Author Topic: Site Blocked - URL:Phishing  (Read 83551 times)

0 Members and 1 Guest are viewing this topic.

Offline Asyn

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 62805
    • >>>  Avast Forum - Deutschsprachiger Bereich  <<<
Re: Site Blocked - URL:Phishing
« Reply #285 on: June 17, 2019, 02:16:56 PM »
Hello,

I have the same problem with my Website:
hxxps://appraisermatch.com
Can you unlock URL?
You can report a suspected FP (File/Website) here: https://www.avast.com/false-positive-file-form.php
Win 8.1 [x64] - Avast PremSec 20.1.2396.Beta#3 [UI.457] - CC 5.63 - EEK - Firefox ESR 68.5 [NS/AOS/uBO/PB] - TB 68.5 - ASB/ASL.BC
Deutschsprachiger Bereich -> Avast Wissenswertes (Downloads, Anleitungen & Infos): https://forum.avast.com/index.php?topic=60523.0

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 32159
  • malware fighter
Re: Site Blocked - URL:Phishing
« Reply #286 on: June 17, 2019, 04:51:11 PM »
There was an error executing your search, please adjust your search-term and try again. Message:

[token_mgr_error] token_mgr_error: Lexical error at line 1, column 32. Encountered: <EOF> after : ""
OK: https://www.virustotal.com/gui/url/2101fabb785aad5893f6b68acc2c9f009b266767bb38d990d4d38646c4d1154e/detection

linting results: https://webhint.io/scanner/6576ead2-659b-4463-b445-0e1ef7529685

dom-xss in modernizr: Results from scanning URL: -https://www.appraisermatch.com/static/63u8YyfqWyKm0q2DD3lRBpOzLnZhQjSmWhPELGnxS68.js
Number of sources found: 55
Number of sinks found: 17

Re: https://urlscan.io/result/2393f7fb-8b30-44e3-b187-a946e668d9f8/loading
& https://observatory.mozilla.org/analyze/appraisermatch.com
Re: https://www.appraisermatch.com/static/5yP0mGjB8MlfyypmQCf4Yk9feM8vLYBJnYjSAaDKikp.json

polonus
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Offline jefferson sant

  • Starting Graphoman
  • *
  • Posts: 6550
  • volunteer
Re: Site Blocked - URL:Phishing
« Reply #287 on: June 19, 2019, 05:33:16 PM »
Hello,
I have the same problem with my Website:
hxxps://appraisermatch.com
Can you unlock URL?

Detection was removed in 19.06.2019 08:33

Quote from: Avast
Our virus specialists have now cleared its reputation in our database.

With URLs this change should be instant, but it might take up to 24 hours with files.

Offline pavleta.taseva

  • Newbie
  • *
  • Posts: 1
Re: Site Blocked - URL:Phishing
« Reply #288 on: June 24, 2019, 02:05:00 PM »
Hello, I am having the same issue with my shopify store (password protected for the moment), namely:
https://www.my-little-store.com/password
Since today it says that the website can harm my pc and it is blocled, saying URL: Phishing. I included it in my exceptions lists of trusted sites but what about my future customers? Why my site is listed as scammy? Please, help me and unblock it or you could also give me directions what to remove from it in order to be able to be white listed again.
Thanks in advance!

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 36431
  • Weihrauch Airguns
Re: Site Blocked - URL:Phishing
« Reply #289 on: June 24, 2019, 02:30:08 PM »
Report a false positive (select file or website)
https://www.avast.com/false-positive-file-form.php


Offline jefferson sant

  • Starting Graphoman
  • *
  • Posts: 6550
  • volunteer
Re: Site Blocked - URL:Phishing
« Reply #290 on: June 26, 2019, 03:16:48 AM »
Hello, I am having the same issue with my shopify store (password protected for the moment), namely:
hxxps://www.my-little-store.com/password
Since today it says that the website can harm my pc and it is blocled, saying URL: Phishing. I included it in my exceptions lists of trusted sites but what about my future customers? Why my site is listed as scammy? Please, help me and unblock it or you could also give me directions what to remove from it in order to be able to be white listed again.
Thanks in advance!

Detection was removed 25.06.2019

Quote from: Avast
Our virus specialists have been working on this problem and it has now been resolved. The provided website isn't detected by Avast anymore.

Offline ivakhasashahacker

  • Newbie
  • *
  • Posts: 1
Re: Site Blocked - URL:Phishing
« Reply #291 on: June 26, 2019, 07:16:57 PM »
Сайт блокирует антивирус AVSST https://fingid-olimp.com.ua/

Можете поправить этот глюк

С ув, Алексайндр

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 32159
  • malware fighter
Re: Site Blocked - URL:Phishing
« Reply #292 on: June 26, 2019, 09:43:12 PM »
Witam ivakhasashahacker,

I do not see problems for your site, as many other domains on that same IP address are being flagged,
that might be the cause of that FP.

One should ask an avast team member to exclude your particular site.
Only avast team members can do that, so wait for their final verdict.

We here are just volunteers with relevant knowledge in the field of 3rd party cold reconnaissance website security.

Consider the following results.

Re: https://urlquery.net/report/1003ac1a-eae6-4e6d-a839-3d0680bce768
Given OK: https://www.virustotal.com/gui/url/731242651cec57b39ee7dd6521232d405ebb13c0c2f798f9950306081a9832fa/detection
Some improvement tips found through linting: https://webhint.io/scanner/504f3289-2dc5-4c8a-954d-19141d5615dc
Pay special attention to the security section there.

