wbscan7968 Posted March 31, 2022 ID:1509321 Share Posted March 31, 2022 The website has been listed for "phishing" due to previous malware infection. The malware has been cleaned and the vulnerability in the website patched. The affected site; www.GreenLakeCruises.com. Removal from the block would be appreciated! Link to post Share on other sites More sharing options...
Staff TeMerc Posted March 31, 2022 Staff ID:1509327 Share Posted March 31, 2022 14 minutes ago, wbscan7968 said: The website has been listed for "phishing" due to previous malware infection. The malware has been cleaned and the vulnerability in the website patched. The affected site; www.GreenLakeCruises.com. Removal from the block would be appreciated! Hello- Several urls are still detected and bunch of files as well: VirusTotal - Domain - greenlakecruises.com Link to post Share on other sites More sharing options...
wbscan7968 Posted March 31, 2022 Author ID:1509366 Share Posted March 31, 2022 Thank you for the follow up. You'll notice that the link that you provided shows a "last updated" date of 17 days ago. The individual files that are flagged are not files that are on this website, but appear to be files that reference the site, thus are flagged. We have scanned the site with multiple online scanners, all have come back clean. We've also downloaded a copy of the complete site and scanned locally with Malwarebytes, Sophos, F-Secure and McAfee - all which showed clean. Additionally, for the websites that they reference that have flagged this site, we have been contacting them one at a time and they have been scanning the site and found it clean and thus removing the blacklist flag. Here is a direct response from one of the providers; "The domain "greenlakecruises.com" was added as "Phishing" because it was detected by our automated rating engine. Our rating engine uses a number of techniques/algorithms to categorize malicious/phishing URLs, but in addition to that, it also aggregates from third party sources. We have checked the domain and we do not detect any phishing content/activity. The phishing rating on the domain has been removed. We sincerely apologize for the inconvenience caused." Link to post Share on other sites More sharing options...
Staff BjelakovicL Posted April 1, 2022 Staff ID:1509421 Share Posted April 1, 2022 9 hours ago, wbscan7968 said: Thank you for the follow up. You'll notice that the link that you provided shows a "last updated" date of 17 days ago. The individual files that are flagged are not files that are on this website, but appear to be files that reference the site, thus are flagged. We have scanned the site with multiple online scanners, all have come back clean. We've also downloaded a copy of the complete site and scanned locally with Malwarebytes, Sophos, F-Secure and McAfee - all which showed clean. Additionally, for the websites that they reference that have flagged this site, we have been contacting them one at a time and they have been scanning the site and found it clean and thus removing the blacklist flag. Here is a direct response from one of the providers; "The domain "greenlakecruises.com" was added as "Phishing" because it was detected by our automated rating engine. Our rating engine uses a number of techniques/algorithms to categorize malicious/phishing URLs, but in addition to that, it also aggregates from third party sources. We have checked the domain and we do not detect any phishing content/activity. The phishing rating on the domain has been removed. We sincerely apologize for the inconvenience caused." Hi, The block will be removed. Link to post Share on other sites More sharing options...
Recommended Posts