Jump to content

My domain flagged for phishing


JFGX

Recommended Posts

22 minutes ago, JFGX said:

I was able to access this normally about 2 hours ago, but now Malwarebytes flags it with "Website blocked due to phishing".

What should I do about this?

I was able to reach your site with all 4 of my browsers.

Do you have a log or screenshot please?

Link to post
Share on other sites

  • Staff
25 minutes ago, JFGX said:

Domain is mifflinsoaring.org

I was able to access this normally about 2 hours ago, but now Malwarebytes flags it with "Website blocked due to phishing".

What should I do about this?

 

 

Hello-

We do not show the domain nor the IP it is located on in our databases.

Link to post
Share on other sites

I just now tried it again, and do not see any "Website blocked due to phishing" warnings.  Before posting the question, I saw these during three consecutive attempts to access the domain.

So I'm puzzled, but happy that things - for now - seem to be as they should.

 

Thanks for prompt attention to this.

 

Link to post
Share on other sites

Help! The "Website blocked due to phishing" problem has returned. 

I don't see this on the website's home page, and not always on the first sub-page that I visit.  But eventually it appears, and once it does it seems to show on all pages.

Again, the website is www.mifflinsoaring.org

Here's the info that appears in the box that pops up (and which persists for only about 20% of the time necessary to copy its info):

    Domain: www.mifflinsoaring.org.dream.website  [this is a site hosted by DreamHost]

    IP address: 173.236.157.63

    Port: 80

    Type: Outbound

 

What would trigger this warning?  Note that all pages of this website are read-only - none attempts to collect any user information.

 

 

 

Link to post
Share on other sites

  • Staff
5 hours ago, JFGX said:

Help! The "Website blocked due to phishing" problem has returned. 

I don't see this on the website's home page, and not always on the first sub-page that I visit.  But eventually it appears, and once it does it seems to show on all pages.

Again, the website is www.mifflinsoaring.org

Here's the info that appears in the box that pops up (and which persists for only about 20% of the time necessary to copy its info):

    Domain: www.mifflinsoaring.org.dream.website  [this is a site hosted by DreamHost]

    IP address: 173.236.157.63

    Port: 80

    Type: Outbound

 

What would trigger this warning?  Note that all pages of this website are read-only - none attempts to collect any user information.

 

 

 

Again, neither of those in our DB, send us a screenshot of the message or an actual log detail, also assure you have the latest database installed. 

Link to post
Share on other sites

1 hour ago, TeMerc said:

Again, neither of those in our DB, send us a screenshot of the message or an actual log detail, also assure you have the latest database installed. 

Malwarebytes
www.malwarebytes.com

-Log Details-
Protection Event Date: 12/4/20
Protection Event Time: 3:07 PM
Log File: a95fc8b4-3674-11eb-8d0e-001a7dda7102.json

-Software Information-
Version: 4.2.3.96
Components Version: 1.0.1122
Update Package Version: 1.0.33873
License: Premium

-System Information-
OS: Windows 10 (Build 19041.662)
CPU: x64
File System: NTFS
User: System

-Blocked Website Details-
Malicious Website: 1
, C:\Program Files\Mozilla Firefox\firefox.exe, Blocked, -1, -1, 0.0.0, ,

-Website Data-
Category: Phishing
Domain: www.mifflinsoaring.org.dream.website
IP Address: 173.236.157.63
Port: 80
Type: Outbound
File: C:\Program Files\Mozilla Firefox\firefox.exe

 

(end)

2020-12-04_15h06_34.png

2020-12-04_15h07_24.png

Edited by Porthos
Link to post
Share on other sites

  • Staff
2 minutes ago, Porthos said:

Malwarebytes
www.malwarebytes.com

-Log Details-
Protection Event Date: 12/4/20
Protection Event Time: 3:07 PM
Log File: a95fc8b4-3674-11eb-8d0e-001a7dda7102.json

-Software Information-
Version: 4.2.3.96
Components Version: 1.0.1122
Update Package Version: 1.0.33873
License: Premium

-System Information-
OS: Windows 10 (Build 19041.662)
CPU: x64
File System: NTFS
User: System

-Blocked Website Details-
Malicious Website: 1
, C:\Program Files\Mozilla Firefox\firefox.exe, Blocked, -1, -1, 0.0.0, ,

-Website Data-
Category: Phishing
Domain: www.mifflinsoaring.org.dream.website
IP Address: 173.236.157.63
Port: 80
Type: Outbound
File: C:\Program Files\Mozilla Firefox\firefox.exe

 

(end)

2020-12-04_15h06_34.png

2020-12-04_15h07_24.png

So you get both blocks?

Link to post
Share on other sites

  • Staff
6 hours ago, JFGX said:

Help! The "Website blocked due to phishing" problem has returned. 

I don't see this on the website's home page, and not always on the first sub-page that I visit.  But eventually it appears, and once it does it seems to show on all pages.

Again, the website is www.mifflinsoaring.org

Here's the info that appears in the box that pops up (and which persists for only about 20% of the time necessary to copy its info):

    Domain: www.mifflinsoaring.org.dream.website  [this is a site hosted by DreamHost]

    IP address: 173.236.157.63

    Port: 80

    Type: Outbound

 

What would trigger this warning?  Note that all pages of this website are read-only - none attempts to collect any user information.

 

 

 

This should now be corrected, apologies for the drawn out topic. Let us know after you've updated if the issue still occurs, someone will reply.

Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.