Author Topic: Avast reports my site as phishing  (Read 2480 times)

0 Members and 2 Guests are viewing this topic.

Offline Ricsca

  • Newbie
  • *
  • Posts: 7
Avast reports my site as phishing
« on: September 02, 2023, 05:15:36 PM »
If I open my site toelettatori.it made with worpdress, for about a week, avast tells me that it blocks my site for phishing... I scanned the site with the app to see viruses on DirecatAdmin but it can't find anything, I scanned the site with the two wp plugins "wordfance" and "Anti-Malware Security and Brute-Force Firewall" and it doesn't find anything. In addition, the CDN www.quic.cloud is active on the site and it does not give me any anomalies...
Not even Google Search Console gives me anomalies.
What can I do?
Thank you
« Last Edit: September 02, 2023, 07:58:38 PM by Ricsca »


Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 89034
  • No support PMs thanks
Re: Avast reports my site as phishing
« Reply #2 on: September 02, 2023, 07:42:14 PM »
If I open my site wXw.toelettatori.it made with worpdress, for about a week, avast tells me that it blocks my site for phishing...
<snip>

@  Ricsca
Please modify your links so they aren't active to avoid accidental exposure to a suspect link.
e.g. as I have in the quoted text or just enter the domain name in the alert toelettatori.it

A screenshot of the Alert window with the Details option selected could also have helped.
I have attached one, it is on the full domain name and no an external or sub.domain location.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.3.6108 (build 24.3.8975.762) UI 1.0.801/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33899
  • malware fighter
Re: Avast reports my site as phishing
« Reply #3 on: September 02, 2023, 11:35:29 PM »
The WordPress CMS version is outdated and that is always posing a risk. Update a.s.a.p.,

polonus
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Offline Ricsca

  • Newbie
  • *
  • Posts: 7
Re: Avast reports my site as phishing
« Reply #4 on: September 03, 2023, 10:37:35 AM »
Worpress 6.3.1 came out on August 29th or 5 days ago, I just updated but I don't think it depends on that.
Do you know of a way to check if my site has anything I have is a false positive from avst?
Thanks

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37528
  • Not a avast user
Re: Avast reports my site as phishing
« Reply #5 on: September 03, 2023, 11:43:46 AM »
Quote
Do you know of a way to check if my site has anything I have is a false positive from avst?
As i said in my post above, you report it to avast lab and they will tell you

Also see the Sucuri link i posted on how to improve Your website



« Last Edit: September 03, 2023, 11:57:13 AM by Pondus »

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33899
  • malware fighter
Re: Avast reports my site as phishing
« Reply #6 on: September 03, 2023, 07:47:15 PM »
 :(See the error 502 that was met during this scan:
https://themarkup.org/blacklight?url=www.toelettatori.it%2F&device=mobile&location=us
Click on see results to see the scan error 502 that was met.

polonus
« Last Edit: September 03, 2023, 07:49:37 PM by polonus »
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Offline Ricsca

  • Newbie
  • *
  • Posts: 7
Re: Avast reports my site as phishing
« Reply #7 on: September 05, 2023, 09:54:13 AM »
You mean this? What can I do?
Thank you


Offline Ricsca

  • Newbie
  • *
  • Posts: 7
Re: Avast reports my site as phishing
« Reply #8 on: September 09, 2023, 10:26:31 AM »
Can anyone give me a hand?
I do not know what to do :(

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33899
  • malware fighter
Re: Avast reports my site as phishing
« Reply #9 on: September 09, 2023, 05:22:33 PM »
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Offline Ricsca

  • Newbie
  • *
  • Posts: 7
Re: Avast reports my site as phishing
« Reply #10 on: October 31, 2023, 08:33:06 AM »
Ok, in the end it was a false positive :)
Another piece of information...
If a site is hacked and the admin then fixes it, then how does he report that the problems have been resolved?
Thank you

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 89034
  • No support PMs thanks
Re: Avast reports my site as phishing
« Reply #11 on: October 31, 2023, 11:37:46 AM »
In the link that Pondus gave in reply #1 there is a link to report possible false positives.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.3.6108 (build 24.3.8975.762) UI 1.0.801/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33899
  • malware fighter
Re: Avast reports my site as phishing
« Reply #12 on: October 31, 2023, 01:01:26 PM »
Site now kicks up an Error 520 ERROR 520
The QUIC.cloud server EU-NL-AMS-HYBRID-145 was not able to connect to the site's origin server.

Two detect this site as malicious: https://www.virustotal.com/gui/url/e0f0b9240426b1f9f8ca280bbc4b0ce7ba80226a73fe5ec23b4feddd3b1c96f5

Also SafetoOpen says site is malicious.

See: https://urlscan.io/result/e64d252a-4765-4e45-a110-6f1c7c096f27/

Here nothing detected: https://quttera.com/detailed_report/www.toelettatori.it

Solve the problem with he QUIC.cloud server EU-NL-AMS-HYBRID-145,

polonus
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Offline Ricsca

  • Newbie
  • *
  • Posts: 7
Re: Avast reports my site as phishing
« Reply #13 on: November 01, 2023, 04:24:51 PM »
Gezie Polone, ora contatto a QUIC.cloud
Ho notato che da quando sono con loro googel non mi indicizza molti url quindi ho intuito che qualcosa non va...