Avast WEBforum

Consumer Products => Avast Free Antivirus / Premium Security (legacy Pro Antivirus, Internet Security, Premier) => Topic started by: tyrel68 on October 21, 2021, 09:11:44 PM

Title: Avast Flagging Identity Guard as Phishing
Post by: tyrel68 on October 21, 2021, 09:11:44 PM

Description:
App.identity guard.ca

Identity guard is ironically a service to protect from phishing so this kinda blows my mind

Error:
clicked on my bookmark for the service and nothing happened
Noticed Avast with a notification

Threat blocked
We've safely aborted connection etc etc
URL: Phishing

Comment
I never changed the bookmark so Im going to the same site.

Title: Re: Avast Flagging Identity Guard as Phishing
Post by: DavidR on October 21, 2021, 09:38:11 PM

Please 'modify' your post change the URL from https to hXXps, to break the link and avoid accidental exposure to suspect sites, thanks.

It has nothing to do with the bookmark, but clean sites today could be infected/hacked tomorrow.

Clean here - https://www.virustotal.com/gui/url/1613fea34c4a86a7f100fba4b8c56737cc9301dbaecc6e8eca191f76019a64df
Considered a Low Security Risk - https://sitecheck.sucuri.net/results/https/app.identityguard.ca - but some points made.
Lots of out of date software reported here - https://awesometechstack.com/analysis/website/app.identityguard.ca/?protocol=https%3A - this could leave exploit opportunities.
-  This may or may not be what Avast is alerting for - but you should certainly address this.

Reporting a Possible False Positive File or Website - https://www.avast.com/false-positive-file-form.php (https://www.avast.com/false-positive-file-form.php).
You should get a response in a day or two.

Title: Re: Avast Flagging Identity Guard as Phishing
Post by: tyrel68 on October 21, 2021, 10:38:54 PM

Updated original post to remove ,link

Also submitted the site for analysis

Thank you for your input

Title: Re: Avast Flagging Identity Guard as Phishing
Post by: DavidR on October 21, 2021, 11:28:53 PM

You're welcome.

a forum friend mentioned the VT link is 7 months old, that said refreshing it doesn't change anything - 0/91 "No security vendors flagged this URL as malicious"

https://www.virustotal.com/gui/url/1613fea34c4a86a7f100fba4b8c56737cc9301dbaecc6e8eca191f76019a64df?nocache=1

Title: Re: Avast Flagging Identity Guard as Phishing
Post by: InvisibleMan on October 22, 2021, 02:30:52 AM

Quote from: tyrel68 on October 21, 2021, 09:11:44 PM

I never changed the bookmark so Im going to the same site.

Actually, some viruses are known to be able to modify bookmarks.

Title: Re: Avast Flagging Identity Guard as Phishing
Post by: DavidR on October 22, 2021, 02:36:41 AM

Quote from: InvisibleMan on October 22, 2021, 02:30:52 AM

Quote from: tyrel68 on October 21, 2021, 09:11:44 PM

I never changed the bookmark so Im going to the same site.

Actually, some viruses are known to be able to modify bookmarks.

If you hover the mouse over the bookmark it will show the destination.

But in the case of tyrel68, the bookmark is taking him to the expected site, which avast is alerting on.