Hi There, I help support an online web service (vetstream.com), recently Avast has blocked the home page for the following reason:
Threat blocked
We’ve safely aborted connection on
wxw.vetstream.com because it was infected with
URL:Phishing
Any advice how I can stop this?
Thanks,
Scott
You can report a suspected FP (File/Website) here: https://www.avast.com/false-positive-file-form.php
See: https://mxtoolbox.com/domain/www.vetstream.com/
Re: https://toolbar.netcraft.com/site_report?url=www.vetstream.com
Nothing here: https://www.virustotal.com/gui/ip-address/31.193.12.121/relations
See: https://urlscan.io/result/4402bab7-21c3-41f8-8ece-89c799142040
See obfuscated code at line 123-127: https://aw-snap.info/file-viewer/?protocol=secure&ref_sel=GSP2&ua_sel=ff&chk-cache=&fs=1&tgt=d3d3LnZ7dHN0fXt8bS5eXW1gaF1tew%3D%3D~enc
Site behaviour: https://urlscan.io/result/4402bab7-21c3-41f8-8ece-89c799142040#behaviour
Indicators of compromise: https://urlscan.io/result/4402bab7-21c3-41f8-8ece-89c799142040#iocs
Given as clean here: https://quttera.com/detailed_report/www.vetstream.com
See: https://urlscan.io/result/a6325ee3-08bb-4b63-8541-aae514ee7b4c
JavaScript errors on page: ReferenceError: jQuery is not defined
/home:62
ReferenceError: jQuery is not defined
/CMSPages/GetResource.ashx?scriptfile=%7e%2fCMSScripts%2fCustom%2fRTCustom.js:2
Website is insecure by default
100% of the trackers on this site could be protecting you from NSA snooping. Tell -vetstream.com to fix it.
Identifiers | All Trackers
Insecure Identifiers
Unique IDs about your web browsing habits have been insecurely sent to third parties.
-www.vetstream.comasp.net_sessionid
-code.jquery.com__cfduid
-dbb802b3387e5a72c1f111653af75aaa51551620387 cdnjs.cloudflare.com__cfduid
Privacy & Security Report: https://webcookies.org/cookies/www.vetstream.com/28402289?414260
Wait for a final verdict form an avast team member, they are the only ones to come and finally unblock,
we here are just volunteers with relevant knowledge and website security expertise.
polonus
Detection has been removed
Our virus specialists have been working on this problem and it has now been resolved. The provided website isn't detected by Avast anymore.