Author Topic: Blocking gofobo.com gofobo.ticktbox.com due to URL:Blacklist  (Read 935 times)

0 Members and 1 Guest are viewing this topic.

Offline ts1234ts

  • Newbie
  • *
  • Posts: 4
Blocking gofobo.com gofobo.ticktbox.com due to URL:Blacklist
« on: March 28, 2024, 10:55:18 PM »
For over 5 years I have received emails from www.gofobo.com with info about new movies and movie trailers.
Some emails offer a free raffle to receive a minor swag item and have a "RAFFLE" CELL BOX to click that opens your browser (Safari) and takes you from the email to a Raffle Entry page.  Every month they have about 4-5 raffles.  I have entered many of these raffles over the last 5 years without any problem and without receiving an AVAST warning alert.

However over the last 1-2 months, whenever I click on the "Go to Raffle" button, AVAST immediately blocks the raffle entry page from showing and issues two separate Avast Warning Dialog Boxes saying:

FIRST DIALOG BOX:
Whew! We’ve just saved you from an infected website
Infected URL: https://gofobo.ticktbox.com/redirect/kvUMqF
Threat: URL:Blacklist
This URL contains malicious code that could harm your computer.
If you’re willing to risk it, you can turn off your Avast Web Shield to continue.
But we strongly recommend walking away from this one.

SECOND DIALOG BOX (with 2 pages):
Multiple web threats secured:

We’ve blocked a threat URL:Blacklist on https://gofobo.ticktbox.com/redirect/kvUMqF from being downloaded.
Threat name:   URL:Blacklist
Severity:  2 0f 3
Website:   https://gofobo.ticktbox.com/redirect/kvUMqF
Proscess:   /System/Volumes/Preboot/Cryptexes/App/System/Applications/Sa
Detected by:   Web Shield
Status:   Threat blocked

We’ve blocked a threat URL:Blacklist on https://gofobo.ticktbox.com/favicon.ico from being downloaded.
Threat name:   URL:Blacklist
Severity:  2 0f 3
Website:   https://gofobo.ticktbox.com/favicon.ico
Proscess:   /System/Volumes/Preboot/Cryptexes/App/System/Applications/Sa
Detected by:   Web Shield
Status:   Threat blocked


So now I can't enter any of the raffles.
I don't know the connection between gofobo.com and ticktbox.com.  But both are in the business of advertising and promoting new films of the movie industry.

QUESTION:
Is it true that the gofobo and ticktbox sites are containing some viruses and trying to infect my system with malware?
Or is this a FP .... and I can turn off AVAST for this site?

If one of these sites is trying to infect my system with malware, then I'll just STOP my email subscription to the gofobo.com site.

Please let me know....and thanks for the info!

-- ts1234ts




Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 89335
  • No support PMs thanks
Re: Blocking gofobo.com gofobo.ticktbox.com due to URL:Blacklist
« Reply #2 on: March 28, 2024, 11:11:48 PM »
Minimal security risk here - https://quttera.com/detailed_report/gofobo.ticktbox.com

Reporting a Possible False Positive File or Website - https://www.avast.com/false-positive-file-form.php.
You should get a response in a day or two.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.5.6116 (build 24.5.9153.762) UI 1.0.808/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

Offline ts1234ts

  • Newbie
  • *
  • Posts: 4
Re: Blocking gofobo.com gofobo.ticktbox.com due to URL:Blacklist
« Reply #3 on: March 28, 2024, 11:35:32 PM »
OK. Thank you for your responses!

I just filed an FP Report.

I could NOT find an Alert ID number.

PS-
BTW, the Verification Box is extremely small and extremely hard to read. Some letters are entirely unreadable. I've had to spend many minutes at it each time.  Numerous requests for another image. And I get no sound. Why isn't it larger, at the very least!?

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 89335
  • No support PMs thanks
Re: Blocking gofobo.com gofobo.ticktbox.com due to URL:Blacklist
« Reply #4 on: March 29, 2024, 12:57:54 AM »
The verifications (Capthua)  are an anti-spam measure (and I believe controlled by the forum software), however they are only there for your first 3 posts.

Quote from: ts1234ts
I could NOT find an Alert ID number.
When you get an Avast Alert at the very bottom of that window is a unique Id number, which is more meaningful to the Avast Team, but not so much for Avast users in the forums.

See my attached image (click to expand), note I have also selected the see Details option.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.5.6116 (build 24.5.9153.762) UI 1.0.808/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

Offline ts1234ts

  • Newbie
  • *
  • Posts: 4
Re: Blocking gofobo.com gofobo.ticktbox.com due to URL:Blacklist
« Reply #5 on: March 29, 2024, 01:18:52 AM »
I can affirm that I did NOT get the Alert ID number.

I re-created the Alert Message....and still no Alert ID.
Maybe it is because I am using Apple macOS system vs Windows?

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 89335
  • No support PMs thanks
Re: Blocking gofobo.com gofobo.ticktbox.com due to URL:Blacklist
« Reply #6 on: March 29, 2024, 01:42:17 AM »
As they say a picture is worth a thousand words.

Two different products:
Avast for Mac https://forum.avast.com/index.php?board=5.0 - you may find related something there.
Avast for Windows which I use so I'm not familiar with the Avast for Mac product.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.5.6116 (build 24.5.9153.762) UI 1.0.808/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

Online polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33931
  • malware fighter
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Offline ts1234ts

  • Newbie
  • *
  • Posts: 4
Re: Blocking gofobo.com gofobo.ticktbox.com due to URL:Blacklist
« Reply #8 on: March 29, 2024, 07:57:56 PM »
I read the Testing Report of the gofobo.com site.
Thank you for that.

AVAST checked the gofobo.com site and found it to be OK.
Now, when I go to the site, I do NOT get the AVAST blockage of pages and AVAST Alert Dialog Boxes.
And now I am successfully able to enter the raffles on the site.
Thank you.

I see no Testing Report of either gofobo.ticktbox.com or ticktbox.com.
However, I will assume that those sites are also OK, since AVAST now allows me to be able to click on the Raffle Button, go to the unblocked Raffle Entry page, and enter a raffle.

Well, this has been a nice experience of a small learning curve (in how to use this Avast Forum and report issues).
I "ignored" the problem for weeks until I could find the time....and now it is resolved.
Thanks again to the Responders.

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 89335
  • No support PMs thanks
Re: Blocking gofobo.com gofobo.ticktbox.com due to URL:Blacklist
« Reply #9 on: March 30, 2024, 12:14:53 AM »
You're welcome, thanks for the clarification.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.5.6116 (build 24.5.9153.762) UI 1.0.808/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security