Author Topic: Site Blocked - URL:Phishing  (Read 168776 times)

0 Members and 1 Guest are viewing this topic.

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33256
  • malware fighter
Re: Site Blocked - URL:Phishing
« Reply #660 on: May 06, 2021, 06:34:20 PM »
Cause of this probably:
Quote
Page URL History
This captures the URL locations of the websites, including HTTP redirects and client-side redirects via JavaScript or Meta fields.

-http://www.torreon.cl/ HTTP 301
-https://www.torreon.cl/ Page URL
-https://www.torreon.cl/es/ HTTP 301
-https://torreon.cl/es/ Page URL
Redirected requests
There were HTTP redirect chains for the following requests:

Request Chain 0
 -http://www.torreon.cl/ HTTP 301
 -https://www.torreon.cl/

Wait for a final verdict from an avast team ember as they are the only ones to come and unblock,

polonus (volunteer 3rd party cold recon website security analyst and website error-hunter)
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 85382
  • No support PMs thanks
Re: Site Blocked - URL:Phishing
« Reply #661 on: May 06, 2021, 06:44:09 PM »
Hello friends, make the report that it is a positive failure torreo.cl and it has not yet been removed.
Please review, I appreciate your help.
<snip quotes>

Not sure what you mean by a 'positive failure.'
 
Have you actually received a response stating that your site is infected and as such won't be removed, etc. etc.  ?
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 21.5.2470 (build 21.5.6354.675) UI 1.0.646/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

Offline p.morales

  • Newbie
  • *
  • Posts: 5
Re: Site Blocked - URL:Phishing
« Reply #662 on: May 06, 2021, 07:06:40 PM »

false positive, i meant

I still get this message when browsing:



Hello friends, make the report that it is a positive failure torreo.cl and it has not yet been removed.
Please review, I appreciate your help.
<snip quotes>

Not sure what you mean by a 'positive failure.'
 
Have you actually received a response stating that your site is infected and as such won't be removed, etc. etc.  ?

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 85382
  • No support PMs thanks
Re: Site Blocked - URL:Phishing
« Reply #663 on: May 06, 2021, 08:24:39 PM »

false positive, i meant

I still get this message when browsing:



Hello friends, make the report that it is a positive failure torreo.cl and it has not yet been removed.
Please review, I appreciate your help.
<snip quotes>

Not sure what you mean by a 'positive failure.'
 
Have you actually received a response stating that your site is infected and as such won't be removed, etc. etc.  ?

As I asked:
"Have you actually received a response stating that your site is infected and as such won't be removed, etc. etc.  ?"

If so when and what was response ?
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 21.5.2470 (build 21.5.6354.675) UI 1.0.646/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

Offline p.morales

  • Newbie
  • *
  • Posts: 5
Re: Site Blocked - URL:Phishing
« Reply #664 on: May 07, 2021, 12:33:23 AM »

I sent the form avast ,but they still do not respond to me.


false positive, i meant

I still get this message when browsing:



Hello friends, make the report that it is a positive failure torreo.cl and it has not yet been removed.
Please review, I appreciate your help.
<snip quotes>

Not sure what you mean by a 'positive failure.'
 
Have you actually received a response stating that your site is infected and as such won't be removed, etc. etc.  ?

As I asked:
"Have you actually received a response stating that your site is infected and as such won't be removed, etc. etc.  ?"

If so when and what was response ?

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 85382
  • No support PMs thanks
Re: Site Blocked - URL:Phishing
« Reply #665 on: May 07, 2021, 12:59:05 AM »
I sent the form avast ,but they still do not respond to me.
<snip quotes>

You don't say when you sent it ?
What have you done about the points raised as they could be contributory factors ?

But even then they are the ones with the ultimate say on if your site is clear
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 21.5.2470 (build 21.5.6354.675) UI 1.0.646/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

Offline vrodokanakis

  • Newbie
  • *
  • Posts: 2
Re: Site Blocked - URL:Phishing
« Reply #666 on: May 17, 2021, 09:10:47 AM »
Hi,

I have sent a request for false positive of https://secure.gy.digital from 11th of May (6 days have passed) and still no response from Avast team.

This site was blocked and it doesn't have any issue, it's a legit website. Also it's OK and clean in every tool there is out there (virustotal.com etc).

Does the Avast team see the requests for removals? Shouldn't be false positive requests be reviewed a bit more quickly? What can we do to get a response? Thank you.

Offline vrodokanakis

  • Newbie
  • *
  • Posts: 2
Re: Site Blocked - URL:Phishing
« Reply #667 on: May 17, 2021, 04:23:37 PM »
Just an update, we contacted again using the AVG form at https://www.avg.com/en-us/false-positive-file-form and thankfully the team replied directly. Since its the same company it seems that Avast & AVG share the same list, so it's the same if you get removed from one.

I am writing it down if someone needs this information in the future.

