« previous next »
Pages: 1 ... 29 30 [31] 32   Go Down

Author Topic: Site Blocked - URL:Phishing  (Read 72547 times)

0 Members and 1 Guest are viewing this topic.

Offline RestoPro

  • Newbie
  • *
  • Posts: 3
Re: Site Blocked - URL:Phishing
« Reply #450 on: November 19, 2019, 04:09:05 PM »
I reported one website to see their answer and their delays. I hope they will do the necessary otherwhise we'll have to start official process against them.
Logged

Online polonus

  • Avast Überevangelist
  • Maybe Bot
  • *****
  • Posts: 31966
  • malware fighter
Re: Site Blocked - URL:Phishing
« Reply #451 on: November 19, 2019, 10:27:31 PM »
Hi RestoPro,

You should wait for an avast team member to give a final verdict and explanation, why there is no FP.

I for now see no detections elsewhere and a clean blacklist timeline for given domains.

According to me the detection is because of the hosting domain certificate common_name_invalidity.
See: https://toolbar.netcraft.com/site_report?url=mgnt.vixns.net
This site has a certificate error - is flagged by Google Safe Browsing as an unsafe connection
For mgnt.vinxns dot net I get a "NET::ERR_CERT_COMMON_NAME_INVALID".

and https://aw-snap.info/file-viewer/?protocol=secure&ref_sel=GSP2&ua_sel=ff&chk-cache=&fs=1&tgt=d3d3Lmx8LXR8Ymx7LSN1LV5dW24tfXtzdHx1fXxudC1zfFtudC1oe31ibHxbbi5eXW1g~enc

Nothing out of the ordinairy here: https://webcookies.org/cookies/www.la-table-du-coin-restaurant-saint-herblain.com/28658816?889543

Is the link to MNSocial.ttf above board? Check file for Trojan Agent malcode, could be that was held to be the FP. *

polonus

* Downloaded it and found it to be safe.
« Last Edit: November 19, 2019, 10:38:00 PM by polonus »
Logged
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Offline ipstop

  • Newbie
  • *
  • Posts: 3
Re: Site Blocked - URL:Phishing
« Reply #452 on: November 25, 2019, 03:03:40 PM »
hello i have the same problem with my Website:
htxps://mnstat.website
i did few tests and no malware found
take a look
https://rescan.pro/result.php?2338d82766c553fe1731bdc3e986af91
https://scanner.pcrisk.com/detailed_report/mnstat.website#details
https://sitecheck.sucuri.net/results/https/mnstat.website
no malware found...
Can you unlock URL?
« Last Edit: November 25, 2019, 04:37:57 PM by Milos »
Logged

Offline Pondus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 36319
  • Weihrauch Airguns
Re: Site Blocked - URL:Phishing
« Reply #453 on: November 25, 2019, 03:12:37 PM »
Report a false positive (select file or website)

>>  https://www.avast.com/false-positive-file-form.php



Logged

Online polonus

  • Avast Überevangelist
  • Maybe Bot
  • *****
  • Posts: 31966
  • malware fighter
Re: Site Blocked - URL:Phishing
« Reply #454 on: November 25, 2019, 04:54:50 PM »
Important to make users aware how to report FP to avast team members,
as they are the only ones to unblock.

As we see here for the website mentioned above, as it is made using jQuery, it is important to notice this retirable jQuery library,
see: https://retire.insecurity.today/#!/scan/15375ba00864c7476694919a201a94e3165796e1397bddc9cc74c613c1b6b83e

Recommendations to come to a better website found through linting:
https://webhint.io/scanner/83482881-f961-474a-a36d-731ed8c6aa02  (96 hints).

No present detection on VT: https://www.virustotal.com/gui/ip-address/45.76.182.146/relations

Wait for a final verdict from an avast teeam member for an eventual unblocking.

polonus (volunteer 3rd party cold recon website security analyst & website error-hunter)
Logged
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Offline jefferson sant

  • Starting Graphoman
  • *
  • Posts: 6437
  • volunteer
Re: Site Blocked - URL:Phishing
« Reply #455 on: November 25, 2019, 10:17:49 PM »
Quote from: RestoPro on November 19, 2019, 04:09:05 PM
I reported one website to see their answer and their delays. I hope they will do the necessary otherwhise we'll have to start official process against them.

Detection was been removed in 20.11.2019
Logged

Offline ipstop

  • Newbie
  • *
  • Posts: 3
Re: Site Blocked - URL:Phishing
« Reply #456 on: November 26, 2019, 01:08:00 PM »
thanks a lot all of us.
Logged

Offline ipstop

  • Newbie
  • *
  • Posts: 3
Re: Site Blocked - URL:Phishing
« Reply #457 on: November 26, 2019, 01:08:55 PM »
Quote from: polonus on November 25, 2019, 04:54:50 PM
Important to make users aware how to report FP to avast team members,
as they are the only ones to unblock.

As we see here for the website mentioned above, as it is made using jQuery, it is important to notice this retirable jQuery library,
see: https://retire.insecurity.today/#!/scan/15375ba00864c7476694919a201a94e3165796e1397bddc9cc74c613c1b6b83e

Recommendations to come to a better website found through linting:
https://webhint.io/scanner/83482881-f961-474a-a36d-731ed8c6aa02  (96 hints).

