Malevolent download from debian website

[Alexander Reck <alexander.reck@onlinehome.de>]

Hello.

I encountered a problem with a misleading download link on your website 
and wanted to inform you:

Go to page https://cdimage.debian.org/debian-cd/current/amd64/iso-dvd/.
Hover your mouse over the link "debian-9.7.0-amd64-DVD-1.iso".
At the bottom of the browser it correctly shows 
"https://cdimage.debian.org/debian-cd/current/amd64/iso-dvd/debian-9.7.0-amd64-DVD-1.iso";.
Click the link.
The download then starts from site https://caesar.ftp.acc.umu.se and is 
instantly cancelled by Norton antivirus with the message
"Malevolent download recognized, download cancelled".

I downloaded the file from a mirror instead.


Kind regards
Alexander Reck