Avast WEBforum

Consumer Products => Avast Free Antivirus / Premium Security (legacy Pro Antivirus, Internet Security, Premier) => Topic started by: fcloest on October 12, 2019, 01:28:16 PM

Title: False positive
Post by: fcloest on October 12, 2019, 01:28:16 PM
Hi

I just joined a reputable webhost in South Africa. When I click on the button to try access my Plesk dashboard (URL: http://wp1.hosted.site) Avast blocks the site as phising. I phoned the host. They insist you must have this URL as a false positive.

Please advise?

Thanks
Title: Re: False positive
Post by: Pondus on October 12, 2019, 01:54:06 PM
Quote
Please advise?

https://sitecheck.sucuri.net/results/wp1.hosted.site

https://www.virustotal.com/gui/url/fabd1746acda0296e88b463075340ac6603d6bf5e44b7d5c37eb7c1b183799ef/detection


Title: Re: False positive
Post by: polonus on October 12, 2019, 01:58:28 PM
Website is blacklisted by McAfee's and Spamhaus and also by avast's.
See: https://aw-snap.info/file-viewer/?protocol=not-secure&ref_sel=GSP2&ua_sel=ff&chk-cache=&fs=1&tgt=d3AxLmhdc3R7Iy5zW3R7~enc
Re: https://www.shodan.io/host/41.222.32.11 -> https://sitecheck.sucuri.net/results/wp1.hosted.site
Plesk generated website.

7 engines detect: https://www.virustotal.com/gui/ip-address/41.222.32.11/relations
a.k.a. https://www.virustotal.com/gui/url/fabd1746acda0296e88b463075340ac6603d6bf5e44b7d5c37eb7c1b183799ef/detection
PHISHING GOING ON on a Web Server's Default Page.

polonus
Title: Re: False positive
Post by: jefferson sant on October 16, 2019, 04:20:15 AM
Hi

I just joined a reputable webhost in South Africa. When I click on the button to try access my Plesk dashboard (URL: hxxp://wp1.hosted.site) Avast blocks the site as phising. I phoned the host. They insist you must have this URL as a false positive.

Please advise?

Thanks

Detection was removed in 15.10.2019 at 15:58 PM.

Quote from: Avast
Our virus specialists have now cleared its reputation in our database.

With URLs this change should be instant, but it might take up to 24 hours with files.