« previous next »
Pages: [1]   Go Down

Author Topic: Can't connect to Wells Fargo, recognized as phishing URL  (Read 5010 times)

0 Members and 1 Guest are viewing this topic.

Offline chriskoc0927

  • Newbie
  • *
  • Posts: 2
Can't connect to Wells Fargo, recognized as phishing URL
« on: July 14, 2020, 02:38:32 PM »
I normally do my banking with Wells Fargo using their app on my phone.  But I need to print out a few things so I went to connect to their site on my computer, and I immediately got an alert.  It told me that it was infected with URL:Phishing.  I haven't attempted to log in on my computer in a while, so this caught me off guard.  I don't even know how long this has been going on.  And I'm not sure what caused it or what to do.  I'm currently doing a search but very little is coming up, even on here, but none of it is very helpful.  So while I figure this out, I have to make print outs from somewhere else.  If someone here can help I'd really appreciate it.  Thanks.[/img][/img]
Logged

Offline Asyn

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 76037
    • >>> Avast Forum - Deutschsprachiger Bereich <<<
Re: Can't connect to Wells Fargo, recognized as phishing URL
« Reply #1 on: July 14, 2020, 02:46:17 PM »
You can report a suspected FP (File/Website) here: https://www.avast.com/false-positive-file-form.php
Logged
W8.1 [x64] - Avast Free AV 23.3.8047.BC [UI.757] - Firefox ESR 102.9 [NS/uBO/PB] - Thunderbird 102.9.1
Avast-Tools: Secure Browser 109.0 - Cleanup 23.1 - SecureLine 5.18 - DriverUpdater 23.1 - CCleaner 6.01
Avast Wissenswertes (Downloads, Anleitungen & Infos): https://forum.avast.com/index.php?topic=60523.0

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33900
  • malware fighter
Re: Can't connect to Wells Fargo, recognized as phishing URL
« Reply #2 on: July 14, 2020, 04:25:09 PM »
This uri is not flagged by avast: -https://connect.secure.wellsfargo.com/auth/login/present?origin=tpb
Avast says: This website is safe.

Are you sure you have landed onto the genuine legit page and weren't somehow maliciously being redirected?

polonus
Logged
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Offline Corinthian71

  • Newbie
  • *
  • Posts: 2
Re: Can't connect to Wells Fargo, recognized as phishing URL
« Reply #3 on: July 14, 2020, 10:34:45 PM »
Probably got the Avast Alarm on the Wells Fargo main website... https://www.wellsfargo.com. Not the online banking URL connect.wellsfargo.com.

I can confirm the same trouble.

I cannot confirm if the site is or is not infected in anyway... as AVAST is blocking access to the site.
Logged

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 89053
  • No support PMs thanks
Re: Can't connect to Wells Fargo, recognized as phishing URL
« Reply #4 on: July 15, 2020, 12:07:30 AM »
No alert on the main wellsfargo.com page.

EDIT: Added attached image.
« Last Edit: July 15, 2020, 12:09:13 AM by DavidR »
Logged
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.3.6108 (build 24.3.8975.762) UI 1.0.801/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33900
  • malware fighter
Re: Can't connect to Wells Fargo, recognized as phishing URL
« Reply #5 on: July 15, 2020, 12:33:34 AM »
Hi DavidR,

Thanks for confirming, my good forum friend,
so it must be something we are "missing out" in the old world.

DavidR is stationed in the UK and I am finding myself near Rotterdam in the Netherlands.
and that's on both sides of the North Sea.

So we'd better wait for avast's final verdict from the new world,
where the firm is also stationed to find out
about what experience avast staff has with this issue from there.

polonus
Logged
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Offline chriskoc0927

  • Newbie
  • *
  • Posts: 2
Re: Can't connect to Wells Fargo, recognized as phishing URL
« Reply #6 on: July 15, 2020, 08:27:39 AM »
Quote from: av.lqmarshall on July 14, 2020, 10:34:45 PM
Probably got the Avast Alarm on the Wells Fargo main website... https://www.wellsfargo.com. Not the online banking URL connect.wellsfargo.com.

I can confirm the same trouble.

I cannot confirm if the site is or is not infected in anyway... as AVAST is blocking access to the site.


