Website being blocked for Phishing - most likely in error

Avast Free Antivirus / Premium Security
1

I am trying to access my doctor’s patient portal. I’m getting an Avast error that the site is suspected of phishing. I have tried this on 3 different browsers and get the same problem. I suspect that the website is fine. This didn’t start until this morning after the Chrome extension was updated.

hXXps://8743.portal.athenahealth.com/

Can someone tell me what’s going on?

I’m running on Windows 7 Home.

Thanks.

2

Please ‘modify’ your post change the URL from https to hXXps, to break the link and avoid accidental exposure to suspect sites, thanks.

Reporting a Possible False Positive File or Website - https://www.avast.com/false-positive-file-form.php.
You should get a response in a day or two.

It’s strange that the main domain/site isn’t found suspect, only the 8743.portal.domain-name

3

That particular sub-domain has an insecure connection - http- see: https://sitereport.netcraft.com/?url=8743.portal.athenahealth.com

See the malicious files connected to the IP address: https://www.virustotal.com/gui/ip-address/208.78.141.21/relations
Could have been an IP related detection for emotet malware, but I also find it to kick-up an internal server error,
a so-called 500 Internal Server Error. So address Boston for that.

Also DNS issues: https://dnsviz.net/d/portal.athenahealth.com/dnssec/athenahealth.com/SOA
-portal.athenahealth.com/A (NODATA)
-portal.athenahealth.com/AAAA (NODATA)

polonus (volunteer 3rd party cold recon website security analyst and website error-hunter)

4

The problem has been fixed. Here is the email from support at Avast.

Hello,
Thank you for contacting Avast and reporting false positive URL detection. I am glad to help.

Reported website was checked by Avast virus specialists and based on the findings the detection was turned off.

The website is now marked as clean in the Avast virus database. This change should be instant but it might take up to 24 hours in some cases. Please accept my apology for the inconvenience caused.

If the detection persists after the 24 hours, please update Avast virus database first and reply to this email with attached files:

  1. Take a screenshot of the Avast detection dialog with “See details” in the bottom-right corner displayed.
  2. Take a screenshot of the Avast virus database - go to Avast Antivirus to “Menu - About”

Have a nice day!

Best Regards,

Fran
The Avast Support Team

5

Thanks for the confirmation the issue has been resolved.