Kaspersky Endpoint Security for Windows cannot block phishing domain

[JohnCateer86]

Hello,

Kaspersky Endpoint Security for Windows cannot block phishing domain, but other vendors can do it.

Example:
0351250.netsolhost.com

 

02network.com

https://raw.githubusercontent.com/Phishing-Database/Phishing.Database/refs/heads/master/phishing-domains-ACTIVE.txt

 

[Renan Corassa]

Blocking it blocks it.
But it all depends on how your vaccines, modules and components are configured.

[Berny]

Kaspersky Premium is blocking the URL 🤔

• Type: Threat of data loss
• Threat level: High
• Result description: Blocked

Also, the URL on VirusTotal is marked by Kaspersky as 'Phishing'.

 

[JohnCateer86]

I used Kaspersky Business Endpoint Security not Premium for consumer.

I try again, if using Microsoft Edge it's OK. But Chrome cannot block.

 

[Flood and Flood's wife]

3 hours ago, JohnCateer86 said:

I used Kaspersky Business Endpoint Security not Premium for consumer.

I try again, if using Microsoft Edge it's OK.

1. But Chrome cannot block.

Hello @JohnCateer86, 

Thank you for the information!

As @Bernysaid above - Kaspersky is one of the Security vendors who identifies this domain as malicious; IF (your) Kaspersky Endpoint Security for Windows is *licensed* & is not working to (your) expectations, please log a request via (your) company account: Kaspersky Company Account, provide a *detailed history*; support may request data, for example: Har & console logs & OR GSI, they will submit the issue to the Kaspersky Virus Lab, if they determine that's what's required. 

1. Chrome - also - blocks the site:

Please share the outcome, with the Community, when it's available?

Thank you🙏
Flood🐳+🐋

Edited February 20 by Flood and Flood's wife
Chrome - also - blocks the site:

[Berny]

@JohnCateer86

Only 'Kaspersky Virus Lab' can investigate this issue.
 

Spoiler

 

[harlan4096]

I have KES 12.8 installed in W11 Pro x64 23H2.

 

 

To get this warning, I had to ignore 1st the integrated Chrome security warning.

[Renan Corassa]

The same thing happened to me.
First it was the browser warning.
Then the KES 12.5 warning.

[JohnCateer86]

You should test with multiple browsers.

hello @Flood and Flood's wife,

You should know that this is a warning from Chrome, not Kaspersky. If Kaspersky were blocking it, there would be a notification like on Microsoft Edge. You can select Details > I understand, and then you will be able to access it normally without any blockage from Kaspersky.

[Flood and Flood's wife]

20 minutes ago, JohnCateer86 said:

You should know that this is a warning from Chrome, not Kaspersky. If Kaspersky were blocking it, there would be a notification like on Microsoft Edge. You can select Details > I understand, and then you will be able to access it normally without any blockage from Kaspersky.

 

Hello @JohnCateer86, 

🙄LOL!

Our Kaspersky software is working *exactly* as designed - in *all* supported browsers. 

We shared the information as FYI. 

*Three* Kaspersky Community members have shared their results with you - IF (you) have licensed Kaspersky software -> it's up to you to follow-up with Kaspersky to find out why (your) software is not working as designed. 

Please share the outcome, with the Community, when it's available?

Thank you🙏
Flood🐳+🐋

Edited February 21 by Flood and Flood's wife
in, not is

[JohnCateer86]

Kaspersky is the worst-performing product among the vendors.

2 minutes ago, Flood and Flood's wife said:

*Three* Kaspersky Community members have shared their results with you - IF (you) have licensed Kaspersky software -> it's up to you to follow-up with Kaspersky to find out why (your) software is not working as designed. 

@Flood and Flood's wife LOL, it's ridiculous that I'm explaining to you why your response is wrong, yet you refuse to acknowledge it—truly absurd. It's just like how I'm currently on a trial to evaluate and purchase Kaspersky, but when I email support, they reply that since I haven't bought it yet, they won't assist me.

Kaspersky's handling of feedback and improvements is truly ridiculous.

[Flood and Flood's wife]

34 minutes ago, JohnCateer86 said:

It's just like how I'm currently on a trial to evaluate and purchase Kaspersky, but when I email support, they reply that since I haven't bought it yet, they won't assist me.

Hello @JohnCateer86,

Thank you for posting back.

We'd recommend reading *all* of: Support Rules for Kaspersky Software - Kaspersky TRIAL software is *never* covered by Kaspersky support, you always have the option of: 5. Paid Technical Support Services. 

*Also* - in regards to the evaluation of the specific Kaspersky Endpoint Security for Business Free Trial software - did (you) read the advisory? 

Thank you🙏
Flood🐳+🐋

Edited February 21 by Flood and Flood's wife
*Also* - in regards to the evaluation of the specific Kaspersky Endpoint Security for Business Free Trial software - did (you) read the advisory? 

[JohnCateer86]

@Flood and Flood's wife

Ok, my company can simply decide to buy from another vendor. I just want to evaluate objectively to use the best product. So, Kaspersky is basically admitting that their product is bad.

[Renan Corassa]

Edge ao acessar o endereço.


Edge após aceitação

Edited February 21 by Renan Corassa

[JL - KL DACH]

Hello JohnCateer86,

it seems you are not familiar with the product. A lot of people in this forum checked your links and it will be blocked.
So it seems your version of KES is not well configured.
If using policies to configure the components of KES make sure you close the lock icon behind the enabled components, like Web Threat protection, Web Control or Encrypted connection scan.
In Web Control you will be able to configure pre-defined categories and you will be able to create exclusions if necessary.

If you want post your settings you made for KES here or open a Tchnical Support request to analyze the problem.

But do not fingerpoint to the product and blame Kaspersky as a bad vendor when obviously all other users determine the web sites as malicious. It would be better to objectly troubleshoot the problem and I think the forum is not the best place to do that.

Thank you in advance

Best Regards