Since this week if I start my OH sitemap my virusscanner recogniced a bad URL worldnaturenet.xyz
Does this belongs to OH? I do not have something like this in my sitemap config or even in another config file.
It only happens if I browse my sitemap. Not on other sites in the internet
You likely have a virus or other malware on your desktop computer:
Since your antivirus is flagging it I bet MalwareBytes will be able to find and remove it too.
Unless you have this URL in your Items or sitemap, the URL is not coming from OH. It is being injected by the malware.
yes, you are right. I have a plugin in firefox which causes this.