Author Topic: Site Blocked - URL:Phishing  (Read 2742 times)

0 Members and 1 Guest are viewing this topic.

Offline mabuitragor

  • Newbie
  • *
  • Posts: 9
Re: Site Blocked - URL:Phishing
« Reply #15 on: January 07, 2019, 09:59:11 AM »
Hello, thanks again for your response.

The IP is not listed in blacklists.
We also have other websites hosted on the server without any being marked/listed with problems.

The only thing that occurs to me, is that the latest functionality we've included, for send webpush notifications, will trigger the false positive. An Ajax call is made to re-subscribe the users in the background. But I'm not sure about anything and no one has given us an explanation. The systems for analysis create a positive and do not know the reasons? All this seems very strange to me, really.

Thank you,
Miguel.

Offline Breno28

  • Newbie
  • *
  • Posts: 3
Re: Site Blocked - URL:Phishing
« Reply #16 on: January 09, 2019, 10:55:53 PM »
I have submitted a request to have my webapp delisted through the form: festalab.com.br
https://www.avast.com/false-positive-file-form.php

How do I find out what triggered the inclusion in the list? I mean, was it some script, a url, or something?

Offline Pondus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 36147
Re: Site Blocked - URL:Phishing
« Reply #17 on: January 09, 2019, 11:18:55 PM »
Quote
How do I find out what triggered the inclusion in the list? I mean, was it some script, a url, or something?
You find out when they reply


“Ah beer. The cause of and the solution to all of life’s problems.”

"Operator! Give me the number for 911!"

Offline polonus

  • Avast Überevangelist
  • Maybe Bot
  • *****
  • Posts: 31765
  • malware fighter
Re: Site Blocked - URL:Phishing
« Reply #18 on: January 09, 2019, 11:23:18 PM »
Hi Breno28,

What we see here the IP came up 8 times in the recent past: https://checkphish.ai/ip/104.25.227.27
check IP also here: https://www.ip-adress.com/website/fishlab.com
Domain not flagged here: https://phishcheck.me/166555/details
IP was also involved in running these malicious executables from:
https://any.run/report/d7c1cbab71892a5fca83d1ee267a80792fd53df32488ba6299f7c395b4cb7866/65f18cc8-2d1f-4413-9143-e2f6e9a9ca28

So probably Cloudflare general IP abuse related, but you can only get the real information from an Avast Team Member,
as we here are just volunteers with relevant knowledge, but only Avast Team Members know on what ground an IP or domain may be blocked and they are the only one to unblock.

polonus (volunteer website security analyst and website error-hunter)
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Offline Breno28

  • Newbie
  • *
  • Posts: 3
Re: Site Blocked - URL:Phishing
« Reply #19 on: January 10, 2019, 02:27:55 AM »
Thank you Polonus. I've been using Cloudflare for a year and never had a problem. This means that they recently moved me behind an IP that was probablematic, which means I should ask them to assign me a new IP, is that right?

Offline HonzaZ

  • Avast team
  • Advanced Poster
  • *
  • Posts: 1126
Re: Site Blocked - URL:Phishing
« Reply #20 on: January 10, 2019, 09:42:17 AM »
Hi,
I have removed festalab[.]com.br from our blacklist.

Offline Breno28

  • Newbie
  • *
  • Posts: 3
Re: Site Blocked - URL:Phishing
« Reply #21 on: January 10, 2019, 01:43:34 PM »
Hi,
I have removed festalab[.]com.br from our blacklist.

Thank you HonzaZ. I updated and rebooted and can now access my website.