Author Topic: MyADP - URL Phishing  (Read 2945 times)

0 Members and 1 Guest are viewing this topic.

REDACTED

  • Guest
MyADP - URL Phishing
« on: August 11, 2018, 06:21:08 AM »
I cannot login to MyADP.com as avast has blocked the site due to URL:Phishing.  Is this a false positive as I logged into the site with no problem yesterday.

Offline Asyn

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 76037
    • >>>  Avast Forum - Deutschsprachiger Bereich  <<<
W8.1 [x64] - Avast Free AV 23.3.8047.BC [UI.757] - Firefox ESR 102.9 [NS/uBO/PB] - Thunderbird 102.9.1
Avast-Tools: Secure Browser 109.0 - Cleanup 23.1 - SecureLine 5.18 - DriverUpdater 23.1 - CCleaner 6.01
Avast Wissenswertes (Downloads, Anleitungen & Infos): https://forum.avast.com/index.php?topic=60523.0

REDACTED

  • Guest
Re: MyADP - URL Phishing
« Reply #2 on: August 11, 2018, 12:29:29 PM »
Thank you

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33891
  • malware fighter
Re: MyADP - URL Phishing
« Reply #3 on: August 11, 2018, 01:17:12 PM »
Given as a minimal risk here: https://www.mcafee.com/enterprise/en-us/threat-intelligence.domaintc.html?vid=myad
No flagged: https://urlquery.net/report/79c0c80a-b176-4d60-8f12-9ba3e6cf5368

But there is room for redbox exploits & abuse, like described here: https://hackerone.com/reports/261652
Just consider: Results from scanning URL: -https://static.adp.com/static/redbox/login/login.min.css?3.1.0.51
Cookie manipulation: Results from scanning URL: -https://whois-ip.xyz/wp-content/plugins/google-analytics-for-wordpress/assets/js/frontend.min.js?ver=7.0.9
Number of sources found: 16
Number of sinks found: 2
Also going here: Results from scanning URL: -http://dryhero.com/education/5-signs-of-mold-growth-in-your-nebraska-home/water-damaged-wood-base-trim//
Number of sources found: 4
Number of sinks found: 1
& Results from scanning URL: -https://statvalidation.website/optout/set/lat?jsonp=__twb_cb_805686876&key=1af08f716dcc9aa987&cv=1527688530&t=1527688530455

Just wait for an avast team member to give a final verdict, as we are just volunteers here with relevant knowledge, but cannot come to unlock. Consider also that the service can be down:
Quote
Service Unavailable - Fail to connect</TITLE> </HEAD><BODY> <H1>Service Unavailable</H1> The server is temporarily unable to service your request.  Please try again later.<P> Reference&#32;&#35;6&#46;819dfea5&#46;1533986097&#46;de6419d </BODY></HTML>

polonus (volunteer 3rd party cold reconnaissance website security analyst and website error-hunter)
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Offline Asyn

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 76037
    • >>>  Avast Forum - Deutschsprachiger Bereich  <<<
Re: MyADP - URL Phishing
« Reply #4 on: August 11, 2018, 04:23:25 PM »
W8.1 [x64] - Avast Free AV 23.3.8047.BC [UI.757] - Firefox ESR 102.9 [NS/uBO/PB] - Thunderbird 102.9.1
Avast-Tools: Secure Browser 109.0 - Cleanup 23.1 - SecureLine 5.18 - DriverUpdater 23.1 - CCleaner 6.01
Avast Wissenswertes (Downloads, Anleitungen & Infos): https://forum.avast.com/index.php?topic=60523.0

Offline HonzaZ

  • Avast team
  • Advanced Poster
  • *
  • Posts: 1038
Re: MyADP - URL Phishing
« Reply #5 on: August 13, 2018, 07:07:48 AM »
I can visit the page without any popups from Avast, so either the problem is solved already, or please post a printscreen of the detection.