Author Topic: False Positive: Site Blocked - URL:Phishing  (Read 46156 times)

0 Members and 1 Guest are viewing this topic.

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 89009
  • No support PMs thanks
Re: False Positive: Site Blocked - URL:Phishing
« Reply #60 on: October 28, 2023, 07:15:28 PM »
Avast multiple times false detect my website streamhd247.info. It happens after every 4 to 5 days. I have no extrenal links on my website just a pop-up from popular ad network. I report false detect to avast and they clear in a day or two but it affect my traffic. Kindly resolve this issue permanently.

Thank You

A screenshot of the avast alert window with the Details option would have helped, attached to your post.

You could also have followed the links in this topic to:
A - check against other security sites sites.
B - used the link in reply #51 - https://forum.avast.com/index.php?topic=226334.msg1698413#msg1698413 - to report to avast.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.3.6108 (build 24.3.8975.762) UI 1.0.801/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

Offline StreamHD

  • Newbie
  • *
  • Posts: 2
Re: False Positive: Site Blocked - URL:Phishing
« Reply #61 on: October 28, 2023, 07:29:22 PM »
I already submitted appeal against false positive. I have Chrome extension adblocker and Mcafee installed, they never blocked my website. Last two times I did not remove any link from my website and submitted a false positive on avast forum and they unblocked my website. I want a permanent solution for this as it affect my traffic badly.


Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 89009
  • No support PMs thanks
Re: False Positive: Site Blocked - URL:Phishing
« Reply #63 on: October 28, 2023, 08:17:57 PM »
I already submitted appeal against false positive. I have Chrome extension adblocker and Mcafee installed, they never blocked my website. Last two times I did not remove any link from my website and submitted a false positive on avast forum and they unblocked my website. I want a permanent solution for this as it affect my traffic badly.

Well your on the Avast Forum and I can't speak for McAfee - if you have submitted it as a possible false positive. 
That said I rather doubt Avast would give if permanent solution/clearance, as nothing is permanent in life (death and taxes), especially malware development.

You also need to investigate the other links used in Reply #54 and have them scan your site for vulnerabilities or issues.
https://www.virustotal.com/gui/url/4cdcb4febaf4a9b57060a7e5f628a27188c42e9c8ed5f9e04c09c3007253f6ed/links 3rd party links could have an impact.
https://en.internet.nl/site/streamhd247.info/2423331/
 
The information give in the above, may or may not be contribute to the 'Avast' alerting on your site.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.3.6108 (build 24.3.8975.762) UI 1.0.801/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33895
  • malware fighter
Re: False Positive: Site Blocked - URL:Phishing
« Reply #64 on: October 28, 2023, 10:49:48 PM »
Here we see some minimal risk detected: https://quttera.com/detailed_report/streamhd247.info
Blacklisted - blacklisted external link -> -https://daddylivehd.online/mylive/stream-32.php
which 13 vendors have listed as being malicious: https://www.virustotal.com/gui/domain/daddylivehd.online
listed as a phishing and fraud website domain,

polonus
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33895
  • malware fighter
Re: False Positive: Site Blocked - URL:Phishing
« Reply #65 on: October 29, 2023, 02:29:33 PM »
More precision for the malicious blacklisted domain ->
Quote
<iframe src="hxtps://weblivehdplay.ru/premiumtv/.php?id=32 width="100%" height="100%" scrolling="no" frameborder="0" allowfullscreen="true" allow="autoplay;" allowtransparency="true" id="thatframe"> </iframe>
weblivehdplay dot ru *
Redirects to -https://daddylivehd.online/mylive/stream-32.php
Threat at * could havebeen mitigated because of -https://www.cloudflare.com/5xx-error-landing

polonus
« Last Edit: October 29, 2023, 02:35:26 PM by polonus »
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!