That's the problem I'm having.  It's with www.wellsfargo.com.  Nothing loads when I go to connect.wellsfargo.com but when I go to connect.secure.wellsfargo.com the page loads as normal. No warnings or alerts. It's weird.
Logged

Offline Asyn

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 76037
    • >>> Avast Forum - Deutschsprachiger Bereich <<<
Re: Can't connect to Wells Fargo, recognized as phishing URL
« Reply #7 on: July 15, 2020, 08:50:11 AM »
Quote from: DavidR on July 15, 2020, 12:07:30 AM
No alert on the main wellsfargo.com page.
Just for the record, it currently gets blocked here.
Logged
W8.1 [x64] - Avast Free AV 23.3.8047.BC [UI.757] - Firefox ESR 102.9 [NS/uBO/PB] - Thunderbird 102.9.1
Avast-Tools: Secure Browser 109.0 - Cleanup 23.1 - SecureLine 5.18 - DriverUpdater 23.1 - CCleaner 6.01
Avast Wissenswertes (Downloads, Anleitungen & Infos): https://forum.avast.com/index.php?topic=60523.0

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 89053
  • No support PMs thanks
Re: Can't connect to Wells Fargo, recognized as phishing URL
« Reply #8 on: July 15, 2020, 11:18:28 AM »
Quote from: Asyn on July 15, 2020, 08:50:11 AM
Quote from: DavidR on July 15, 2020, 12:07:30 AM
No alert on the main wellsfargo.com page.
Just for the record, it currently gets blocked here.

Still not getting blocked using the link from chriskoc0927 gave.

I don't know if this is my Browser, Add-ons, setup, etc. 

I was also able to get to connect.secure.wellsfargo.com/auth/login/present?origin=tpb and no alert, very strange.
Logged
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.3.6108 (build 24.3.8975.762) UI 1.0.801/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33900
  • malware fighter
Re: Can't connect to Wells Fargo, recognized as phishing URL
« Reply #9 on: July 15, 2020, 11:31:17 PM »
Hi DavidR,

Also can get there and then see this inside the code
Quote
-<html xmlns="hxtp://www.w3 dot org/1999/xhtml" xmlns:tcdl="htxp://www.tridion dot com/ContentDelivery/5.3/TCDL"  class="no-js" lang="en">
&
Quote
  nonce="8fbf81a5-XXXX-4803-YYYY-f88c6ec62877">
        document.documentElement.className = document.documentElement.className.replace(/(^|\s)no-js(\s|$)/, '$1$2');
this is a security identifier aka SID. (hxtp XXXX YYYY dot com added by me for obvious reasons  ;)

kind regards,

polonus
Logged
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 89053
  • No support PMs thanks
Re: Can't connect to Wells Fargo, recognized as phishing URL
« Reply #10 on: July 16, 2020, 01:10:29 AM »
Quote from: polonus on July 15, 2020, 11:31:17 PM
Hi DavidR,

Also can get there and then see this inside the code
Quote
-<html xmlns="hxtp://www.w3 dot org/1999/xhtml" xmlns:tcdl="htxp://www.tridion dot com/ContentDelivery/5.3/TCDL"  class="no-js" lang="en">
&
Quote
  nonce="8fbf81a5-XXXX-4803-YYYY-f88c6ec62877">
        document.documentElement.className = document.documentElement.className.replace(/(^|\s)no-js(\s|$)/, '$1$2');
this is a security identifier aka SID. (hxtp XXXX YYYY dot com added by me for obvious reasons  ;)

kind regards,

polonus


Interesting, the tridion.com redirects to hXXps://wXw.sdl.com/  I wonder what that's all  about ?

Also see https://sitecheck.sucuri.net/results/tridion.com medium security risk.
And https://webhint.io/scanner/70a88ce3-55fd-4903-bdce-e3b8cb2a98da
Logged
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.3.6108 (build 24.3.8975.762) UI 1.0.801/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

Offline Asyn

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 76037
    • >>> Avast Forum - Deutschsprachiger Bereich <<<
Re: Can't connect to Wells Fargo, recognized as phishing URL
« Reply #11 on: July 16, 2020, 06:12:54 AM »
Quote from: DavidR on July 15, 2020, 11:18:28 AM
Quote from: Asyn on July 15, 2020, 08:50:11 AM
Quote from: DavidR on July 15, 2020, 12:07:30 AM
No alert on the main wellsfargo.com page.
Just for the record, it currently gets blocked here.
Still not getting blocked using the link from chriskoc0927 gave.
I don't know if this is my Browser, Add-ons, setup, etc. 
I was also able to get to connect.secure.wellsfargo.com/auth/login/present?origin=tpb and no alert, very strange.
Update, it doesn't get blocked here anymore either.
Logged
W8.1 [x64] - Avast Free AV 23.3.8047.BC [UI.757] - Firefox ESR 102.9 [NS/uBO/PB] - Thunderbird 102.9.1
Avast-Tools: Secure Browser 109.0 - Cleanup 23.1 - SecureLine 5.18 - DriverUpdater 23.1 - CCleaner 6.01
Avast Wissenswertes (Downloads, Anleitungen & Infos): https://forum.avast.com/index.php?topic=60523.0
Pages: [1]   Go Up
« previous next »