Author Topic: False Positive on a New York State Goverment Website  (Read 1691 times)

0 Members and 1 Guest are viewing this topic.

Offline KDibble

  • Sr. Member
  • ****
  • Posts: 229
False Positive on a New York State Goverment Website
« on: May 18, 2022, 05:59:18 PM »
I've filed a false positive report with Avast on this. I'm posting it here in case anyone is able to help speed up their response.

These websites:

hxtps://www.nytrainingservices.com/
hxtps://www.nytrainingservices.com/healthassistors

are official New York State training websites for people who operate under New York State Department of Health contracts to help people purchase health insurance.

A recent VirusTotal scan finds no issues (a scan from a year ago had one vendor reporting an issue but that vendor now reports the website as clean).

Avast Business Pro is blocking these sites as "URL:Phishing".

This is a website that many of our employees use frequently, and so it is important to correct this issue quickly.

Thanks for your support.
« Last Edit: June 03, 2022, 11:55:46 AM by Milos »

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33891
  • malware fighter
Re: False Positive on a New York State Goverment Website
« Reply #1 on: May 19, 2022, 01:21:09 PM »
Hi KDibble,

Probably the reason was Scamvertising on basis of IP abuse reports:
https://www.abuseipdb.com/check/198.49.23.145

Here it was not flagged: https://quttera.com/detailed_report/www.nytrainingservices.com

A mere 4% of content being blocked for me at this site. Trend Micro gives it the all green.

Wait for a final verdict from an avast team member, as avast team are the only ones to come and unblock,
we here are just volunteers with relative knowledge in the field of 3rd party cold recon website security and error-hunting,

polonus
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Online DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 88900
  • No support PMs thanks
Re: False Positive on a New York State Goverment Website
« Reply #2 on: May 19, 2022, 08:45:44 PM »
@ KDibble
If you mean the - Reporting a possible Malicious sample File or Website link - then you should get a response in a day or  two.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.2.6105 (build 24.2.8918.824) UI 1.0.799/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33891
  • malware fighter
Re: False Positive on a New York State Goverment Website
« Reply #3 on: May 19, 2022, 11:21:52 PM »
Hi KDibble,

In the light of what DavidR added, can you share with us here what was avast team's final verdict.

Website has a self-referencing canonical. No CSP detected.
Javascript resources seem all OK.


polonus
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!