Suspicious 4sync download link on spiderfoot.org – Is this official?

[delaneysosa]

Hi,

I noticed that https://spiderfoot.org points its download button to a 4sync.com link https://www.4sync.com/web/directDownload/noctLxr7/nPgBECOc.89ce5bb698b6342dea0eb2c5820cbcee

VirusTotal flags this as potentially malicious (Forcepoint ThreatSeeker – Malicious).

The link currently redirects to an error page instead of serving the file https://www.4sync.com/web/linkerror?aff=345136362

While the HTML itself doesn’t appear malicious, using a third-party file host introduces a potential supply-chain risk. I have not downloaded anything. Could you confirm: is this an official link or a mirror?

VirusTotal report for reference:
https://www.virustotal.com/gui/url/d9d6673148781cdca8dd01616e2fc2204a25917dec1c93c1cafd9c5394b7fdbd/details

[bcoles]

As far as I'm aware spiderfoot.org is not affiliated with SpiderFoot. Also, see the page footer:

Not affiliated with SpiderFoot. This is an independent site providing documentation, guides and links to the official project repositories. For official releases visit GitHub