Site Blocked - URL:Phishing

[Pondus]

Hi,

Since a few days, Avast is bloquing the access to https://ing.ingdirect.es/pfm/#login/

Could you please see what is happening?

Thanks

See >> https://forum.avast.com/index.php?topic=223475.0

[Hennaboy]

Funny, however, I was referring to the writers of the avast software being the bunch of 5yr olds. Blocking a site for url phishing based on a logo hosted at the site linking back to the homepage of the same site is hardly grounds for something suspicious.

I never got a reply from a member of staff the first time I reported this so I wont hold my breath for one this time either.

Hi Henna-boy,

I haven't a clue what 5-years old may be  capable of doing with PHP-based software and jQuery on a website  . Either they have build it up from the ground or developed it as a drill-down.

Little old me just reported here for security weaknesses, I stumbled upon, and it is up to you to take this info into account or not or inform your hoster and/or web-admin of such facts. I from my side just thank avast webforums for creating a platform for me to do this.
If it helps just towards a slightly more secure website I am happy to do so.

Then again I am no clairvoyant and cannot say why avast should block the site and where they have based this blockage upon. You should hear that from the "zebra's mouth" as only avast team members could tell you and also inform you that they will unblock your site. Wait for one to appear after the week-end.

polonus (volunteer third party cold reconnaissance website security analyst and website error-hunter)

[Asyn]

I never got a reply from a member of staff the first time I reported this so I wont hold my breath for one this time either.

In fact, you did - see Reply #44.

[polonus]

Hi Asyn,

It could also be that reporting avast user has not updated definitions and that is why OP still get alerts from visitor's of his site.

Fully upgrade, update and patch always and under all circumstances  is a general wise word to literally everyone online.

polonus

[uedmawml]

Hi,
I disabled detection causing your site not being accessible. It should be OK after next streaming update. We are sorry for your inconvenience.
Jirka

Hello could You check why https://biolifechain.io AVAST detect as Phishing?
Regards

[polonus]

Site has many security related issues, re:
https://webscan.upguard.com/#/https://biolifechain.io/
71 security related issues to be tackled:
https://webhint.io/scanner/bec80d57-e960-4edd-b516-dac1e4398bdc#Security
Given as OK here: https://sitecheck.sucuri.net/results/https/www.biolifechain.io
and here: http://www.isithacked.com/check/https%3A%2F%2Fwww.biolifechain.io
Loaded resources seems OK from Google Safebrowsing's point of view.

Given as malicious here: https://zulu.zscaler.com/submission/8a1fa44d-f583-4401-b57c-05c5f723ad07
A 100% PHISH!

Wait for an avast team member to give a final verdict on the website, as they are the only ones to come and unblock. We here are just volunteers with relative knowledge.

polonus (volunteer website security analyst and website error-hunter)

[savcin]

Already fixed

[shaon016]

Hi, my site www.avijatrik,org is blocked by Avast. I've resolved all the problems and including the ones showing in Google Webmaster. My website is completely secure. Please unlock the site.

[Asyn]

-> https://sitecheck.sucuri.net/results/www.avijatrik.org
-> https://zulu.zscaler.com/submission/c8e6d320-c94b-417d-9755-83ebd10c7904
-> https://www.virustotal.com/#/url/068ad5956837baaf89e6c75be9a750493051463c2488ada3fee978946f37810c/detection

You can report a suspected FP (File/Website) here: https://www.avast.com/false-positive-file-form.php

[Hennaboy]

Hi Asyn,

It could also be that reporting avast user has not updated definitions and that is why OP still get alerts from visitor's of his site.

Fully upgrade, update and patch always and under all circumstances  is a general wise word to literally everyone online.

polonus

The customer reporting it has updated avast. Website still apparently blocked so they had to disable avast to place an order.

[Pondus]

See my post about how to report  >>  https://forum.avast.com/index.php?topic=14433.msg1289438#msg1289438

[Stanislaff]

Hello i have the same problems with my domains:

wallet.mandarinbank.com and my.mandarin.life

please unlock them.

[polonus]

3 vulnerable jQuery libraries detected: https://retire.insecurity.today/#!/scan/bd4693f596b0b415bd52a18b3281d6426e50a389ef323414e46833d1025965b7
Recommendations: https://webhint.io/scanner/c6c7d276-6948-4482-a073-04d49e9faf16
& C- scan grade: https://observatory.mozilla.org/analyze/my.mandarin.life

polonus (volunteer website security analyst and website error-hunter)

[Kennef]

Hi, I keep getting this message "We've safely aborted connection on thepirate.party because it was infected with URL:Phishing"

I want to BLOCK this message from appearing on my screen. How do I stop it from happening?

[Pondus]

I want to BLOCK this message from appearing on my screen. How do I stop it from happening?

options:
1. dont go  to that site
2: report it to avast lab as possible false positive