Author Topic: How do I remove FALSE positive website URL?  (Read 3064 times)

0 Members and 1 Guest are viewing this topic.

Offline ArthurM

  • Newbie
  • *
  • Posts: 4
How do I remove FALSE positive website URL?
« on: March 21, 2021, 10:52:27 AM »
Hello,

the website "hxxps://icorsidelprofessore. co" has been blacklisted by Avast.

Avast says: 'we have safetely aborted connection on "icorsidelprofessore . co" because it was infected  with URL blacklist'.

For sure it is a FALSE positive, since the website is totally clean: no hacking, no malware and definitively no phishing.

Here some blacklist engines showing that the website is totally ok:

https://www.siteadvisor.com/sitereport.html?url=icorsidelprofessore.co
https://awesometechstack.com/analysis/website/icorsidelprofessore.co/?protocol=http%3A
https://sitecheck.sucuri.net/results/icorsidelprofessore.co
https://transparencyreport.google.com/safe-browsing/search?url=icorsidelprofessore.co

Could you please look into it in order to remove it from your blacklist?

Thanks in advance.


Offline ArthurM

  • Newbie
  • *
  • Posts: 4
Re: How do I remove FALSE positive website URL?
« Reply #2 on: March 21, 2021, 11:49:00 AM »
Thanks for your reply.

I already submitted the request.

Do you know how long it takes?
Is there anything I can do in the meanwhile in order to sort this out?

Thanks again.

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33904
  • malware fighter
Re: How do I remove FALSE positive website URL?
« Reply #3 on: March 21, 2021, 12:51:02 PM »
All following instances give the website as clean:
DShield    CLEAN
AlienVault OTX      CLEAN
Cisco Talos    CLEAN
abuse.ch (Feodo)    CLEAN
URLhaus    CLEAN
Spamhaus (Drop / eDrop)    CLEAN

Also given as clean: Externally Linked Host   Hosting / Company Netblock   Country   US
     wXw.litespeedtech.com   AMAZON-AES

Possibly FP because of flagged Soak Soak compromise (dating back from 2014, has it since been patched?),
see: Issues: http://github.com/kenwheeler/slick/issues

Re: Results from DOM-XSS-scanning URL: hxtps://icorsidelprofessore.co/wp-content/plugins/woo-product-slider/public/assets/js/slick-config.min.js?ver=2.2.9
Number of sources found: 2
Number of sinks found: 2

So wait for the final verdict from avast team, as they are the only ones to come and unblock.

polonus (volunteer 3rd party cold recon website security-analyst and website error-hunter)
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Offline ArthurM

  • Newbie
  • *
  • Posts: 4
Re: How do I remove FALSE positive website URL?
« Reply #4 on: March 22, 2021, 11:54:25 AM »
Hello,

thanks for your detailed reply.

If this can speed up the process,
please note that Norton successfully whitelisted my website after the FALSE positive submission: https://safeweb.norton.com/report/show_mobile?url=icorsidelprofessore.co

If there is anything I can do in order to speed up the process, please let me know.


Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33904
  • malware fighter
Re: How do I remove FALSE positive website URL?
« Reply #6 on: March 22, 2021, 12:47:45 PM »
Hi ArthurM,

Wait for their reaction after you sent a FP report,

polonus
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!