Is https://czkawka.com/ a legit site? --CZKAWKA.COM IS NOT THE OFFICIAL PROJECT SITE--

[lovesynth]

Hi, I found that website https://czkawka.com/ and I am wondering if this is a legit source for your tool?

Neither is your name mentioned there, nor are you mentioning this site in this github repo.

Contact data on that site is:

Email: emmawatsofficial54@gmail.com
phone: +92 301 1644485
Address: 1600 Grand Avenue, London, NW1 6XE, UK

Maybe I am just a bit overly paranoid, but it "smells" a little bit, the whole site does not seem to fit your style.
Also they offer a download of the GUI tool from a Wordpress upload folder, so that could be anything (did not check it.)

Is this a legit site?

[qarmin]

This website is not affiliated with me in any way.
I stumbled across it myself about a week ago.

I have mixed feelings about it, mainly because the binaries are hosted directly on the owner’s server rather than on GitHub. That makes it trivially easy for someone to swap them out with malicious versions. On top of that, some of the information on the site is incorrect, e.g. there's no .exe or .msi installer for Windows, and no .dmg bundle for macOS, despite what the site claims.

It partially looks like it may have been generated by AI, especially since it avoids linking to the official GitHub page, which is typical behavior for AI generated content.

Another weird detail: the meta keywords on the site are all about "hiccups" as a physiological issue, not the app itself. That might be, just auto-generated by Wordpress.

So, to be clear: this site is not connected to me and I haven’t found any malware on it. The biggest concern is that it could become a malware distribution point in the future, especially since I found several other sites made with what looks like the exact same template:

• https://startallback.org
• https://telelatino.io
• https://dxwnd.com
• https://3dmigoto.com/
• https://heavyload.net/

These all use different domains but seem to follow the same pattern. I also find it odd that someone would add a personal(?) address on a random website when there's no visible company or organization behind it.

So I would treat it with skepticism. Everyone should stick to the official GitHub repo or use unofficial builds from trusted sources.

[lovesynth]

Thanks for the attention. Yes AI content for whatever reason, hard to find any positive motiviation for that if they did not even contact you. Maybe just put a warning on the repo main readme could protect future users?

[frenkhub]

So, to be clear: this site is not connected to me and I haven’t found any malware on it.

I downloaded the zip some days ago and tried to run but nothing happened, nothing started. Should I reinstall Windows or a scan with Windows Defender is enough?

[qarmin]

For now, the files from this site are simply repackaged versions of the files from the GitHub releases (with identical MD5 checksums), so they are safe to use. However, this may change at any time.

[frenkhub]

Thanks for the clarification, I'm relieved.

[Cyberhead21]

For now, the files from this site are simply repackaged versions of the files from the GitHub releases (with identical MD5 checksums), so they are safe to use. However, this may change at any time.

I would be even more wary of that because of the existence of MD5 collisions.

https://github.com/corkami/collisions

[frenkhub]

Can someone if the files are the same?

By the way I think most of the people doesn't check the hash... so why the attacker should do it?

[Cyberhead21]

It might be the same now, but you never know whenever the files can be replaced, especially when this site is out of control of the developer.

I would make sure to warn the unsuspecting users of it, given that it might turn rogue at any time.

[frenkhub]

Should I reinstall windows to protect my self?

[gregorylearns]

I thought it was a legit website but then I saw the guy from How To Train Your Dragon lmaoo