Author Topic: Avast blocks survey platform as Bot Net  (Read 1167 times)

0 Members and 1 Guest are viewing this topic.

Offline Jim483

  • Newbie
  • *
  • Posts: 2
Avast blocks survey platform as Bot Net
« on: October 11, 2021, 12:32:05 PM »
We use a survey platform embedded in Constant Contact for our weekly e-zine. Recently, links to a survey has been blocked by Avast as infected by a bot net. Here's the link:

hXXps://r20.rs6.net/tn.jsp?f=001tyROGsp_gAYWcrlZNcKlgsvdnZoP99UT3W9zCfub4ryXlAU3l6Mew4ibHgi1tSuP4igz4olkdytWqiP3AXa5I-F1jLnJ94Jk17V0sULrGB20AmvGIgjeyE24FO6kJHHGnIQtori-mikvTl0OeZibRqA7cbLAl4H-&c=lKFxI5hB4k7lWB9yYjtO3l9ADGar7A-r94i57V2YHw0e9WrW92S50A==&ch=vaeQ6W0GqpLLVk57Z8e4WH9EV35sIa5bro5z2qv8-sUteL0l9OCVww==

We've used this survey platform for a while without problems. Thanks JB
« Last Edit: October 11, 2021, 12:58:00 PM by Jim483 »

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 85959
  • No support PMs thanks
Re: Avast blocks survey platform as Bot Net
« Reply #1 on: October 11, 2021, 12:37:41 PM »
Please 'modify' your post change the URL from https to hXXps, to break the link and avoid accidental exposure to suspect sites, thanks.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 21.9.2494 (build 21.9.6698.703) UI 1.0.672/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

Offline Jim483

  • Newbie
  • *
  • Posts: 2
Re: Avast blocks survey platform as Bot Net
« Reply #2 on: October 11, 2021, 12:59:15 PM »
Corrected. Sorry for the rookie mistake. JB

Offline Asyn

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 72857
    • >>>  Avast Forum - Deutschsprachiger Bereich  <<<
Win 8.1 [x64] - Avast PremSec 21.10.6772.IBC [UI.679] - EEK - Firefox ESR 91.3 [NS/uBO/PB] - TB 91.3.2
Avast-Tools: Secure Browser 96.0 - Cleanup 21.3 - SecureLine 5.14 - Driver Updater 21.3 - CCleaner 5.87
Avast Wissenswertes (Downloads, Anleitungen & Infos): https://forum.avast.com/index.php?topic=60523.0

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33374
  • malware fighter
Re: Avast blocks survey platform as Bot Net
« Reply #4 on: October 19, 2021, 06:48:49 PM »
See what abuse the of that site IP kicks up: https://www.abuseipdb.com/check/208.75.122.11
Scumware detects it here: https://www.urlvoid.com/scan/r20.rs6.net/

But wait for a final verdict by avast team, as they are the only ones to come and unblock.

Here it is given green: https://www.virustotal.com/gui/url/ab566143a6bc92713ce6a99a5830e23b4fff09359f287ebf3cfcbf96bcfa141c/detection

polonus (volunteer 3rd party cold recon website security analyst and website error-hunter)
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33374
  • malware fighter
Re: Avast blocks survey platform as Bot Net
« Reply #5 on: October 22, 2021, 11:16:47 AM »
Normally adblockers like uBlock Origin will block r20.rs6.net as tracker.
Address is also blocked in adblocking browsers, like epic's.

polonus
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!