Avast WEBforum

Consumer Products => Avast Online Security (browser extension) => Topic started by: kellermike545 on May 07, 2022, 06:38:23 AM

Title: Fake web shop false positive
Post by: kellermike545 on May 07, 2022, 06:38:23 AM
Dear Avast team,

not sure what happend with my privios post. Maybe it was published in the false category.

I installed the Avast plugin "Avast Online Security & Privacy" for my chrome browser but I saw yesterday a false positive regarding a fake web shop fahrrad-handels.net.

The picture below shows the google search result and the false positive the Avast plugin shows:
(https://filebin.net/6nd62jyxjul8b9x5/avast_false_positive_fake_web_shop.JPG)

Please have a look on that why your warning system is not working properly.

Thank you very much,

Mike
Title: Re: Fake web shop false positive
Post by: DavidR on May 07, 2022, 09:11:32 AM
First posting an active link to a suspect site isn't wise, modify your post so it isn't active, e.g. fahrrad-handels.net

Second, it isn't detected by the Avast Antivirus signatures, so I don't understand why the Avast Ad on would be with the add-on (which I don't use).

I'm always a bit suspicious when a link to a site is posted when the antivirus doesn't detect it (suspect site spamming).
Title: Re: Fake web shop false positive
Post by: Asyn on May 07, 2022, 09:54:42 AM
-> https://www.virustotal.com/gui/url/268cf0cf668dc70315422eae592fa01f4c6ece96493036befa8b333f661eb4ce/detection
Title: Re: Fake web shop false positive
Post by: kellermike545 on May 07, 2022, 10:08:27 AM
First posting an active link to a suspect site isn't wise, modify your post so it isn't active, e.g. fahrrad-handels.net
- modified the URL to be inactive

Second, it isn't detected by the Avast Antivirus signatures, so I don't understand why the Avast Ad on would be with the add-on (which I don't use).
- The goal of the Chrome plugin is to warn the users... Why is there no warning?

I'm always a bit suspicious when a link to a site is posted when the antivirus doesn't detect it (suspect site spamming).
Title: Re: Fake web shop false positive
Post by: kellermike545 on May 07, 2022, 10:10:35 AM
-> https://www.virustotal.com/gui/url/268cf0cf668dc70315422eae592fa01f4c6ece96493036befa8b333f661eb4ce/detection
- Thank you very much for that very helpful link providing an overview.
Title: Re: Fake web shop false positive
Post by: Asyn on May 07, 2022, 01:28:27 PM
-> https://www.virustotal.com/gui/url/268cf0cf668dc70315422eae592fa01f4c6ece96493036befa8b333f661eb4ce/detection
- Thank you very much for that very helpful link providing an overview.
You're welcome.
Title: Re: Fake web shop false positive
Post by: r@vast on May 09, 2022, 09:45:58 AM
Dear Avast team,

not sure what happend with my privios post. Maybe it was published in the false category.

I installed the Avast plugin "Avast Online Security & Privacy" for my chrome browser but I saw yesterday a false positive regarding a fake web shop fahrrad-handels.net.

The picture below shows the google search result and the false positive the Avast plugin shows:
(https://filebin.net/6nd62jyxjul8b9x5/avast_false_positive_fake_web_shop.JPG)

Please have a look on that why your warning system is not working properly.

Thank you very much,

Mike


Hi,

You can submit a suspicious sample (e.g a website that is not detected as fake/scam) to Avast Threat Labs using:
https://www.avast.com/report-malicious-file.php#pc
Title: Re: Fake web shop false positive
Post by: polonus on May 15, 2022, 12:39:56 PM
It is not only avast online security that flags, also Trend Micro's mustcheck flags this page as a scam site.
Scamvoid gives it as potentially unsafe. Very poor trustworthiness. Domain creation only 3 months ago.
Should be reported to Cloudflare's abuse on IP=104.26.9.140

polonus (volunteer 3rd party cold reconnaissance website security-analyst and website error-hunter)