Author Topic: My website being blocked for apparent URL:Phishing  (Read 10839 times)

0 Members and 1 Guest are viewing this topic.

Offline alireza.021

  • Newbie
  • *
  • Posts: 1
My website being blocked for apparent URL:Phishing
« on: March 16, 2020, 07:30:06 AM »
Hello, I'm having problems with my website - wxw.shiny.ae whenever I try to access it from any computer that has Avast installed it does not allow access and the attachment popup appears which states that the website is infected with URL:Phishing.

Please unblock this Url, thank you
« Last Edit: June 24, 2021, 11:12:39 AM by Milos »

Offline Asyn

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 76037
    • >>>  Avast Forum - Deutschsprachiger Bereich  <<<
W8.1 [x64] - Avast Free AV 23.3.8047.BC [UI.757] - Firefox ESR 102.9 [NS/uBO/PB] - Thunderbird 102.9.1
Avast-Tools: Secure Browser 109.0 - Cleanup 23.1 - SecureLine 5.18 - DriverUpdater 23.1 - CCleaner 6.01
Avast Wissenswertes (Downloads, Anleitungen & Infos): https://forum.avast.com/index.php?topic=60523.0

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37506
  • Not a avast user

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33891
  • malware fighter
Re: My website being blocked for apparent URL:Phishing
« Reply #3 on: March 16, 2020, 02:29:08 PM »
Hi alireza.021,

Your website could be quite considerably more secure.
Has a mediocre F-grade scan result here: https://observatory.mozilla.org/analyze/www.shiny.ae
Various recommendations to improve website from linting here:
https://webhint.io/scanner/7e6b8281-bebc-4127-ab7a-7f954f33b503

Consider: https://aw-snap.info/file-viewer/?protocol=not-secure&ref_sel=GSP2&ua_sel=ff&chk-cache=&fs=1&tgt=d3d3LnNoW255Lnx7~enc   

https://www.shodan.io/host/88.198.59.226

IP related detections: https://www.virustotal.com/gui/ip-address/88.198.59.226/relations

Outdated PHP version. : : PHP 5.6.4

Wait for a final verdict from an avast team member, they are the only ones to come and unblock,
we here are just volunteers with relative knowledge.

polonus (volunteer 3rd party cold recon website security analyst and website error-hunter)
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Offline jefferson sant

  • Starting Graphoman
  • *
  • Posts: 6677
  • volunteer
Re: My website being blocked for apparent URL:Phishing
« Reply #4 on: March 17, 2020, 12:24:35 PM »
Hello, I'm having problems with my website - wxw.shiny.ae whenever I try to access it from any computer that has Avast installed it does not allow access and the attachment popup appears which states that the website is infected with URL:Phishing.

Please unblock this Url, thank you

Detection was removed in 17.03.2020 at 05:41 AM

Quote from: Avast
Our virus specialists have now cleared its reputation in our database.

With URLs this change should be instant, but it might take up to 24 hours with files.

Offline Nancy146

  • Newbie
  • *
  • Posts: 3
Re: My website being blocked for apparent URL:Phishing
« Reply #5 on: March 21, 2020, 10:52:23 PM »
I am receiving a URL:Phishing Error when attempting to access jotform.com.

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 88897
  • No support PMs thanks
Re: My website being blocked for apparent URL:Phishing
« Reply #6 on: March 22, 2020, 01:08:43 AM »
I am receiving a URL:Phishing Error when attempting to access jotform.com.

Whilst not blocked by other security software, there are some things you need to consider:
https://sitecheck.sucuri.net/results/jotform.com

You can report this directly yo Avast - Reporting Possible False Positive File or Website - https://www.avast.com/false-positive-file-form.php.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.2.6105 (build 24.2.8918.824) UI 1.0.799/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

Offline Nancy146

  • Newbie
  • *
  • Posts: 3
Re: My website being blocked for apparent URL:Phishing
« Reply #7 on: March 22, 2020, 01:14:30 AM »
Thanks, I have submitted the problem per your suggestion.

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 88897
  • No support PMs thanks
Re: My website being blocked for apparent URL:Phishing
« Reply #8 on: March 22, 2020, 01:20:03 AM »
You're welcome, but you also need to address the other issues as these could be exploited.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.2.6105 (build 24.2.8918.824) UI 1.0.799/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

Offline Nancy146

  • Newbie
  • *
  • Posts: 3
Re: My website being blocked for apparent URL:Phishing
« Reply #9 on: March 23, 2020, 08:44:59 PM »
Problem resolved, block removed. Thanks!

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 88897
  • No support PMs thanks
Re: My website being blocked for apparent URL:Phishing
« Reply #10 on: March 23, 2020, 09:31:32 PM »
You're welcome.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.2.6105 (build 24.2.8918.824) UI 1.0.799/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

Offline haindidctest

  • Newbie
  • *
  • Posts: 1
Re: My website being blocked for apparent URL:Phishing
« Reply #11 on: June 03, 2021, 05:36:41 PM »
same error. I have submitted the problem per your suggestion.

My website: hxtps://vina-ca.vn
« Last Edit: June 24, 2021, 11:13:02 AM by Milos »

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 88897
  • No support PMs thanks
Re: My website being blocked for apparent URL:Phishing
« Reply #12 on: June 03, 2021, 06:06:57 PM »
same error. I have submitted the problem per your suggestion.

My website: hxxps://vina-ca.vn

Please 'modify' your post change the URL from https to hXXps, to break the link and avoid accidental exposure to suspect sites, thanks.

jQuery is out of date on your site - https://awesometechstack.com/analysis/website/vina-ca.vn/?protocol=https%3A
Some security tips on this check - https://webhint.io/scanner/ab18ca52-152c-4d59-a12e-6ec617955eb9
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.2.6105 (build 24.2.8918.824) UI 1.0.799/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33891
  • malware fighter
Re: My website being blocked for apparent URL:Phishing
« Reply #13 on: June 04, 2021, 12:32:24 AM »
Detection could have been IP related. Wait for a final verdict from avast team.
Also consider: https://site-stats.org/vina-ca.vn/#

polonus
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Offline Adam638

  • Newbie
  • *
  • Posts: 1
2of My brand new websites being blocked for apparent URL:Phishing
« Reply #14 on: June 21, 2021, 07:37:14 PM »
Hi, I am a web developer and have recently bought 2 new domain names and installed exactly the same way I have installed the other 100 sites I have built. Within a couple of hours, the first site was blocked with the alert ' Threat Blocked, we've safely aborted www. because it was infected with URL:Phishing.'

My client needs his website online quickly so we bought another domain, I did report this to Avast - as a false positive - and have heard nothing back! So today I did a fresh install with the new domain (never used before) and within 3 hours of installation, it has been blocked the same as the first.

First domain was https://trusted-tattoo.com and the new domain is https://trustedtattoo.ink The first site has been deleted

These are standard WordPress sites, no ecommerce, valid SSL and once scanned no malware was found. How can I get this block removed and why is it happening so quickly, can it be an IP address? Ive never had this issue before, and my client is getting annoyed! Thanks for any help