False Positive URL:Phishing on legitimate website after multiple submissions

Viruses and worms
1

Hello,

Our legitimate business website is still being blocked by Avast/AVG Web Guard as URL:Phishing:

I have already submitted the false-positive form multiple times, but the issue is still unresolved after several business days.

Alert details:
Threat name: URL:Phishing
Detected by: Web Guard
URL: https://refugevfx.com/

This is the official website for Refuge VFX, hosted on Webflow. The site does not collect passwords, credit card details, banking credentials, or sensitive login information.

Third-party scans are clean:

  • VirusTotal: 0 out of 92 vendors flagging the URL as malicious
  • Sucuri: no malware or blacklist issues
  • Google Safe Browsing: clean
  • PhishTank: clean

The warning appears while loading normal browser-requested site icon files, but the detection details show the main domain as the blocked URL. This appears to be a domain-level false positive or outdated reputation flag.

Could someone please escalate this to Threat Labs or advise what specifically is causing Avast Web Guard to classify this as URL:Phishing?

Thank you.

2

First, I’m an Avast user and not an Avast Team member.
It isn’t advisable to post an active link to a suspect site as it could alert on the forum page.

I rescanned the site refugevfx(.)com on VirusTotal again to get a current return - 0 of 93.

I will try to draw some Avast Team attention to your post.

1 Like
3

Hello @user7511,
Thank you for raising this!

The reported domain was checked, and based on the findings, the detection was removed. The website is now marked as clean in the Avast database. This change may take up to 1 hour to take full effect. Please accept my apology for the inconvenience caused.

If the situation persists after 1 hour, please update the Avast virus database and try again.

Thank you, @DavidR, for highlighting this topic.

1 Like