No present detection on VT: https://www.virustotal.com/gui/ip-address/45.76.182.146/relations

Wait for a final verdict from an avast teeam member for an eventual unblocking.

polonus (volunteer 3rd party cold recon website security analyst & website error-hunter)

THANKS, IM WORKING ON IT.
Logged

Online polonus

  • Avast Überevangelist
  • Maybe Bot
  • *****
  • Posts: 31966
  • malware fighter
Re: Site Blocked - URL:Phishing
« Reply #458 on: November 26, 2019, 01:15:54 PM »
Hi ipstop,

You're welcome. Thanks for reporting and being responsible.
It is not only you and your website(s) that will get more secure.

That is why we are into it, and you did the right thing.

Have a nice day,

polonus (volunteer 3rd party cold recon website security analyst & website error-hunter)
Logged
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Offline Paramita3

  • Newbie
  • *
  • Posts: 3
Re: Site Blocked - URL:Phishing
« Reply #459 on: December 02, 2019, 09:55:49 AM »
Hi,  I have one Website ( niveducation.com), it is not opening all time showing phishing. But it has been checked by GGOGLE SAFE BROWSER,  100% safe, NO MALWARE, NO VIRUS, BUT those computers are having Avast antivirus , always blocking my sites, Please check it, And try to disable the phishing.
 
Logged

Offline Asyn

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 61892
    • >>> Avast Forum - Deutschsprachiger Bereich <<<
Re: Site Blocked - URL:Phishing
« Reply #460 on: December 02, 2019, 10:03:11 AM »
Logged
W8.1 [x64] - Avast PremSec 19.9.2394.B#1 - CC 5.63 - EEK - Firefox ESR 68.3 [NS/AOS/uBO/PB] - Thunderbird 68.3 [EM] - ACP/ASL.BC
Deutschsprachiger Bereich -> Avast Wissenswertes (Downloads, Anleitungen & Infos): https://forum.avast.com/index.php?topic=60523.0

Offline Paramita3

  • Newbie
  • *
  • Posts: 3
Re: Site Blocked - URL:Phishing
« Reply #461 on: December 02, 2019, 11:02:18 AM »
hi i have one blog niveducation.com
it is an educational blog
it has nothing phishing in it. it it cleared in all antivirus.google has also cleared.
it is blocked by avast.

kindly review my site and please unblock it.
regards
paramita
email:paramita.dassarma@gmail.com
Logged

Online polonus

  • Avast Überevangelist
  • Maybe Bot
  • *****
  • Posts: 31966
  • malware fighter
Re: Site Blocked - URL:Phishing
« Reply #462 on: December 02, 2019, 03:14:15 PM »
Hi Paramita3,

Linting produced 435 improvement recommendations:
https://webhint.io/scanner/21b585e5-8019-482c-a925-16d5f63d1396

Reputation Check
PASSED
Google Safe Browse:OK
Spamhaus Check:OK
Abuse CC:OK
Dshield Blocklist:OK
Cisco Talos Blacklist: OK

Word Press configuration seems OK.

Detected through Retire.Js:
Quote
Retire.js
jquery   1.12.4   Found in https://niveducation.com/wp-includes/js/jquery/jquery.js?ver=1.12.4-wp
Vulnerability info:
Medium   2432 3rd party CORS request may execute CVE-2015-9251   
Medium   CVE-2015-9251 11974 parseHTML() executes scripts in event handlers
Low   CVE-2019-11358 jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution

IP detection has not changed since two years ago.
For address last detections 4 av engines at 2019-12-02, that is to-day's.
https://www.virustotal.com/gui/url/5b6bd09c2608c10cc2ec4829172e5109ef5c6ea27b0fd341330c452b0119cb2f/detection

Wait for an avast team member to give a final verdict, but be aware other av-vendors have the website also blacklisted.
Privacy grade is a B+ grade's.

polonus (3rd party cold recon website security analyst and website error-hunter)
« Last Edit: December 02, 2019, 03:32:02 PM by polonus »
Logged
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Offline Paramita3

  • Newbie
  • *
  • Posts: 3
Re: Site Blocked - URL:Phishing
« Reply #463 on: December 03, 2019, 07:04:36 PM »
i have sent the application for whitelisting program of Avast, i have attached the whitelisting document. but my sit i.e https://niveducation.com/ is still block in avast, kindly unblock it.
paramita
paramita.dassarma@gmail.com 
Logged

Offline jefferson sant

  • Starting Graphoman
  • *
  • Posts: 6437
  • volunteer
Re: Site Blocked - URL:Phishing
« Reply #464 on: December 04, 2019, 02:02:45 AM »
Quote from: Paramita3 on December 02, 2019, 11:02:18 AM
hi i have one blog niveducation.com
it is an educational blog
it has nothing phishing in it. it it cleared in all antivirus.google has also cleared.
it is blocked by avast.

kindly review my site and please unblock it.
regards
paramita

Detection was removed in 03.12.2019 at 06:53 AM.

Quote from: Avast
Our virus specialists have now cleared its reputation in our database.

With URLs this change should be instant, but it might take up to 24 hours with files.
Logged
Pages: 1 ... 29 30 [31] 32   Go Up
« previous next »