https://127.0.0.1/proxy/?url=http://facebook.com