Author Topic: Re: Website reported as blocked for URL:Mal, report false infection?  (Read 869 times)

0 Members and 1 Guest are viewing this topic.

REDACTED

  • Guest
I am having the same issue, please help to remove below website from the blacklist as it is a commonly used link:

hxxps://myportal.singtel[.]com/web/guest/home

Thank you.
« Last Edit: February 05, 2018, 09:10:38 AM by HonzaZ »

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33904
  • malware fighter
Re: Re: Website reported as blocked for URL:Mal, report false infection?
« Reply #1 on: February 01, 2018, 05:38:44 PM »
Loading from that particular uri failed.
Probably blocked because of abuse on that same IP: https://www.threatcrowd.org/domain.php?domain=info.singtel.com
Older abuse: https://malwr.com/analysis/ZmM5ZjFlZGQ0YWY3NDkyY2I4OTkyNzU3YTNlNTU5MDA/
See: https://aw-snap.info/file-viewer/?protocol=secure&tgt=myportal.singtel.com%2Fweb%2Fguest%2Fhome&ref_sel=GSP2&ua_sel=ff&fs=1
Ask for an exclusion of the general IP block for your domain from an Avast Team Member, as they are the only ones to come and unblock -> consider: http://urlquery.net/report/a9fa4c07-0e1f-4d1b-8a03-f54f96a817dd
Various issues: Results from scanning URL: -https://myportal.singtel.com/web/guest/home
Number of sources found: 4
Number of sinks found: 105
Results from scanning URL: -https://myportal.singtel.com/html/js/ssologin.js
Number of sources found: 34
Number of sinks found: 15
Re Results from scanning URL: -http://carrotflight2.ardenblog.ir/2018/01/24/%ef%bb%bf%d8%ad%d9%81%d8%b8-%d8%b3%d9%84%d8%a7%d9%85%d8%aa%db%8c-%d8%a8%d9%87%d8%aa%d8%b1%db%8c%d9%86-%d8%af%da%a9%d8%aa%d8%b1-%da%a9%d8%a7%d8%b4%d8%aa-%d9%85%d9%88-%d8%aa%d9%87%d8%b1%d8%a7%d9%86/?preview=true/
Number of sources found: 1
Number of sinks found: 6

Results from scanning URL: -http://carrotflight2.ardenblog.ir/2018/01/24/%ef%bb%bf%d8%ad%d9%81%d8%b8-%d8%b3%d9%84%d8%a7%d9%85%d8%aa%db%8c-%d8%a8%d9%87%d8%aa%d8%b1%db%8c%d9%86-%d8%af%da%a9%d8%aa%d8%b1-%da%a9%d8%a7%d8%b4%d8%aa-%d9%85%d9%88-%d8%aa%d9%87%d8%b1%d8%a7%d9%86/?preview=true/
Number of sources found: 8
Number of sinks found: 4

Results from scanning URL: -https://myportal.singtel.com/html/js/ssologin.js
Number of sources found: 79
Number of sinks found: 56

Error in code:
Quote
-myportal.singtel.com/web/guest/home b
     info: [script] -myportal.singtel.com/html/js/barebone.jsp?browserId=ie&themeId=WAR_expressportaltheme&colorSchemeId=01&minifierType=js&minifierBundleId=javascript.barebone.files&languageId=US&b=6200&t=1517451677000
     info: [script] -myportal.singtel.com/html/js/jquery-3.1.1.min.js
     info: [script] -myportal.singtel.com/html/js/ssologin.js
     info: [img] -myportal.singtel.com/image/logo?id=1010&t=1517451680606
     info: [img] -myportal.singtel.com/image/journal/article?id=11254830&t=1490234525657
     info: [img] -myportal.singtel.com/image/journal/article?id=11254831&t=1490234525657
     info: [img] -myportal.singtel.com/image/journal/article?id=11254832&t=1490234525657
     info: [img] -myportal.singtel.com/image/journal/article?id=11254833&t=1490234525657
     info: [img] -myportal.singtel.com/image/journal/article?id=11254834&t=1490234525657
     info: [script] -myportal.singtel.com/express-portal-theme/js/main.js?browserId=ie&minifierType=js&languageId=US&b=6200&t=1496850188000
     info: [decodingLevel=0] found JavaScript
     error: undefined variable Liferay.Portlet
     error: line:1: SyntaxError: missing ; before statement:
          error: line:1: var Liferay.Portlet = 1;
          error: line:1: ....^
     error: line:3: SyntaxError: missing = in XML attribute:
          error: line:3: <!DOCTYPE html> <html class="aui ltr" dir="ltr" lang="en-US"> <head> <meta http-equiv="X-UA-Compatible" content="IE=edge" /> <title>Home - My Portal</title> <meta content="initial-scale=1.0, width=device-width" name="viewport" /> <meta content="IE=edge" h
          error: line:3: ..............^
&
Quote
(script) -myportal.singtel.com/html/js/jquery-3.1.1.min.js
     status: (referer=-myportal.singtel.com/web/guest/home)-
     info: [decodingLevel=0] found JavaScript
     error: undefined variable n
     suspicious: maxruntime exceeded 10 seconds (incomplete)

polonus (volunteer website security analyst and website error-hunter)
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Offline HonzaZ

  • Avast team
  • Advanced Poster
  • *
  • Posts: 1038
Re: Website reported as blocked for URL:Mal, report false infection?
« Reply #2 on: February 05, 2018, 09:11:37 AM »
Hi,
I do not think hxxps://myportal.singtel[.]com/web/guest/home is blocked - I can visit it with Avast on without a problem.
Can you attach a printscreen of the detection, please?