Author Topic: Site Blocked - URL:Phishing  (Read 60784 times)

0 Members and 1 Guest are viewing this topic.

Offline mindeeforman

  • Newbie
  • *
  • Posts: 2
Re: Site Blocked - URL:Phishing
« Reply #15 on: September 04, 2018, 04:11:56 PM »
Hi Avast Team,

My sites are doing the same thing. They're using too much CPU bandwidth at the moment, but it's a known issue and I'm fixing it now. There's no phishing going on with either site:

coloradochoir[.]org
coloradochoir[.]com

Could you please fix/unblock that for me?

Thank you!
« Last Edit: September 04, 2018, 04:48:19 PM by HonzaZ »

Offline HonzaZ

  • Avast team
  • Advanced Poster
  • *
  • Posts: 1126
Re: Site Blocked - URL:Phishing
« Reply #16 on: September 04, 2018, 04:47:46 PM »
I am not sure what you mean by "using too much CPU"  :o
Anyway, there is this (and similar) URL: coloradochoir[.]org/si0zx/linkedin%20secure/d3e808897dc94238200097dc79b1c597 which doesn't seem ok...?

Offline mindeeforman

  • Newbie
  • *
  • Posts: 2
Re: Site Blocked - URL:Phishing
« Reply #17 on: September 06, 2018, 04:26:20 PM »
Thanks, HonzaZ. The site wasn't optimized well - it's better now.

I figured it out, actually... We just added SSL to our website and I hadn't updated all the URLs. We also switched from using .com to using .org as our main site. So I used a WordPress plugin to change all the http://coloradochoir.com URLs to https://coloradochoir.org URLs and now it works fine - no phishing alert popping up. Just an FYI for others...
« Last Edit: September 06, 2018, 09:33:25 PM by mindeeforman »

Offline Iro.345

  • Newbie
  • *
  • Posts: 3
Re: Site Blocked - URL:Phishing
« Reply #18 on: September 06, 2018, 09:10:50 PM »
I have similar problem with my page.
All links workc correcly except one category :  https://bit.ly/2M4KaQw
Could you  let me know what is wrong on this blocked page ?

Thanks Iro

Offline polonus

  • Avast Überevangelist
  • Maybe Bot
  • *****
  • Posts: 31772
  • malware fighter
Re: Site Blocked - URL:Phishing
« Reply #19 on: September 06, 2018, 11:39:57 PM »
Witam Iro.345,

Probably a redirect from that uri
Quote
URLs that redirect found in: -http://www.rzeszowiak.pl/Praca-Zatrudnie-3040011155

1: -http://hospicjum-podkarpackie.pl/images/pomoc_dla_hospicjum.gif -> -http://www.hospicjum-podkarpackie.pl/images/pomoc_dla_hospicjum.gif 

Probably not this SEO link being flagged: -https://kryogenix.org/code/browser/searchhi/

Likely it is a blocking for some porn sites that share that same IP you have.

Wait for an avast team member to reconsider the blocking, as we here are just volunteers with relevant knowledge.
Only avast team members can come and unblock, so wait for their final verdict on the website.

pozdrawiam,

polonus (volunteer 3rd party cold reconnaissance website security analyst and website error-hunter)
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Offline savcin

  • Avast team
  • Full Member
  • *
  • Posts: 121
Re: Site Blocked - URL:Phishing
« Reply #20 on: September 07, 2018, 02:30:23 PM »
Will be fixed.

Offline coinstravelfaq

  • Newbie
  • *
  • Posts: 1
Re: Site Blocked - URL:Phishing
« Reply #21 on: October 17, 2018, 04:03:41 AM »
Hi there!
It seems our website is also being blocked at app.coins.ph for URL:Phishing.

Can I ask for this page to be removed from the list as well?

Offline bauerj

  • Avast team
  • Jr. Member
  • *
  • Posts: 62
Re: Site Blocked - URL:Phishing
« Reply #22 on: October 18, 2018, 08:31:57 AM »
Hi,
detections on Your domain have been disabled, so Your domain should not been blocked anymore.
Jirka

Offline Rico Liao

  • Newbie
  • *
  • Posts: 1
Re: Site Blocked - URL:Phishing
« Reply #23 on: October 19, 2018, 06:15:07 AM »
Hi there,

We encounter the same issue. We are going to run a company campaign and we just setup a new web site . https://meow.pre-order.marscatgames.com.tw/
However , it was been detected as "url phishing" and block user access.  Please help .

