Avast WEBforum

Consumer Products => Avast Online Security (browser extension) => Topic started by: drpaolobaita on April 22, 2022, 07:39:00 PM

Title: Secure Web site blocked
Post by: drpaolobaita on April 22, 2022, 07:39:00 PM

I am the owner of the web site https://www.visureitalia.com/it/ that is improperly evaluated unsecure form Avast extension on browser. This is a huge problem that involves damage to our ecommerce and our business.
The web site https://www.visureitalia.com/it/ adopts a secure protocoll HTTPS EV and is guaranteed by the international cyber security certificate OWASP, Open Web Application Security Project.
All antivirus consider the web site totally secure (you can check it in the file attached).
I have reported three times to Avast as false positive but didn't received no reponse.
So, what do I have to do to resolve definitely the problem and remove the web site form the black list?
Thanks in advance to anyone who could help us.

Paolo Baita
CEO VisureItalia.com

Title: Re: Secure Web site blocked
Post by: Asyn on April 23, 2022, 09:51:46 AM

Nothing much I/we can do on the forum, only the guys from Threat Labs can unblock it.

Title: Re: Secure Web site blocked
Post by: polonus on April 23, 2022, 11:52:21 AM

See abuse being detected at Server Plan S.r.l.: https://www.virustotal.com/gui/domain/serverplan.com/relations
But apparently not for your IP address there:
https://www.virustotal.com/gui/ip-address/46.16.91.100/relations

So wait for a final verdict from avast team.

polonus

Title: Re: Secure Web site blocked
Post by: DavidR on April 23, 2022, 01:07:18 PM

First, please break active links to suspect site for obvious reasons, to avoid accidental exposure - visureitalia.com/it/

It isn't just the Avast browser extension that detects this (I don't use it) as the main Avast antivirus program also, see attached image. 

As polonus mentions only the Avast virus labs team can remove this, I don't know how or where you have reported this:
-  Reporting a Possible False Positive File or Website - https://www.avast.com/false-positive-file-form.php (https://www.avast.com/false-positive-file-form.php).
You should get a response in a day or two.

This check reports outdated software - https://awesometechstack.com/analysis/website/visureitalia.com/?protocol=https%3A - this can lead to exploit.

Title: Re: Secure Web site blocked
Post by: polonus on April 23, 2022, 11:38:40 PM

Apart from what DavidR reports, other scanners cannot scan that website uri you have provided us with.
For instance see results at sucuri's: https://sitecheck.sucuri.net/results/https/www.visureitalia.com/it/

Quote

Scan Failed
-https://www.visureitalia.com/it/                                                       Unable to scan your site. Timeout reached

Site Issue Detected  -https://www.visureitalia.com/404javascript.js     Unable to scan the page. Timeout reached

Avast Extension reacts as "Hold on, this website isn’t safe
This is a phishing site – a fake site that tries to steal your sensitive info (passwords, credit card numbers, and more). We recommend avoiding the site completely."

Also be aware that PrestaShop was being attacked  by spammers to abuse via Presta Shop mail vulnerability.

polonus (volunteer 3rd party cold recon website security analyst and website error-hunter)