Author Topic: Avast blocks survey platform as Bot Net  (Read 3811 times)

0 Members and 1 Guest are viewing this topic.

Offline Jim483

  • Newbie
  • *
  • Posts: 2
Avast blocks survey platform as Bot Net
« on: October 11, 2021, 12:32:05 PM »
We use a survey platform embedded in Constant Contact for our weekly e-zine. Recently, links to a survey has been blocked by Avast as infected by a bot net. Here's the link:

hXXps://r20.rs6.net/tn.jsp?f=001tyROGsp_gAYWcrlZNcKlgsvdnZoP99UT3W9zCfub4ryXlAU3l6Mew4ibHgi1tSuP4igz4olkdytWqiP3AXa5I-F1jLnJ94Jk17V0sULrGB20AmvGIgjeyE24FO6kJHHGnIQtori-mikvTl0OeZibRqA7cbLAl4H-&c=lKFxI5hB4k7lWB9yYjtO3l9ADGar7A-r94i57V2YHw0e9WrW92S50A==&ch=vaeQ6W0GqpLLVk57Z8e4WH9EV35sIa5bro5z2qv8-sUteL0l9OCVww==

We've used this survey platform for a while without problems. Thanks JB
« Last Edit: October 11, 2021, 12:58:00 PM by Jim483 »

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 88749
  • No support PMs thanks
Re: Avast blocks survey platform as Bot Net
« Reply #1 on: October 11, 2021, 12:37:41 PM »
Please 'modify' your post change the URL from https to hXXps, to break the link and avoid accidental exposure to suspect sites, thanks.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.1.6099 (build 24.1.8821.762) UI 1.0.796/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

Offline Jim483

  • Newbie
  • *
  • Posts: 2
Re: Avast blocks survey platform as Bot Net
« Reply #2 on: October 11, 2021, 12:59:15 PM »
Corrected. Sorry for the rookie mistake. JB

Offline Asyn

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 76038
    • >>>  Avast Forum - Deutschsprachiger Bereich  <<<
W8.1 [x64] - Avast Free AV 23.3.8047.BC [UI.757] - Firefox ESR 102.9 [NS/uBO/PB] - Thunderbird 102.9.1
Avast-Tools: Secure Browser 109.0 - Cleanup 23.1 - SecureLine 5.18 - DriverUpdater 23.1 - CCleaner 6.01
Avast Wissenswertes (Downloads, Anleitungen & Infos): https://forum.avast.com/index.php?topic=60523.0

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33868
  • malware fighter
Re: Avast blocks survey platform as Bot Net
« Reply #4 on: October 19, 2021, 06:48:49 PM »
See what abuse the of that site IP kicks up: https://www.abuseipdb.com/check/208.75.122.11
Scumware detects it here: https://www.urlvoid.com/scan/r20.rs6.net/

But wait for a final verdict by avast team, as they are the only ones to come and unblock.

Here it is given green: https://www.virustotal.com/gui/url/ab566143a6bc92713ce6a99a5830e23b4fff09359f287ebf3cfcbf96bcfa141c/detection

polonus (volunteer 3rd party cold recon website security analyst and website error-hunter)
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33868
  • malware fighter
Re: Avast blocks survey platform as Bot Net
« Reply #5 on: October 22, 2021, 11:16:47 AM »
Normally adblockers like uBlock Origin will block r20.rs6.net as tracker.
Address is also blocked in adblocking browsers, like epic's.

polonus
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!