Author Topic: False Notification and It is affecting my business  (Read 2512 times)

0 Members and 1 Guest are viewing this topic.

dhana_space1

  • Guest
False Notification and It is affecting my business
« on: March 29, 2012, 02:50:21 PM »
Hello all/Avast,

My first posting here and I have tried my level best to find the correct section, If wrong, I am sorry...

Issue: I am business owner of xww.webhostings.in and When we try to open the website xww.webhostings.in, Avast is showing a false alarm as a phishing website. Actually we are a hosting company and we are aware of the Phishing Issues/problems, so we have double checked it for any such a issues. There is no such a script or issues, Then we are wondering how Avast is showing a false alarm.
Please find the attached screenshot for the same.


As it is affecting our business, It will really helpful if Avast team takes prompt action.
« Last Edit: March 29, 2012, 04:15:11 PM by Milos »

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 88897
  • No support PMs thanks
Re: False Notification and It is affecting my business
« Reply #1 on: March 29, 2012, 03:19:51 PM »
There are others that don't like it either, http://www.urlvoid.com/scan/webhostings.in/, the hpHosts info (from that link) shows a warning the IP doesn't resolve, image1. The Trend Micro is also more severe.

The software on the site is also out of date making it more vulnerable to hacking, image2.

####
- There is an on-line contact form, http://www.avast.com/contact-form.php?loadStyles for:  * Sales inquiries; Technical issues; Website issues; Report false virus alert in file; Report false virus alert on website; Undetected Malware; Press (Media), issues.

- If you are reporting an FP, then you get another input field open, enter the web URL for the site you wish to submit for review (Phishing), etc. A link to this topic also wouldn't hurt.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.2.6105 (build 24.2.8918.824) UI 1.0.799/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37506
  • Not a avast user
Re: False Notification and It is affecting my business
« Reply #2 on: March 29, 2012, 03:35:20 PM »
NOT listed at PhishThank  http://www.phishtank.com/phish_detail.php?phish_id=1391337


This Page Seems <Suspicious>  1 suspicious inline script found.  - 1 hidden external link found.
http://www.UnmaskParasites.com/security-report/?page=www.webhostings.in
« Last Edit: March 29, 2012, 03:40:35 PM by Pondus »

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33891
  • malware fighter
Re: False Notification and It is affecting my business
« Reply #3 on: March 29, 2012, 07:59:41 PM »
This part of the code also suspicous:
wXw.webhostings.in/media/system/js/mootools-core.js suspicious
[suspicious:2] (ipaddr:182.18.129.230) (script) wXw.webhostings.in/media/system/js/mootools-core.js
     status: (referer=wXw.webhostings.in/)saved 140305 bytes 4bb0768ca15bd2afb90c1843dc35e4b6e3415948
     info: ActiveXDataObjectsMDAC detected Microsoft.XMLHTTP
     info: [decodingLevel=0] found JavaScript
     error: undefined function document.createElement("input").getAttribute
     suspicious:
BrightClous gives the site a rep index yellow 50: There is some probability that the user will be exposed to malicious links or payloads...
WOT add-on says engaged in "astroturfing" http://www.mywot.com/en/scorecard/webhostings.in?src=addon-popup-donuts
Avast flags it as a  phishing site

polonus
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

dhana_space1

  • Guest
Re: False Notification and It is affecting my business
« Reply #4 on: March 30, 2012, 09:20:57 AM »

Thank you very much for everyone.
mootools is a popular javascript framework and we are using it. And also in our website there is no script or any program, which is doing any phishing and we are very confident about that. We have ensured it many times by doing various testing.

Now, We have raised a ticket to avast and we are waiting for their reply.
I will keep posted the progress, Thanks to all of you.

If any avast support team is there in forum, if they can help to speed up the process that will be very much appreciated.
Please find the Ticket details: RGF-160174


MysteryFCM

  • Guest
Re: False Notification and It is affecting my business
« Reply #5 on: April 09, 2012, 02:14:21 AM »
Just an FYI, they were blacklisted in the hpHosts database due to their constant spamming (my blog being one of those they decided to spam). Hence the GRM classification ;)