Author Topic: Site home page blocked,  (Read 1137 times)

0 Members and 1 Guest are viewing this topic.

Offline Scott390

  • Newbie
  • *
  • Posts: 1
Site home page blocked,
« on: September 18, 2019, 01:54:10 PM »
Hi There, I help support an online web service (vetstream.com), recently Avast has blocked the home page for the following reason:

Threat blocked

We've safely aborted connection on
wxw.vetstream.com because it was infected with
URL:Phishing

Any advice how I can stop this?

Thanks,
Scott
« Last Edit: September 18, 2019, 01:59:30 PM by Milos »

Offline Asyn

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 76037
    • >>>  Avast Forum - Deutschsprachiger Bereich  <<<
Re: Site home page blocked,
« Reply #1 on: September 18, 2019, 01:57:09 PM »
You can report a suspected FP (File/Website) here: https://www.avast.com/false-positive-file-form.php
W8.1 [x64] - Avast Free AV 23.3.8047.BC [UI.757] - Firefox ESR 102.9 [NS/uBO/PB] - Thunderbird 102.9.1
Avast-Tools: Secure Browser 109.0 - Cleanup 23.1 - SecureLine 5.18 - DriverUpdater 23.1 - CCleaner 6.01
Avast Wissenswertes (Downloads, Anleitungen & Infos): https://forum.avast.com/index.php?topic=60523.0

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33897
  • malware fighter
Re: Site home page blocked,
« Reply #2 on: September 18, 2019, 03:12:59 PM »
See: https://mxtoolbox.com/domain/www.vetstream.com/
Re: https://toolbar.netcraft.com/site_report?url=www.vetstream.com
Nothing here: https://www.virustotal.com/gui/ip-address/31.193.12.121/relations
See: https://urlscan.io/result/4402bab7-21c3-41f8-8ece-89c799142040
See obfuscated code at line 123-127: https://aw-snap.info/file-viewer/?protocol=secure&ref_sel=GSP2&ua_sel=ff&chk-cache=&fs=1&tgt=d3d3LnZ7dHN0fXt8bS5eXW1gaF1tew%3D%3D~enc
Site behaviour: https://urlscan.io/result/4402bab7-21c3-41f8-8ece-89c799142040#behaviour
Indicators of compromise: https://urlscan.io/result/4402bab7-21c3-41f8-8ece-89c799142040#iocs
Given as clean here: https://quttera.com/detailed_report/www.vetstream.com
See: https://urlscan.io/result/a6325ee3-08bb-4b63-8541-aae514ee7b4c

JavaScript errors on page: ReferenceError: jQuery is not defined
 /home:62

ReferenceError: jQuery is not defined
 /CMSPages/GetResource.ashx?scriptfile=%7e%2fCMSScripts%2fCustom%2fRTCustom.js:2

Website is insecure by default
100% of the trackers on this site could be protecting you from NSA snooping. Tell -vetstream.com to fix it.

Identifiers | All Trackers
 Insecure Identifiers
Unique IDs about your web browsing habits have been insecurely sent to third parties.

 -www.vetstream.comasp.net_sessionid
 -code.jquery.com__cfduid
-dbb802b3387e5a72c1f111653af75aaa51551620387 cdnjs.cloudflare.com__cfduid

Privacy & Security Report: https://webcookies.org/cookies/www.vetstream.com/28402289?414260

Wait for a final verdict form an avast team member, they are the only ones to come and finally unblock,
we here are just volunteers with relevant knowledge and website security expertise.

polonus
« Last Edit: September 18, 2019, 11:14:16 PM by polonus »
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Offline jefferson sant

  • Starting Graphoman
  • *
  • Posts: 6677
  • volunteer
Re: Site home page blocked,
« Reply #3 on: September 19, 2019, 02:07:30 AM »
Detection has been removed

Quote from: Avast
Our virus specialists have been working on this problem and it has now been resolved. The provided website isn't detected by Avast anymore.