Jump to content

False Positive - Website Blocked for Phishing


Recommended Posts

The website has been listed for "phishing" due to previous malware infection.  The malware has been cleaned and the vulnerability in the website patched.

The affected site;  www.GreenLakeCruises.com.
Removal from the block would be appreciated!

Link to post
Share on other sites

  • Staff
14 minutes ago, wbscan7968 said:

The website has been listed for "phishing" due to previous malware infection.  The malware has been cleaned and the vulnerability in the website patched.

The affected site;  www.GreenLakeCruises.com.
Removal from the block would be appreciated!

Hello- Several urls are still detected and bunch of files as well: VirusTotal - Domain - greenlakecruises.com

Link to post
Share on other sites

Thank you for the follow up.

You'll notice that the link that you provided shows a "last updated" date of 17 days ago.

The individual files that are flagged are not files that are on this website, but appear to be files that reference the site, thus are flagged. 

We have scanned the site with multiple online scanners, all have come back clean.  We've also downloaded a copy of the complete site and scanned locally with Malwarebytes, Sophos, F-Secure and McAfee - all which showed clean.

Additionally, for the websites that they reference that have flagged this site, we have been contacting them one at a time and they have been scanning the site and found it clean and thus removing the blacklist flag.

Here is a direct response from one of the providers; 
"The domain "greenlakecruises.com" was added as "Phishing" because it was detected by our automated rating engine. Our rating engine uses a number of techniques/algorithms to categorize malicious/phishing URLs, but in addition to that, it also aggregates from third party sources.

We have checked the domain and we do not detect any phishing content/activity. The phishing rating on the domain has been removed.

We sincerely apologize for the inconvenience caused."

Link to post
Share on other sites

  • Staff
9 hours ago, wbscan7968 said:

Thank you for the follow up.

You'll notice that the link that you provided shows a "last updated" date of 17 days ago.

The individual files that are flagged are not files that are on this website, but appear to be files that reference the site, thus are flagged. 

We have scanned the site with multiple online scanners, all have come back clean.  We've also downloaded a copy of the complete site and scanned locally with Malwarebytes, Sophos, F-Secure and McAfee - all which showed clean.

Additionally, for the websites that they reference that have flagged this site, we have been contacting them one at a time and they have been scanning the site and found it clean and thus removing the blacklist flag.

Here is a direct response from one of the providers; 
"The domain "greenlakecruises.com" was added as "Phishing" because it was detected by our automated rating engine. Our rating engine uses a number of techniques/algorithms to categorize malicious/phishing URLs, but in addition to that, it also aggregates from third party sources.

We have checked the domain and we do not detect any phishing content/activity. The phishing rating on the domain has been removed.

We sincerely apologize for the inconvenience caused."

Hi,

The block will be removed.

Link to post
Share on other sites

Guest
This topic is now closed to further replies.
 Share

  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.