Author Topic: Site Blocked - URL:Phishing  (Read 105367 times)

0 Members and 1 Guest are viewing this topic.

Offline jefferson sant

  • Starting Graphoman
  • *
  • Posts: 6829
  • volunteer
Re: Site Blocked - URL:Phishing
« Reply #435 on: October 30, 2019, 03:29:06 PM »
Hi, my site hxxps://pyramid-1491.com/ is being detected as url:phishing by avast. Can you help to unblock the site?

Detection was removed in 30.10.2019 at 09:13 AM.

Quote from: Avast
Our virus specialists have now cleared its reputation in our database.

With URLs this change should be instant, but it might take up to 24 hours with files.
Contribua para ajudar a manter esse trabalho
Doar

Offline Jamie131

  • Newbie
  • *
  • Posts: 2
Re: Site Blocked - URL:Phishing
« Reply #436 on: November 10, 2019, 12:33:50 PM »
Please unblock: https://www.verpakkingenzo.nl/ site is all clear
The phising has been removed a few months ago

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 32528
  • malware fighter
Re: Site Blocked - URL:Phishing
« Reply #437 on: November 10, 2019, 01:42:16 PM »
Hallo Jamie131,

VirusTotal does give the website as clean: https://www.virustotal.com/gui/file/f730c6185bde492f4eec5364f5cdb212ce0d7a77e77bcfa5bfd6415e511d72aa/behavior/VirusTotal%20Cuckoofork
and https://www.virustotal.com/gui/url/f98d33c625fe20c00a3d6fe54f6bdffc94b6830dd76b61a15eae26eb45ee1aa5/details

There were 2 engines to detect, but that was the previous month:
https://www.virustotal.com/gui/url/45b57651d4d6fcf580d1f39e13d4211c3c320af64e513d73b5ce71ae6ee4d4be/detection
Hopefully that all has been cleansed.

Did some linting for the website, see 49 recommendations there:
https://webhint.io/scanner/a585099b-a1de-4a50-94b4-2701b6174b0b

Wait for a final verdict from an avast team member, they are the only ones to come and unblock.
We here are just volunteers with relevant knowledge for website security improvement advice.

Met vriendelijke groet,

polonus (volunteer 3rd party cold recon website security analyst and website error-hunter)
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Offline stalker780

  • Newbie
  • *
  • Posts: 2
Re: Site Blocked - URL:Phishing
« Reply #438 on: November 11, 2019, 06:29:39 PM »
Hi, what is wrong with https://lovelybunny.com.ua?

Why is it blocked for phishing?  :o

It never had any security problems or viruses.

PS
you captcha blew my mind 100 times till I placed this post :(

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 83301
  • No support PMs thanks
Re: Site Blocked - URL:Phishing
« Reply #439 on: November 11, 2019, 06:39:12 PM »
Hi, what is wrong with hxxps://lovelybunny.com.ua?

Why is it blocked for phishing?  :o

It never had any security problems or viruses.

PS
you captcha blew my mind 100 times till I placed this post :(

You can report a suspected FP (File/Website) here: https://www.avast.com/false-positive-file-form.php

Just because you haven't had any security problems or viruses doesn't mean you won't.

That said nothing found at https://sitecheck.sucuri.net/results/lovelybunny.com.ua, so use the report a suspected FP site in the link above.

The Captcha, is only for the first three posts, it is an anti spam measure so has to be hard.
WinXP ProSP3/ Core2Duo E8300/ 4GB Ram/ avast! free 18.5.2342/ Firefox ESR, uBlock Origin, uMatrix/ MailWasher Pro7.11.0/ DropMyRights/ WinPatrol+/ Drive Image 7.1/ SnagIt 10.0/ avast! mobile security
Windows 10 Home 1909 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 20.5.2415 (build 20.5.5410.561) UI-1.0.532/ WinPatrol+/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro

Offline stalker780

  • Newbie
  • *
  • Posts: 2
Re: Site Blocked - URL:Phishing
« Reply #440 on: November 11, 2019, 06:58:55 PM »


You can report a suspected FP (File/Website) here: https://www.avast.com/false-positive-file-form.php

Just because you haven't had any security problems or viruses doesn't mean you won't.

That said nothing found at https://sitecheck.sucuri.net/results/lovelybunny.com.ua, so use the report a suspected FP site in the link above.

The Captcha, is only for the first three posts, it is an anti spam measure so has to be hard.

Already reported. Thanks

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 83301
  • No support PMs thanks
Re: Site Blocked - URL:Phishing
« Reply #441 on: November 11, 2019, 08:01:08 PM »
You're welcome.
WinXP ProSP3/ Core2Duo E8300/ 4GB Ram/ avast! free 18.5.2342/ Firefox ESR, uBlock Origin, uMatrix/ MailWasher Pro7.11.0/ DropMyRights/ WinPatrol+/ Drive Image 7.1/ SnagIt 10.0/ avast! mobile security
Windows 10 Home 1909 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 20.5.2415 (build 20.5.5410.561) UI-1.0.532/ WinPatrol+/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 32528
  • malware fighter
Re: Site Blocked - URL:Phishing
« Reply #442 on: November 11, 2019, 10:10:57 PM »
This could well have been an FP because of another domain detected sharing the same IP:
https://www.virustotal.com/gui/ip-address/78.46.204.251/relations

polonus
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Offline jefferson sant

  • Starting Graphoman
  • *
  • Posts: 6829
  • volunteer
Re: Site Blocked - URL:Phishing
« Reply #443 on: November 12, 2019, 03:02:34 AM »
Please unblock: hxxps://www.verpakkingenzo.nl/ site is all clear
The phising has been removed a few months ago

Detection was removed in 11.11.2019 at 05:59 AM.

