Author Topic: How to Resolve a False-Positive "MALICIOUS URL BLOCKED" Label?  (Read 5215 times)

0 Members and 1 Guest are viewing this topic.

BlueCavaMatt

  • Guest
Hello Avast! Community,

I represent BlueCava which is an online technology used for fraud detection and marketing purposes by online publishers and advertisers.

Details:
hxtp://www.bluecava.com/products

Our web platform is implemented as an iFrame into publisher web pages and advertising creative.  Our iframe executes a series of .js files that are used to identify a user's device for fraud/risk, marketing and analytics use cases.

We have not been flagged by Avast! Network Shield as a "MALICIOUS URL BLOCKED"

BlueCava traffic is continuously monitored for security and safety for our clients and we haven't detected any malicious activity.  I believe this flag applied by Avast! is a false-negative label.

Can anybody tell me how I can have Avast! reevaluate our flagged domain in an effort to remove this "Infection: URL:Mal" label?

URL in question:
bcpd.x7y24z365.com/dot.gif?d=

Matt Arnold




« Last Edit: June 19, 2013, 06:05:09 PM by BlueCavaMatt »


Offline jefferson sant

  • Starting Graphoman
  • *
  • Posts: 6677
  • volunteer
Re: How to Resolve a False-Positive "MALICIOUS URL BLOCKED" Label?
« Reply #2 on: June 18, 2013, 11:29:06 PM »
Hello Avast! Community,

Our web platform is implemented as an iFrame into publisher web pages and advertising creative.  Our iframe executes a series of .js files that are used to identify a user's device for fraud/risk, marketing and analytics use cases.

We have not been flagged by Avast! Network Shield as a "MALICIOUS URL BLOCKED"

BlueCava traffic is continuously monitored for security and safety for our clients and we haven't detected any malicious activity.  I believe this flag applied by Avast! is a false-negative label.

Can anybody tell me how I can have Avast! reevaluate our flagged domain in an effort to remove this "Infection: URL:Mal" label?


if you think this is wrong, you can report it here.

http://www.avast.com/contact-form.php

You can add a link to this thread in response to the event.

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33900
  • malware fighter
Re: How to Resolve a False-Positive "MALICIOUS URL BLOCKED" Label?
« Reply #3 on: June 19, 2013, 12:10:05 AM »
But there is also a webutation block in Google Chrome browsers: http://www.webutation.net/go/review/bluecava.com?req=chrome

polonus
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

BlueCavaMatt

  • Guest
Re: How to Resolve a False-Positive "MALICIOUS URL BLOCKED" Label?
« Reply #4 on: June 19, 2013, 06:22:41 PM »
Hi Avast Community,

I'm running into a lot of dead ends when trying to get any information explaining how to resolve/clear this Avast! "MALICIOUS URL BLOCKED" related to our

bcpd.x7y24z365.com/dot.gif?d=

I submitted an email a ticket to https://support.avast.com/Tickets/Submit and the Support Engineer tested the incorrect URL.

I really need a response from Avast that explains why bcpd.x7y24z365.com/dot.gif?d= was flagged as malicious and how I can submit it to be retested.

How do I get Avast to retest this URL to confirm if the "MALICIOUS URL BLOCKED" label is a false-positive?

Offline jefferson sant

  • Starting Graphoman
  • *
  • Posts: 6677
  • volunteer
Re: How to Resolve a False-Positive "MALICIOUS URL BLOCKED" Label?
« Reply #5 on: June 19, 2013, 11:19:13 PM »
fill in the form below

http://www.avast.com/contact-form.php

wait at least 1 to 3 days
url is suspected
it counts
/ dot.gif?d =

making it virtually invalid.

Offline jefferson sant

  • Starting Graphoman
  • *
  • Posts: 6677
  • volunteer
Re: How to Resolve a False-Positive "MALICIOUS URL BLOCKED" Label?
« Reply #6 on: June 21, 2013, 05:08:38 PM »
The url was unblocked
was fixed in VPS update 130620-4.

BlueCavaMatt

  • Guest
Re: How to Resolve a False-Positive "MALICIOUS URL BLOCKED" Label?
« Reply #7 on: June 21, 2013, 06:07:52 PM »
Jefferson,

Thanks so much for the response.  I really appreciate your time.  I have to admit, I've had an extremely difficult time getting a meaningful response from the Avast! Support team when submitting a ticket through the Avast! web UI at.  http://www.avast.com/contact-form.php.   False Positive labels by web security organizations have a ripple-effect that result in lost revenue for businesses and customers.  If Avast! provides an opportunity for the market to provide input on their support processes, I'll love the opportunity provide some thoughts.  I've worked with many other web security platforms and Avast! has an opportunity to improve their support processes. 

Thanks Again Jefferson.  ;-)