I’m getting a ‘URL Blacklist’ warning preventing me from opening every single email attachment I receive, how do I stop this?
What type of attachment, PDF.doc ?
What is the exact block message given ?
It’s all files, pdf, csv, jpg
Do all block messages have the same URL seen at top in your screenshot ?
Report it to avast lab. https://forum.avast.com/index.php?topic=14433.msg1289438#msg1289438
It is not only avast that flags zoho dot com, whether that is an FP or not (PHISHing)
Has become heavily infested with keyloggers to transmit stolen data, that even urged the service to temporarily be discontinued.
Read: https://www.bleepingcomputer.com/news/security/zoho-heavily-used-by-keyloggers-to-transmit-stolen-data/
Read also: https://forum.eset.com/topic/21454-false-positive-docszohocom/
polonus
See following relations there, DOM-XSS scan results: Results from scanning URL:
-https://zohotagmanager.cdn.pagesense.io/ztmjs/9e14ca550fb345518206a5a65a40a7a9.js
Number of sources found: 61
Number of sinks found: 42
Javascript errors in above:
SyntaxError: Invalid regular expression flags
eval ()()
:3:100()
Object.N [as F_c] (:2:148)()
Object.E_u (:3:274)()
Ka (eval at exec_fn (:1:157), :61:375)()
Object.create (eval at exec_fn (:1:157), :73:235)()
L (eval at exec_fn (:1:157), :12:208)()
patchedCallback (:127:45)()
To results from scanning URL: -https://pillowmetrics.com/px.js?ch=2
and results from scanning URL: -https://i4cdnimg-a.akamaihd.net/media/js/min.js?v2.2
Number of sources found: 10
Number of sinks found: 12 Media dot net advertising via jscompress dot com/ gootranslink inline script
& not JSONP compatible code,
polonus (volunteer 3rd party cold recon website security analyst and website error-hunter)
They do all have the same message.
I’ve tried to report it via your link, but having filled in the details, nothing seems to happen when I hit submit.
I've tried to report it via your link, but having filled in the details, nothing seems to happen when I hit submit.You dont see a result once you click submit, avast lab need to investigate and will (should) reply to you in mail
Nice one, thanks
I assume you use webmail since the warning popup show chrome as process ?
Something to try … try clear your browser surf history and restart
I tried clearing the history, which didn’t work and though I didn’t get a response to my report, the issue’s now gone, so I assume they acted on it.
Thanks for your help.