Quote
Our virus specialists have now cleared its reputation in our database.

With URLs this change should be instant, but it might take up to 24 hours with files.
Contribua para ajudar a manter esse trabalho
Doar

Offline Jamie131

  • Newbie
  • *
  • Posts: 2
Re: Site Blocked - URL:Phishing
« Reply #444 on: November 13, 2019, 07:31:00 AM »
Hallo Jamie131,

VirusTotal does give the website as clean: https://www.virustotal.com/gui/file/f730c6185bde492f4eec5364f5cdb212ce0d7a77e77bcfa5bfd6415e511d72aa/behavior/VirusTotal%20Cuckoofork
and https://www.virustotal.com/gui/url/f98d33c625fe20c00a3d6fe54f6bdffc94b6830dd76b61a15eae26eb45ee1aa5/details

There were 2 engines to detect, but that was the previous month:
https://www.virustotal.com/gui/url/45b57651d4d6fcf580d1f39e13d4211c3c320af64e513d73b5ce71ae6ee4d4be/detection
Hopefully that all has been cleansed.

Did some linting for the website, see 49 recommendations there:
https://webhint.io/scanner/a585099b-a1de-4a50-94b4-2701b6174b0b

Wait for a final verdict from an avast team member, they are the only ones to come and unblock.
We here are just volunteers with relevant knowledge for website security improvement advice.

Met vriendelijke groet,

polonus (volunteer 3rd party cold recon website security analyst and website error-hunter)

Thanks for your reply. Is there a form i need to fill out to let a Avast team member check and unblock, or is this forum the right place.

Thanks again

Offline Asyn

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 65372
    • >>>  Avast Forum - Deutschsprachiger Bereich  <<<
Re: Site Blocked - URL:Phishing
« Reply #445 on: November 13, 2019, 07:33:45 AM »
You can report a suspected FP (File/Website) here: https://www.avast.com/false-positive-file-form.php
Win 8.1 [x64] - Avast PremSec 20.5.2415.BUC [UI.532] - CC 5.68 - EEK - FF ESR 68.10 [NS/AOS/uBO/PB] - TB 68.10 - SB/CP/SL/DU.BC
Deutschsprachiger Bereich -> Avast Wissenswertes (Downloads, Anleitungen & Infos): https://forum.avast.com/index.php?topic=60523.0

Offline RestoPro

  • Newbie
  • *
  • Posts: 3
Re: Site Blocked - URL:Phishing
« Reply #446 on: November 19, 2019, 03:38:42 PM »
You chrome extension declare our websites as phishing !!

We have a big problem with your chrome extension which declare some of our websites as fishing so that they are restaurant official websites. It blocks the visitor completely and prevents him from accessing the restaurant's official site.

Because of you, visitors with your extension cannot access to thoses websites.

Here are some examples of website :

https://www.la-table-du-coin-restaurant-saint-herblain.com/
https://www.la-brasserie-de-la-place-restaurant-aix-en-provence.com
https://www.brasserie-gg-restaurant-la-fare-les-oliviers.com
https://www.le-pacha-du-sloop-restaurant-st-jean-cap-ferrat.com
https://www.la-merenda-de-la-place-restaurant-gattieres.com
https://www.casa-luna-restaurant-saint-laurent-du-var.com
https://www.le-rendez-vous-restaurant-aix-en-provence.com
https://www.le-rendez-vous-aixois-restaurant-aix-en-provence.com
https://www.domaine-de-cocagne-restaurant-cagnes-sur-mer.com
https://www.le-zen-restaurant-plan-de-campagne-cabries.com
https://www.la-voile-bleue-restaurant-mandelieu-la-napoule.com
https://www.les-tables-de-la-fontaine-restaurant-avignon.com
https://www.restaurant-comptoir-des-barons-aix-en-provence.com

This is is not full, it is just a sample.

All thoses websites are restaurant official websites. They receive bookings thanks to thoses websites.

So can you add all our websites to your whitelist (thoses one and the future websites) Or can you explain us why your extension blocks thoses websites.

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 36684
Re: Site Blocked - URL:Phishing
« Reply #447 on: November 19, 2019, 03:55:40 PM »
Report a false positive (select file or website)

>>  https://www.avast.com/false-positive-file-form.php




Offline RestoPro

  • Newbie
  • *
  • Posts: 3
Re: Site Blocked - URL:Phishing
« Reply #448 on: November 19, 2019, 04:01:49 PM »
I launch 40 official restaurant website per month, I can't always report a false positive. I Want to undertsnad why your declare them as phishing.

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 36684
Re: Site Blocked - URL:Phishing
« Reply #449 on: November 19, 2019, 04:03:52 PM »
I launch 40 official restaurant website per month, I can't always report a false positive. I Want to undertsnad why your declare them as phishing.
And if you report avast lab will answer you / tell you why