Please remove: https://game-eu-message-portal.com/

[kward]

https://game-eu-message-portal.com/

 is being flagged by Malware Bytes as a deceptive site.

This is a secure email website hosted by Zix|Appriver (www.zix.com), a company that provides Secure Email Services to customers. This website is where end users can retrieve secure emails they've been sent by Zix customers.

It is not a phishing site as reported, and does not require users to enter any information regarding their personal email and password. It's simply a login page for the secure email service.

I've attached a screenshot of the error, please review.

Thank you

Edited April 7, 2022 by TeMerc
Disabled link

[TeMerc]

22 minutes ago, kward said:

 

https://game-eu-message-portal.com/

 is being flagged by Malware Bytes as a deceptive site.

This is a secure email website hosted by Zix|Appriver (www.zix.com), a company that provides Secure Email Services to customers. This website is where end users can retrieve secure emails they've been sent by Zix customers.

It is not a phishing site as reported, and does not require users to enter any information regarding their personal email and password. It's simply a login page for the secure email service.

I've attached a screenshot of the error, please review.

Thank you

Hello- Live BBVA phish link here:

https://game-eu-message-portal.com/s/e?b=bbva&m=ABD2wwnP9CJTVgoGLdvQt2qp&em=Marivel.Medina@usbank.com

[kward]

Thank you for sharing that information.

That is not a phish link, it's just a link that auto-populates the user's email address into the email field. The password being requested is not the user's email password, it's the login for the secure messaging feature.

[Porthos]

46 minutes ago, kward said:

That is not a phish link, it's just a link that auto-populates the user's email address into the email field. The password being requested is not the user's email password, it's the login for the secure messaging feature.

This is the page that comes up

[kward]

Porthos,

I apologize, can you clarify the question?

To provide more context, the link shared was a link sent to a user who had received a secure message on the website. The links are pre-populated with emails so that the user knows which email address the secure message was sent to (in the event that they have forwarding turned on).

The website in your screenshot is an accurate depiction of the secure email login page, which the user's email address pre-populated as described above. The website is hosted on behalf of BBVA, a banking organization. When they want to send information securely to their banking customers, they do so through the website that is the subject of this thread.

It's not a phishing website, it's just a login page for a secure message portal, in this case the portal for BBVA's banking customers.

[Porthos]

2 minutes ago, kward said:

To provide more context, the link shared was a link sent to a user who had received a secure message on the website. The links are pre-populated with emails so that the user knows which email address the secure message was sent to (in the event that they have forwarding turned on).

The website in your screenshot is an accurate depiction of the secure email login page, which the user's email address pre-populated as described above. The website is hosted on behalf of BBVA, a banking organization. When they want to send information securely to their banking customers, they do so through the website that is the subject of this thread.

It's not a phishing website, it's just a login page for a secure message portal, in this case the portal for BBVA's banking customers.

That is what staff needs to assist.

[kward]

Please let me know if I can provide any additional information to rectify this issue.

 

Thank you,