Author Topic: False positive on phishing list  (Read 1443 times)

0 Members and 1 Guest are viewing this topic.

Offline Samuel241

  • Newbie
  • *
  • Posts: 1
False positive on phishing list
« on: December 11, 2019, 08:00:29 PM »
Hi, the website https://maralauxen.com.br/ used to be infected half a year ago, but since then it was redone from scratch and it is using a new webserver.

We have checked on a lot of tools (Google, Sucuri, WordPress plugins, etc., etc.) and all show that the website is clean. But Avast is still showing to users as if it was a phishing attempt.

Can this website be removed from this list?

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37526
  • Not a avast user
Re: False positive on phishing list
« Reply #1 on: December 11, 2019, 08:18:15 PM »
Report a false positive (select file or website)
https://www.avast.com/false-positive-file-form.php



Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33895
  • malware fighter
Re: False positive on phishing list
« Reply #2 on: December 11, 2019, 10:14:19 PM »
Recent detections on this domain by 3 av engines here: https://www.virustotal.com/gui/url/8082470b5fe09d3018eaf1216160291761f2d27486c3ecd1b0a24f1c9225552f/detection
even 7 and 9 detections yesterday and the day before yesterday:
https://www.virustotal.com/gui/ip-address/108.179.252.87/relations

So you have to wait for a final verdict from an avast team member, they are the only ones to unblock or persist detection.

20 recommendations found through linting here: https://webhint.io/scanner/05893505-715e-4e39-ae45-ee84e2ab62ab
also see the vulnerabilities found at the hoster: https://www.shodan.io/host/108.179.252.87

15 malicious files found and blacklisted: https://quttera.com/detailed_report/maralauxen.com.br
(Detected reference to malicious blacklisted domain -blob.llimages.com)

polonus
« Last Edit: December 11, 2019, 10:47:24 PM by polonus »
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Offline jefferson sant

  • Starting Graphoman
  • *
  • Posts: 6677
  • volunteer
Re: False positive on phishing list
« Reply #3 on: December 16, 2019, 02:32:47 PM »
Hi, the website hxxps://maralauxen.com.br/ used to be infected half a year ago, but since then it was redone from scratch and it is using a new webserver.

We have checked on a lot of tools (Google, Sucuri, WordPress plugins, etc., etc.) and all show that the website is clean. But Avast is still showing to users as if it was a phishing attempt.

Can this website be removed from this list?

Detection was removed in 16.12.2019 at  06:31 AM

Quote from: Avast
Our virus specialists have now cleared its reputation in our database.

With URLs this change should be instant, but it might take up to 24 hours with files.