Author Topic: Re: Site Blocked - URL:Phishing  (Read 2981 times)

0 Members and 1 Guest are viewing this topic.

REDACTED

  • Guest
Re: Site Blocked - URL:Phishing
« on: September 19, 2018, 07:36:56 PM »
Hello,
Now I have problem with other URL https://bit[.]ly/2pnx7kg
What is wrong in thid case ?

Thanks Iro
« Last Edit: September 20, 2018, 12:19:07 AM by HonzaZ »

Offline HonzaZ

  • Avast team
  • Advanced Poster
  • *
  • Posts: 1123
Re: Re: Site Blocked - URL:Phishing
« Reply #1 on: September 20, 2018, 12:18:29 AM »
Hi,
hxxp://www[.]rzeszowiak[.]pl/Poznajmy-sie-Pani-pozna--2670011155 loads without any problems on my PC now. If the problem still persists, can you post a printscreen of the detection please?

REDACTED

  • Guest
Re: Re: Site Blocked - URL:Phishing
« Reply #2 on: September 20, 2018, 01:22:22 PM »
Hi,
having lot of troubles with hxxp://www.pugliasounds[.]it .
We had some problems in 2018 MArch.
Everything ok and clean now, but avast still blocking website due to phishing problems.
Can u please check and help me solving this headache ?
Tnx in advance.
« Last Edit: September 21, 2018, 07:53:04 AM by HonzaZ »

Offline Asyn

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 76213
  • Urlaub/Vacation
    • >>>  Avast Forum - Deutschsprachiger Bereich  <<<
W8.1 [x64] - Avast PremSec 22.7.7366.BC [UI.713] - Firefox ESR 91.11 [NS/uBO/PB] - Thunderbird 91.11
Avast-Tools: Secure Browser 103.0 - Cleanup 22.2 - SecureLine 5.18 - DriverUpdater 22.2 - CCleaner 6.01
Avast Wissenswertes (Downloads, Anleitungen & Infos): https://forum.avast.com/index.php?topic=60523.0

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33668
  • malware fighter
Re: Site Blocked - URL:Phishing
« Reply #4 on: September 20, 2018, 01:40:07 PM »
Adddress seems a PHISH: {"sid": 113556, "is_success": true}
Twice being flagged here: https://www.virustotal.com/#/url/99cdf37ce37c6ccd6c0e332daaafe3df3a007b597d076699bbc9e6764b4451fa/detection
7 of 10 red here: https://toolbar.netcraft.com/site_report?url=www.pugliasounds.it
Also see IP related detections: https://www.virustotal.com/#/ip-address/46.37.22.181

Wait for a final verdict of an avast team member, we are just volunteers here with relevant knowledge.

polonus (volunteer website security analyst and website error-hunter)
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

REDACTED

  • Guest
Re: Site Blocked - URL:Phishing
« Reply #5 on: September 20, 2018, 03:44:32 PM »
Hello, do not know why this connection is being aborted.  I receive this msg:  "We've safely aborted connection on URL:PHISHING because it was infected with securepay.constantcontact.com".

https://events.r20.constantcontact.com/register/eventReg?oeidk=a07efkz66vuae7b990a&oseq=&c=&ch=

Have registered on this site many times, but now cannot after Avast updates.   Can you help.

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33668
  • malware fighter
Re: Site Blocked - URL:Phishing
« Reply #6 on: September 20, 2018, 05:33:08 PM »
It is a known PHISH: (CleanMX detects) https://www.virustotal.com/#/url/4a8c3ecb72f97ec088164a29e676f4ce7920a00caa0fb3f731e4594f34160fd2/detection

Domain is also blocked by uBlock Origin for me.

polonus
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

REDACTED

  • Guest
Re: Site Blocked - URL:Phishing
« Reply #7 on: September 20, 2018, 08:08:11 PM »
« Last Edit: September 20, 2018, 09:10:31 PM by Iro.345 »

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37190
Re: Site Blocked - URL:Phishing
« Reply #8 on: September 21, 2018, 12:23:40 AM »
It is a known PHISH: (CleanMX detects) https://www.virustotal.com/#/url/4a8c3ecb72f97ec088164a29e676f4ce7920a00caa0fb3f731e4594f34160fd2/detection

Domain is also blocked by uBlock Origin for me.

polonus
Old cashed VT scan  .... No detection with a fresh scan   



Offline HonzaZ

  • Avast team
  • Advanced Poster
  • *
  • Posts: 1123
Re: Site Blocked - URL:Phishing
« Reply #9 on: September 21, 2018, 07:58:12 AM »
I removed pugliasounds[.]it from our blacklist.
We do not block constantcontact[.]com - can you post a printscreen of the detection please?
I removed rzeszowiak[.]pl/poznajmy-sie-pani-pozna--2670011155 from our blacklist.