Author Topic: MyADP - URL Phishing  (Read 586 times)

0 Members and 1 Guest are viewing this topic.

Offline schofield4

  • Newbie
  • *
  • Posts: 2
MyADP - URL Phishing
« on: August 11, 2018, 06:21:08 AM »
I cannot login to MyADP.com as avast has blocked the site due to URL:Phishing.  Is this a false positive as I logged into the site with no problem yesterday.

Offline Asyn

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 56408
  • Happy Holidays..!!
    • >>>  Avast Forum - Deutschsprachiger Bereich  <<<
Win 8.1 [x64] - Avast Premier 19.1.2358.Beta2 - CC 5.51 - MCS - EEK - FF ESR 60.4 [NS/AOS/uBO] - TB 60.3.3 [EM] - ACP/ASB/ASL.BC
Deutschsprachiger Bereich -> Avast Wissenswertes (Downloads, Anleitungen & Infos): https://forum.avast.com/index.php?topic=60523.0

Offline schofield4

  • Newbie
  • *
  • Posts: 2
Re: MyADP - URL Phishing
« Reply #2 on: August 11, 2018, 12:29:29 PM »
Thank you

Online polonus

  • Avast Überevangelist
  • Maybe Bot
  • *****
  • Posts: 30921
  • malware fighter
Re: MyADP - URL Phishing
« Reply #3 on: August 11, 2018, 01:17:12 PM »
Given as a minimal risk here: https://www.mcafee.com/enterprise/en-us/threat-intelligence.domaintc.html?vid=myad
No flagged: https://urlquery.net/report/79c0c80a-b176-4d60-8f12-9ba3e6cf5368

But there is room for redbox exploits & abuse, like described here: https://hackerone.com/reports/261652
Just consider: Results from scanning URL: -https://static.adp.com/static/redbox/login/login.min.css?3.1.0.51
Cookie manipulation: Results from scanning URL: -https://whois-ip.xyz/wp-content/plugins/google-analytics-for-wordpress/assets/js/frontend.min.js?ver=7.0.9
Number of sources found: 16
Number of sinks found: 2
Also going here: Results from scanning URL: -http://dryhero.com/education/5-signs-of-mold-growth-in-your-nebraska-home/water-damaged-wood-base-trim//
Number of sources found: 4
Number of sinks found: 1
& Results from scanning URL: -https://statvalidation.website/optout/set/lat?jsonp=__twb_cb_805686876&key=1af08f716dcc9aa987&cv=1527688530&t=1527688530455

Just wait for an avast team member to give a final verdict, as we are just volunteers here with relevant knowledge, but cannot come to unlock. Consider also that the service can be down:
Quote
Service Unavailable - Fail to connect</TITLE> </HEAD><BODY> <H1>Service Unavailable</H1> The server is temporarily unable to service your request.  Please try again later.<P> Reference&#32;&#35;6&#46;819dfea5&#46;1533986097&#46;de6419d </BODY></HTML>

polonus (volunteer 3rd party cold reconnaissance website security analyst and website error-hunter)
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Offline Asyn

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 56408
  • Happy Holidays..!!
    • >>>  Avast Forum - Deutschsprachiger Bereich  <<<
Re: MyADP - URL Phishing
« Reply #4 on: August 11, 2018, 04:23:25 PM »
Win 8.1 [x64] - Avast Premier 19.1.2358.Beta2 - CC 5.51 - MCS - EEK - FF ESR 60.4 [NS/AOS/uBO] - TB 60.3.3 [EM] - ACP/ASB/ASL.BC
Deutschsprachiger Bereich -> Avast Wissenswertes (Downloads, Anleitungen & Infos): https://forum.avast.com/index.php?topic=60523.0

Offline HonzaZ

  • Avast team
  • Advanced Poster
  • *
  • Posts: 1072
Re: MyADP - URL Phishing
« Reply #5 on: August 13, 2018, 07:07:48 AM »
I can visit the page without any popups from Avast, so either the problem is solved already, or please post a printscreen of the detection.