Author Topic: False Positive site gestaosaude.mcinfor-saude.net.br  (Read 981 times)

0 Members and 1 Guest are viewing this topic.

Offline Rafael Souza

  • Newbie
  • *
  • Posts: 2
False Positive site gestaosaude.mcinfor-saude.net.br
« on: December 21, 2021, 02:03:49 PM »
Hi, my website hxtps://gestaosaude.mcinfor-saude.net.br/ is presenting it as phishing on Avast, causing my customers to be unable to access. It is free of any threat, I checked several sites and none found any anomaly. It is a system for internal use in health clinics for information consultation between patient and doctor.
« Last Edit: December 21, 2021, 02:57:28 PM by Milos »

Offline Asyn

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 73485
    • >>>  Avast Forum - Deutschsprachiger Bereich  <<<
Re: False Positive site gestaosaude.mcinfor-saude.net.br
« Reply #1 on: December 21, 2021, 02:17:21 PM »
Hi, you can report a suspected FP (File/Website) here: https://www.avast.com/false-positive-file-form.php
Win 8.1 [x64] - Avast PremSec 22.1.6864.IBC [UI.688] - EEK - Firefox ESR 91.5 [NS/uBO/PB] - TB 91.5.0
Avast-Tools: Secure Browser 97.1 - Cleanup 21.4 - SecureLine 5.15 - Driver Updater 21.4 - CCleaner 5.88
Avast Wissenswertes (Downloads, Anleitungen & Infos): https://forum.avast.com/index.php?topic=60523.0

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33440
  • malware fighter
Re: False Positive site gestaosaude.mcinfor-saude.net.br
« Reply #2 on: December 22, 2021, 07:48:06 AM »
Wait for a final verdict from avast team, as they are the only ones to come and unblock.
But consider the backlink and redirect given here: https://host.io/mcinfor-saude.net.br

Moreover scans fail as website has a redirect loop: https://labs.sucuri.net/signatures/sitecheck/warning-redirect/loop/

polonus
« Last Edit: December 22, 2021, 04:45:48 PM by polonus »
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Offline Rafael Souza

  • Newbie
  • *
  • Posts: 2
Re: False Positive site gestaosaude.mcinfor-saude.net.br
« Reply #3 on: December 22, 2021, 04:09:46 PM »
Yes, I submitted the form but no one has replied yet.

Offline Asyn

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 73485
    • >>>  Avast Forum - Deutschsprachiger Bereich  <<<
Re: False Positive site gestaosaude.mcinfor-saude.net.br
« Reply #4 on: December 22, 2021, 04:20:19 PM »
Yes, I submitted the form but no one has replied yet.
You should get a reply within 48 hours.
Win 8.1 [x64] - Avast PremSec 22.1.6864.IBC [UI.688] - EEK - Firefox ESR 91.5 [NS/uBO/PB] - TB 91.5.0
Avast-Tools: Secure Browser 97.1 - Cleanup 21.4 - SecureLine 5.15 - Driver Updater 21.4 - CCleaner 5.88
Avast Wissenswertes (Downloads, Anleitungen & Infos): https://forum.avast.com/index.php?topic=60523.0

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33440
  • malware fighter
Re: False Positive site gestaosaude.mcinfor-saude.net.br
« Reply #5 on: December 27, 2021, 01:27:46 PM »
Also consider these scan results: https://quttera.com/detailed_report/gestaosaude.mcinfor-saude.net.br
and: https://urlscan.io/result/44be3e0c-e680-4fc7-adc5-c1fbcca76adf/

What might have led to an FP, see: https://www.virustotal.com/gui/ip-address/191.6.209.200/relations
See: https://www.virustotal.com/gui/domain/www.olimpustecnologia.com.br/details  (site on same IP).

By the way has bower_components/bootstrap been fully updated?

Also this sets your site open to questionable scanning: htxp://gestaosaude.mcinfor-saude.net.br/login#!/index

Plus all the live and dead links that can be scanned via the http version of that site, that is accessable.

polonus
« Last Edit: December 27, 2021, 01:50:17 PM by polonus »
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Offline Pavel Rujzl

  • Avast team
  • Jr. Member
  • *
  • Posts: 25
Re: False Positive site gestaosaude.mcinfor-saude.net.br
« Reply #6 on: January 07, 2022, 06:45:19 PM »
@Rafael Souza Still no update, please?