Author Topic: Website being blocked as Phishing  (Read 3315 times)

0 Members and 1 Guest are viewing this topic.

Offline Charbel3

  • Newbie
  • *
  • Posts: 2
Website being blocked as Phishing
« on: February 21, 2020, 06:26:16 AM »
Hi Team

We are having major issues with our company website. The site is https://zip.co

ALL urls containing ZIP.co are being marked as PHISHING (see attachment). This is happening with both AVAST and AVG browser checked. With have logged multiple false positives and called numerous numbers. We cannot get any traction. This is having major issues with revenue as customers cannot transact.

When searching Virus Total, Talos, and every other reputable company, out site is not blacklisted. Only AVG and AVAST are.

Can we please have this urgently looked at as it is impacting our business?

Charbel

Offline Asyn

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 63493
    • >>>  Avast Forum - Deutschsprachiger Bereich  <<<
Win 8.1 [x64] - Avast PremSec 20.2.2400.Beta#3 [UI.501] - CC 5.65 - EEK - Firefox ESR 68.6 [NS/AOS/uBO/PB] - TB 68.6 - ASB/ASL.BC
Deutschsprachiger Bereich -> Avast Wissenswertes (Downloads, Anleitungen & Infos): https://forum.avast.com/index.php?topic=60523.0

Offline Charbel3

  • Newbie
  • *
  • Posts: 2
Re: Website being blocked as Phishing
« Reply #2 on: February 21, 2020, 06:40:16 AM »
Thank you for proving that there is nothing wrong with our site.

We have logged a number of times that there is a false positive. I am yet to receive a confirmation that someone is looking into this.


Offline Asyn

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 63493
    • >>>  Avast Forum - Deutschsprachiger Bereich  <<<
Re: Website being blocked as Phishing
« Reply #3 on: February 21, 2020, 06:57:19 AM »
You're welcome.
Win 8.1 [x64] - Avast PremSec 20.2.2400.Beta#3 [UI.501] - CC 5.65 - EEK - Firefox ESR 68.6 [NS/AOS/uBO/PB] - TB 68.6 - ASB/ASL.BC
Deutschsprachiger Bereich -> Avast Wissenswertes (Downloads, Anleitungen & Infos): https://forum.avast.com/index.php?topic=60523.0

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 32241
  • malware fighter
Re: Website being blocked as Phishing
« Reply #4 on: February 21, 2020, 09:52:50 AM »
More than likely the detection is IP-related because of existing abuse on Amazon (trade-doubler etc.):
https://www.virustotal.com/gui/ip-address/13.249.134.9/relations
Threat DGA detected.
XSS-DOM sinks and sources: results from scanning URL: -https://zip.co/polyfills-es2015.86d53968b5707fa5dc24.js
Number of sources found: 379
Number of sinks found: 67

Consider also: -https://4qltfsar50.execute-api.ap-southeast-2.amazonaws.com/production/merchant?id=%255B7184%252C2312%255D
Blocked for me: -cdn.optimizely.com

Wait for a final verdict from an avast team member. They are the ones to come and unblock.

Seems site has already been unblocked.

polonus
« Last Edit: February 27, 2020, 12:23:46 AM by polonus »
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!