Offline bernieleigh

  • Newbie
  • *
  • Posts: 3
Re: Site Blocked - URL:Phishing
« Reply #668 on: June 18, 2021, 09:23:18 AM »
Hi,

I am not being able to open the website https://fbrcgroup.com/, whenever I am trying to open it from any desktop that has Avast installed, it is showing me a security alert of phishing. We did research and found that the domain is not infected at all.

Can you please remove it from the blacklist as a matter of urgency?

Offline Asyn

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 71177
    • >>>  Avast Forum - Deutschsprachiger Bereich  <<<
Win 8.1 [x64] - Avast PremSec 21.6.6435.IBC [UI.655] - EEK - Firefox ESR 78.12 [NS/uBO/PB] - TB 78.12
Avast-Tools: Secure Browser 92.0 - Cleanup 21.2 - SecureLine 5.12 - Driver Updater 21.2 - CCleaner 5.83
Avast Wissenswertes (Downloads, Anleitungen & Infos): https://forum.avast.com/index.php?topic=60523.0

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33256
  • malware fighter
Re: Site Blocked - URL:Phishing
« Reply #670 on: June 19, 2021, 11:41:41 PM »
Wait for a final verdict from avast team.
See extractor results:
Quote
-
-https://cdnjs.cloudflare.com/ajax/libs/font-awesome/5.15.2/css/all.min.css
-https://code.jquery.com/jquery-2.1.1.min.js
-https://fonts.googleapis.com/css2?family=Montserrat:wght@400;500;600;800;900&display=swap
-https://fonts.googleapis.com/css2?family=Poppins:wght@300;400;500;600;700;800;900&display=swap
Returned - No Cloaking - Google Chrome returned code 0 & GoogleBot returned code 0 -
No spammy looking links, no iframes, not found in malware databases.

polonus
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Offline authjeremmy

  • Newbie
  • *
  • Posts: 1
Re: Site Blocked - URL:Phishing
« Reply #671 on: June 20, 2021, 05:56:17 PM »
I'm having the same problem as most users here. I am a freelancer and bought an original copy of a WordPress theme on codecanon and when visiting from any computer with avast, it keeps saying the same thing.

The domain name is fasour.com (Belongs to my client).

Don't compare source code of wordpress themes and claim phishing please.

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 85382
  • No support PMs thanks
Re: Site Blocked - URL:Phishing
« Reply #672 on: June 20, 2021, 06:31:46 PM »
I'm having the same problem as most users here. I am a freelancer and bought an original copy of a WordPress theme on codecanon and when visiting from any computer with avast, it keeps saying the same thing.

The domain name is fasour.com (Belongs to my client).

Don't compare source code of wordpress themes and claim phishing please.

A screenshot may have helped for confirmation, I have attached one of the alert.

This site reports jQuery out of date - https://awesometechstack.com/analysis/website/fasour.com/
Considered a Low Security Risk here - https://sitecheck.sucuri.net/results/fasour.com - there are some Hardening Improvements also.
There are some security and other points raised here - https://webhint.io/scanner/9aa5e5b0-b5a8-45b8-a20e-5f80e3a4de2a

You could also have used the -     Reporting Possible False Positive File or Website - https://www.avast.com/false-positive-file-form.php. - posted several times in this topic, which goes to the virus labs team.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 21.5.2470 (build 21.5.6354.675) UI 1.0.646/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

Offline Adam638

  • Newbie
  • *
  • Posts: 3
Re: Site Blocked - URL:Phishing
« Reply #673 on: June 21, 2021, 07:39:29 PM »
Hi, I am a web developer and have recently bought 2 new domain names and installed exactly the same way I have installed the other 100 sites I have built. Within a couple of hours, the first site was blocked with the alert ' Threat Blocked, we've safely aborted www. because it was infected with URL:Phishing.'

My client needs his website online quickly so we bought another domain, I did report this to Avast - as a false positive - and have heard nothing back! So today I did a fresh install with the new domain (never used before) and within 3 hours of installation, it has been blocked the same as the first.

First domain was httX://trusted-tattoo.com and the new domain is httX://trustedtattoo.ink The first site has been deleted

These are standard WordPress sites, no ecommerce, valid SSL and once scanned no malware was found. How can I get this block removed and why is it happening so quickly, can it be an IP address? Ive never had this issue before, and my client is getting annoyed! Thanks for any help
« Last Edit: June 21, 2021, 07:59:47 PM by Adam638 »

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 85382
  • No support PMs thanks
Re: Site Blocked - URL:Phishing
« Reply #674 on: June 21, 2021, 07:47:50 PM »
Use the link in the post above yours to report a possible false positive.

Please 'modify' your post change the URL from http to hXXps, to break the link and avoid accidental exposure to suspect sites, thanks.

Please don't post multiple topics on the same issue it duplicates effort thanks.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 21.5.2470 (build 21.5.6354.675) UI 1.0.646/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security