Kaspersky Premium Browser Protection Extension Not Recognizing and Blocks Phishing Website Also Not Scanning Real Time File Download From Browser

[HARIPRASATH]

Hi Team

I'm using Kaspersky Premium Version, Kaspersky Protection Browser Extension not blocking Phishing Sites it allow me able to access I have check URL for Cloudflare Radar Scan I got Security Risk but Kaspersky not blocking those sites and not provide me any warning at all

Also I tried another Phishing Site I got warning from Microsoft Defender SmartScreen instead of Kaspersky 

And when I download file from Browser it not getting Scanned in Real Time I'm not getting any notification when download file from internet Kaspersky scan completed or not I'm not sure may be it run in background task clarify me does it have a Real Time Scanning for Download File from Internet

Kindly look into Phishing Site other AV blocks the Phishing Site when tries to Access

when I using opentip.kaspersky.com it get notified me One URL Dangerous and other one it show Good

[harlan4096]

Welcome to Kaspersky Community.

 

Please provide exact version of K. product installed and the browser used.

[Flood and Flood's wife]

Hi @harlan4096,

1 & 2 ->  Facevideo is detected by Kaspersky Premium/Firefox. 

3 -> VT shows Kaspersky flags Facevideo as malicious

4 -> 88autobody is not detected, in fact it's a trusted site in KSN
 

Thank you🙏
Flood🐳+🐋

[harlan4096]

About 880autobody site, I just got this from K. analyst:

 

Quote

Hello,

Dear User,

Thank you for sending a request to Kaspersky!
No threats of data loss were found on the requested website.

Best regards, Intern
39A/3 Leningradskoe Shosse, Moscow, 125212, Russia Tel./Fax: + 7 (495) 797 8700 http://www.kaspersky.com https://securelist.com
https://opentip.kaspersky.com/ - get insights about suspicious files, hashes, URLs, IP addresses or domain names

[harlan4096]

And about facevideo1 site, it seems already down, I just got this in my FF (after ignoring FF warnings):

 

Quote

The connection has expired An error occurred while connecting to facevideo1 . com. The site may be temporarily unavailable or too busy. Please try again in a few moments. If you cannot load any pages, check your computer's network connection. If your computer or network is protected by a firewall or proxy, make sure Firefox has permission to access the web.

 

[Flood and Flood's wife]

Hi @harlan4096,

This is the cloudflare report the user is referencing - https://radar.cloudflare.com/scan/a6b7cb7c-1cde-4f1d-8bf7-be8d542e9e54/summary. 

Note -> the cloudfare scanner is in Beta release - it may not be reliable?

Thank you🙏
Flood🐳+🐋

[Flood and Flood's wife]

12 minutes ago, harlan4096 said:

And about facevideo1 site, it seems already down, I just got this in my FF (after ignoring FF warnings):

The connection has expired An error occurred while connecting to facevideo1 . com. The site may be temporarily unavailable or too busy. Please try again in a few moments. If you cannot load any pages, check your computer's network connection. If your computer or network is protected by a firewall or proxy, make sure Firefox has permission to access the web.

 

Hi @harlan4096,

We also got: "The connection has expired... etc.,"  *after* our Kaspersky Premium did the detection. 

Also, if (you) Google search " facevideo1" - there does not appear to be a domain - it looks like a dud site -> https://www.google.com/search?q="facevideo1"&oq="facevideo1"&gs_lcrp=EgZjaHJvbWUyBggAEEUYOdIBCTQ3MTRqMGoxNagCALACAA&sourceid=chrome&ie=UTF-8

[Flood and Flood's wife]

Hi @harlan4096

OTOH: we do trust MWB: 🤨

[harlan4096]

I've reported again to that K. analyst the Cloudflare radar link, waiting his reply.

 

About MWBytes site protection, it's good, but may also fall in false positives, because very aggressive sometimes.

[Flood and Flood's wife]

7 minutes ago, harlan4096 said:

I've reported again to that K. analyst the Cloudflare radar link, waiting his reply.

Hi @harlan4096, 

VT -> 12 security vendors do assign 880autobody as malicious: https://www.virustotal.com/gui/domain/880autobody.com

[harlan4096]

I know, but still, many false positives usually at VT...

[harlan4096]

Quote

Hello,

Previously there was phishing content on this website, but we consider it clean now.

Best regards, Intern
39A/3 Leningradskoe Shosse, Moscow, 125212, Russia Tel./Fax: + 7 (495) 797 8700 http://www.kaspersky.com https://securelist.com
https://opentip.kaspersky.com/ - get insights about suspicious files, hashes, URLs, IP addresses or domain names

 

[HARIPRASATH]

So 880autobody.com site is safer right ok great Thank you for clarification @harlan4096 and @Flood and Flood's wife