Thanks
« Last Edit: October 19, 2018, 08:40:05 AM by Rico Liao »

Offline Milos

  • Avast team
  • Super Poster
  • *
  • Posts: 2085
Re: Site Blocked - URL:Phishing
« Reply #24 on: October 19, 2018, 10:14:04 AM »

Offline polonus

  • Avast Überevangelist
  • Maybe Bot
  • *****
  • Posts: 31772
  • malware fighter
Re: Site Blocked - URL:Phishing
« Reply #25 on: October 19, 2018, 11:16:38 AM »
Seems OK: https://www.virustotal.com/#/domain/meow.pre-order.marscatgames.com.tw
and https://meow.pre-order.marscatgames.com.tw/
Quote
Suspicious: maxruntime exceeded 10 seconds (incomplete) 0 bytes
-www.facebook.com/plugins/like.php?action=like&width=202&href=-https:/www.facebook.com/MEOW.MarsCat/&layout=count&locale=TW&sdk=joey&share=false&faces=false&size=large&width=70&_noscript=1&_noscript=1&_noscript=1 benign & -[script]
-static.xx.fbcdn.net/rsrc.php/v3/yl/r/yeLhlKrAIjX.js
     file: 77346df08951068e505377ec2c9f8b719ed5247f: 988639 bytes
and exceeded runtime for -(script) -meow.pre-order.marscatgames.com.tw/./js/jquery-3.3.1.min.js
No vuln. libraries for
Scanner output:
Scanning -https://meow.pre-order.marscatgames.com.tw/ ...
Script loaded: -https://connect.facebook.net/zh_TW/sdk.js#xfbml=1&version=v3.1
Script loaded: -https://meow.pre-order.marscatgames.com.tw/js/index.js?v=17
Script loaded: -https://meow.pre-order.marscatgames.com.tw/js/jquery-3.3.1.min.js
Script loaded: -https://static.xx.fbcdn.net/rsrc.php/v3iUNC4/ym/l/zh_TW/mzW5OhTjqjp.js
Script loaded: -https://static.xx.fbcdn.net/rsrc.php/v3iUNC4/ym/l/zh_TW/mzW5OhTjqjp.js
Status: success

polonus (volunteer website security analyst and website error-hunter)
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Offline bauerj

  • Avast team
  • Jr. Member
  • *
  • Posts: 62
Re: Site Blocked - URL:Phishing
« Reply #26 on: October 22, 2018, 09:06:00 AM »
Hi,
domain meow.pre-order.marscatgames.com[.]tw was removed from our blacklist on 19th October.
Jirka

Offline Hrytseliak Bohdan

  • Newbie
  • *
  • Posts: 1
Re: Site Blocked - URL:Phishing
« Reply #27 on: October 23, 2018, 09:47:12 AM »
Hello, dear developers and support team!

We are using LMS moodle as online e-learning in our Borys Grinchenko Kyiv University.
And from yesterday many of our students and teachers, who has AVAST antivirus got an error while working or studying at website http://elearning.kubg.edu.ua.
When they login, they get and error URL:Phishing. Can you advice what to do or remove this website http://elearning.kubg.edu.ua from your blacklist?

Thank you!
« Last Edit: October 23, 2018, 09:56:50 AM by Hrytseliak Bohdan »

Offline caroline.baujard

  • Dev
  • Newbie
  • *
  • Posts: 1
Re: Site Blocked - URL:Phishing
« Reply #28 on: October 23, 2018, 09:47:25 AM »
Since yesterday, our client cannot connect anymore to our web site https://prod3.ubicentrex.net/v173/pages/espaceperso.php.
They got a "URL fishing infection" error.
I am suspecting that the problem come to the client access iframe : https:// ubicentrex.fr/fr/acces-client/
Can you unblock it?

Offline Pondus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 36156
Re: Site Blocked - URL:Phishing
« Reply #29 on: October 23, 2018, 10:06:01 AM »
« Last Edit: October 23, 2018, 10:48:04 AM by Pondus »
“Ah beer. The cause of and the solution to all of life’s problems.”

"Operator! Give me the number for 911!"