Check plug-ins for latest versions:    wp-rocket   & team-showcase

Reputation Check
Quote
PASSED
Google Safe Browse: OK
Spamhaus Check: OK
Abuse CC: OK
Dshield Blocklist: OK

Wszystkiego dobrego,
pozdrawiam,

polonus (volunteer 3rd party cold reconnaissance website security analyst and website error-hunter)
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Offline jefferson sant

  • Starting Graphoman
  • *
  • Posts: 6550
  • volunteer
Re: Site Blocked - URL:Phishing
« Reply #293 on: June 28, 2019, 02:32:04 PM »
Сайт блокирует антивирус AVSST hxxps://fingid-olimp.com.ua/

Можете поправить этот глюк

С ув, Алексайндр

Detection was removed on 28.06.2019

Quote from: Avast
Our virus specialists have now cleared its reputation in our database.

With URLs this change should be instant, but it might take up to 24 hours with files.

Offline Nimesh3

  • Newbie
  • *
  • Posts: 1
Re: Site Blocked - URL:Phishing
« Reply #294 on: July 02, 2019, 05:18:46 AM »
Hello, I am having a problem with my website www.wikye.com  it is reported as phishing website by avast.

I checked everything including files and found nothing is malicious.

https://sitecheck.sucuri.net/results/https/www.wikye.com

Please unblock my website asap.

I am having problems with it.

Offline Asyn

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 62805
    • >>>  Avast Forum - Deutschsprachiger Bereich  <<<
Re: Site Blocked - URL:Phishing
« Reply #295 on: July 02, 2019, 05:22:22 AM »
You can report a suspected FP (File/Website) here: https://www.avast.com/false-positive-file-form.php
Win 8.1 [x64] - Avast PremSec 20.1.2396.Beta#3 [UI.457] - CC 5.63 - EEK - Firefox ESR 68.5 [NS/AOS/uBO/PB] - TB 68.5 - ASB/ASL.BC
Deutschsprachiger Bereich -> Avast Wissenswertes (Downloads, Anleitungen & Infos): https://forum.avast.com/index.php?topic=60523.0

Offline jefferson sant

  • Starting Graphoman
  • *
  • Posts: 6550
  • volunteer
Re: Site Blocked - URL:Phishing
« Reply #296 on: July 03, 2019, 12:43:02 AM »
Hello, I am having a problem with my website wxw.wikye[.]com  it is reported as phishing website by avast.

I checked everything including files and found nothing is malicious.

https://sitecheck.sucuri.net/results/https/www.wikye.com

Please unblock my website asap.

I am having problems with it.

Detection was removed 02.07.2019

Quote from: Avast
Our virus specialists have been working on this problem and it has now been resolved. The provided website isn't detected by Avast anymore.

Offline hembat99

  • Newbie
  • *
  • Posts: 1
Re: Site Blocked - URL:Phishing
« Reply #297 on: July 05, 2019, 07:30:07 PM »
Pls unblock my website too...It's a false detection

-www.repelmos.in

Pls unblock it.
« Last Edit: July 07, 2019, 08:44:28 PM by hembat99 »

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 82546
  • No support PMs thanks
Re: Site Blocked - URL:Phishing
« Reply #298 on: July 05, 2019, 08:12:32 PM »
Pls unblock my website too...It's a false detection

repelmos.in

Pls unblock it.

False positive or not (we don't know that as yet) please modify the url so it isn't active to avoid accidental exposure.

As has been mentioned in this topic report it:
Report a false positive (select file or website)
https://www.avast.com/false-positive-file-form.php
WinXP ProSP3/ Core2Duo E8300/ 4GB Ram/ avast! free 18.5.2342/ Firefox ESR, uBlock Origin, uMatrix/ MailWasher Pro7.11.0/ DropMyRights/ WinPatrol+/ Drive Image 7.1/ SnagIt 10.0/ avast! mobile security
Windows 10 Home 1909 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 19.8.2393 (build 19.8.4257.552) UI-1.0.440/ WinPatrol+/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro7.11.0/ WinPatrol+/

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 32159
  • malware fighter
Re: Site Blocked - URL:Phishing
« Reply #299 on: July 05, 2019, 10:30:57 PM »
Hi hembat99,

DavidR is right here. Until an avast team member has given a final verdict, the policy here on the forums is to break links to potentially suspicious or malicious url. So -repelmos.in or -http or -https etc. or hxtp or hxtps etc.

The website is not flagged here: https://www.virustotal.com/gui/url/077dc95d60f28f07bf2f3b390695feb26afa785268ee5afbb15726988aaf24f6/details

But it has outdated WordPress CMS version and outdated PHP software and other issues as described here: https://sitecheck.sucuri.net/results/www.repelmos.in   and has a reputation check warning...

Quote
Note: It looks like your site has returned a 403 Forbidden. In some cases the firewall or a bad bot utility will block the use of this tool as a "fake Googlebot", the primary reason for this is the tool is a "fake Googlebot". With a 403 response you should use the Fetch as Goolgebot utility in Webmaster Tools to verify your site is returning a 403.


Private exploit filetype.php HAXPLORER detected in source.code...https://support.clean-mx.com/clean-mx/md5.php?Antiy_AVL=Backdoor/PHP.WebShell   re: line 199 -> https://aw-snap.info/file-viewer/?protocol=not-secure&ref_sel=GSP2&ua_sel=ff&chk-cache=&fs=1&tgt=d3d3Ln17cHtsbV1zLltuYA%3D%3D~enc

Avast would detect PHP-Agent-AM or likewise for this backdoor.....

polonus (volunteer 3rd party cold reconnaissance website security analyst and website error-hunter)
« Last Edit: July 05, 2019, 10:34:48 PM by polonus »
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!