« previous next »
Pages: [1]   Go Down

Author Topic: Website Infected with URL:Phishing  (Read 4751 times)

0 Members and 1 Guest are viewing this topic.

REDACTED

  • Guest
Website Infected with URL:Phishing
« on: August 19, 2018, 03:56:09 PM »
My website hxxp://jobertinvestments[.]com is detected by your software as having URL:Phishing. The website is clean according to Google Safe Browsing and Succuri Site check.

Could you please let me know where the offending content is located so I can clean it up. Please help me I am frustrated.
« Last Edit: August 20, 2018, 07:07:39 AM by HonzaZ »
Logged

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37526
  • Not a avast user
Re: Website Infected with URL:Phishing
« Reply #1 on: August 19, 2018, 04:16:31 PM »
« Last Edit: August 19, 2018, 04:22:36 PM by Pondus »
Logged

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33895
  • malware fighter
Re: Website Infected with URL:Phishing
« Reply #2 on: August 19, 2018, 04:50:52 PM »
Various instances of insecure connections found: https://webcookies.org/cookies/jobertinvestments.com/19073775?164297

polonus
Logged
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Offline HonzaZ

  • Avast team
  • Advanced Poster
  • *
  • Posts: 1038
Re: Website Infected with URL:Phishing
« Reply #3 on: August 20, 2018, 07:08:38 AM »
This is the reason for blocking it: login page of known social/bank page: jobertinvestments[.]com/images/yah/sectionsigningggggg.html
Logged

REDACTED

  • Guest
Re: Website Infected with URL:Phishing
« Reply #4 on: August 20, 2018, 07:21:57 PM »
The page was removed long time ago. Plus we secured the account and changed passwords. Can I get a review again?
Logged

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33895
  • malware fighter
Re: Website Infected with URL:Phishing
« Reply #5 on: August 20, 2018, 11:09:49 PM »
There is still some security work to do on that site, for instance where retirable jQuery libraries are concerned,
see: https://retire.insecurity.today/#!/scan/945612d6e534b8346891d682787b3bb915f24b2321f41b426732f286f3159e30

Whether the site would qualify for a review, that is all up to an avast's team member, like HonzaZ.

We here are just volunteers with relative knowledge, but only avast team members can come and unblock.
Bitdefender and Sophos still flags the site for PHISHING. See: https://www.virustotal.com/#/url/b3f549779dd9deb778356376cd8596206608e2f560c73c1695efcac494d885c7/detection

This url was flagged also to-day on VT: -http://www.jobertinvestments.com/images/yah/sectionsigningggggg.html
error in code
Quote
[script] -www.jobertinvestments.com/wp-includes/js/wp-embed.min.js?ver=4.9.8
     info: [decodingLevel=0] found JavaScript
     error: undefined function b.attachEvent
     error: undefined variable b
     info: [element] URL=-www.jobertinvestments.com/images/yah/undefined
No alerts here: https://urlquery.net/report/5d7f1291-b6f9-4980-974a-fbfe926667e9

polonus (volunteer website security analyst and website error-hunter)
Logged
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Offline HonzaZ

  • Avast team
  • Advanced Poster
  • *
  • Posts: 1038
Re: Website Infected with URL:Phishing
« Reply #6 on: August 21, 2018, 07:05:27 AM »
Sure, I am unblocking the domain now!
Logged

REDACTED

  • Guest
Re: Website Infected with URL:Phishing
« Reply #7 on: August 22, 2018, 05:21:27 PM »
Thank you so much.
Logged
Pages: [1]   Go Up
« previous next »