Author Topic: False Positive: Site Blocked - URL:Phishing  (Read 760 times)

0 Members and 1 Guest are viewing this topic.

Offline BitrueExchange

  • Newbie
  • *
  • Posts: 1
False Positive: Site Blocked - URL:Phishing
« on: April 03, 2019, 04:05:05 AM »


The avast software is saying that our company domain www.bitrue.com is blocked because of phishing URL.

This has caused huge concerns among our customers who had your software on their laptops. Can we understand what happened here and what had triggered the false positive??

Thank you in advance for clarification.

Kind regards

Bitrue

Offline Asyn

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 60372
    • >>>  Avast Forum - Deutschsprachiger Bereich  <<<
Re: False Positive: Site Blocked - URL:Phishing
« Reply #1 on: April 03, 2019, 07:38:12 AM »
Windows 8.1 [x64] - Avast PremSec 19.7.2388.BC - CC 5.61 - EEK - Firefox ESR 60.8 [NS/AOS/uBO] - TB 60.8 [EM] - ACP/ASB/ASL.BC
Deutschsprachiger Bereich -> Avast Wissenswertes (Downloads, Anleitungen & Infos): https://forum.avast.com/index.php?topic=60523.0

Offline HonzaZ

  • Avast team
  • Advanced Poster
  • *
  • Posts: 1126
Re: False Positive: Site Blocked - URL:Phishing
« Reply #2 on: April 03, 2019, 07:42:08 AM »
Hi,
it was fixed 25 minutes ago.

Offline Iris33

  • Newbie
  • *
  • Posts: 1
Re: False Positive: Site Blocked - URL:Phishing
« Reply #3 on: May 29, 2019, 12:44:42 PM »
Hey there, this is happening to us again. We'd really be grateful if you could help us understand what had trigger this false positive again in such a short time period. www.bitrue.com

It affecting our reputation as a company, please help fix it. Thank you.
_______
"The requested webbadress contains sabotage software that can harm your computer. If you want to go in to the webpage, close avast web protection and try again
Infection type: URL:Phishing"

Offline HonzaZ

  • Avast team
  • Advanced Poster
  • *
  • Posts: 1126
Re: False Positive: Site Blocked - URL:Phishing
« Reply #4 on: May 29, 2019, 12:57:24 PM »
Sorry for the inconvenience, I added bitrue[.]com to our cleanset so it wouldn't happen again.

Offline me48

  • Newbie
  • *
  • Posts: 1
Re: False Positive: Site Blocked - URL:Phishing
« Reply #5 on: August 12, 2019, 05:24:38 PM »
After entering my login info in sos.secureserver.net (the site, hostingdude.com, where my domains are hosted) and clicking "enter," I am taken to https://register-cheap-domain-names-cheap-web-hosting.hostingdude.com/sso/custom-domain-set?target=ggrdqjoeueticgeabbdidgihwjveubahphvarfyfyfreginbgcwdmglchifbkiphsigasiwhdgpjjdieneyckfhjxeqhicnc&sid=yfvghcsidcphubmdqgzefiwgahrikejh, where I get the warning: "URL:Phishing."  I am unable to access my account, and would appreciate advise - should I proceed -- disable Avast -- and go into the site?

Offline Pondus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 35971
Re: False Positive: Site Blocked - URL:Phishing
« Reply #6 on: August 12, 2019, 05:30:34 PM »
Quote
I am unable to access my account, and would appreciate advise - should I proceed -- disable Avast -- and go into the site?
See reply #1


Chief Wiggum: Uh, no, you got the wrong number. This is 9-1…2.


Offline jefferson sant

  • Starting Graphoman
  • *
  • Posts: 6153
  • volunteer
Re: False Positive: Site Blocked - URL:Phishing
« Reply #7 on: August 15, 2019, 04:09:57 AM »
After entering my login info in sos.secureserver.net (the site, hostingdude.com, where my domains are hosted) and clicking "enter," I am taken to hxxps://register-cheap-domain-names-cheap-web-hosting.hostingdude.com/sso/custom-domain-set?target=ggrdqjoeueticgeabbdidgihwjveubahphvarfyfyfreginbgcwdmglchifbkiphsigasiwhdgpjjdieneyckfhjxeqhicnc&sid=yfvghcsidcphubmdqgzefiwgahrikejh, where I get the warning: "URL:Phishing."  I am unable to access my account, and would appreciate advise - should I proceed -- disable Avast -- and go into the site?

Detection has been removed in 14.08.2019 09:40 AM.

Quote from: Avast
Our virus specialists have now cleared its reputation in our database.

With URLs this change should be instant, but it might take up to 24 hours with files.