My domain has been flagged by Kapersky internet security

[Jan B]

Hi,

Our website has been falsely flagged as a phishing site.

We have throughly checked every website and server and there is no malware present. The site is only accessible for registered users, therefore only a login-component is shown. The site does not pretend to be any other entity. I'd like to request a re-evaluation.

Thanks in advance,

 

Jan Bijster

[harlan4096]

Welcome to Kaspersky Community.

 

I have just reported to K. analyst, waiting for final verdict.

[Jan B]

Thanks!

[harlan4096]

  Quote

Hello,

Dear User,

Thank you for sending a request to Kaspersky!
We checked the link you have sent us.
It has been confirmed as a false positive. The link will be excluded from our anti-phishing databases.

Expand  

 

[Jan B]

Good to hear it, thanks for the quick action

[harlan4096]

Yw ?

[Jimmywick]

The site may contain phishing links, malicious code or other threats.
When the website is accessed, content from the higher-level website may be loaded, which may be considered unsafe by Kaspersky Security Network.
The site may contain content considered sensitive. If Parental Control is enabled, such site will be blocked.
Other causes unrelated to threats.
Issue with a website certificate. This may be a sign of a fake website, also the issue can be caused by an expired website certificate, or a website certificate based on a Windows root certificate that has expired.
For example, on September 30, 2021 a DST Root CA X3 certificate has expired. To view the Windows root certificate on which the website is based, in the Kaspersky notification click View certificate and open the Certification path tab.

 

Regards,
J wick

[SystemInfo]

  On 6/29/2022 at 2:42 PM, harlan4096 said:

 

Expand  

I just updated the database, still the site cannot be accessed. even though Kaspersky's developer team reported that it would withdraw from the list. I still can't access the site.

[Flood and Flood's wife]

  On 8/2/2022 at 4:31 PM, SystemInfo said:

I just updated the database, still the site cannot be accessed. even though Kaspersky's developer team reported that it would withdraw from the list. I still can't access the site.

Expand  

@SystemInfo, @harlan4096

?Confirmed: 

• https://www.virustotal.com/gui/url/6f173ef2560711fb0aa77f3b2798e6c22efc161981ff8efe46efbdf2a43a3ff7

• https://opentip.kaspersky.com/https%3A%2F%2Fbuurkracht-online.nl%2F/

 

Thank you?

Flood?+?

[SystemInfo]

  On 8/2/2022 at 9:29 PM, Flood and Flood's wife said:

@SystemInfo, @harlan4096

?Confirmed: 

• https://www.virustotal.com/gui/url/6f173ef2560711fb0aa77f3b2798e6c22efc161981ff8efe46efbdf2a43a3ff7

• https://opentip.kaspersky.com/https%3A%2F%2Fbuurkracht-online.nl%2F/

 

Thank you?

Flood?+?

Expand  

I checked now after many hours later, almost 15 hours later and still without accessing the site the updated base but it is still blocked.

[harlan4096]

Weird, I forced VT to recheck and:

 

https://www.virustotal.com/gui/url/6f173ef2560711fb0aa77f3b2798e6c22efc161981ff8efe46efbdf2a43a3ff7?nocache=1

[Flood and Flood's wife]

  On 8/3/2022 at 5:00 AM, harlan4096 said:

Weird, I forced VT to recheck and: https://www.virustotal.com/gui/url/6f173ef2560711fb0aa77f3b2798e6c22efc161981ff8efe46efbdf2a43a3ff7?nocache=1

Expand  

Hello @harlan4096, 

VT result confirmed: VirusTotal - URL - 6f173ef2560711fb0aa77f3b2798e6c22efc161981ff8efe46efbdf2a43a3ff7

BUT: KTS app still alerts: 

 

• Note: KTS databases have been updated. 

Thank you?

Flood?+?

[Flood and Flood's wife]

Update @harlan4096, 

MR6 also blocks buurkracht-online.nl

Thank you?

Flood?+?

[SystemInfo]

  On 8/3/2022 at 9:21 AM, Flood and Flood's wife said:

Update @harlan4096, 

MR6 also blocks buurkracht-online.nl

Thank you?

Flood?+?

Expand  

Kaspersky Team: After more than 14 hours after my post it's still being blocked by KTS.

[SystemInfo]

Could someone from the Team explain, technically, why on the site. https://opentip.kaspersky.com/ shows that everything is ok.
but when we update the product with new definitions it never works, my doubts remain, we are really protected. is Kaspersky's update database really protecting us? this problem has been going on for ten of the 28th of June - it's been 7 days so far it hasn't been updated on our PCs. this sets a precedent for thinking we are unprotected.

[harlan4096]

You better send again the URL to K. analysts via KOTIP

 

I just reported again.

[SystemInfo]

  On 8/3/2022 at 3:47 PM, harlan4096 said:

You better send again the URL to K. analysts via KOTIP

 

I just reported again.

Expand  

This is the problem, I already sent the site itself informs that it is safe, however when I go to access the KTS it does not leave informing that it is a threat.

Edited August 3, 2022 by SystemInfo

[SystemInfo]

  On 8/3/2022 at 1:34 PM, SystemInfo said:

Could someone from the Team explain, technically, why on the site. https://opentip.kaspersky.com/ shows that everything is ok.
but when we update the product with new definitions it never works, my doubts remain, we are really protected. is Kaspersky's update database really protecting us? this problem has been going on for ten of the 28th of June - it's been 7 days so far it hasn't been updated on our PCs. this sets a precedent for thinking we are unprotected.

Expand  

That's why I asked this question and so far I have not had an explanation of what is happening. KTS antivirus base is not protecting me?
We have two pieces of information the KTS says and a threat is the website https://opentip.kaspersky.com/buurkracht-online.nl/
informs that it is safe, are there two databases? we are protected by thinking about other threats. we have different results. this is wrong.

[harlan4096]

  Quote

Hello,

URL was removed from blocklist. It will be fixed in the next update. Thank you for your help.

Best regards, A. M., Malware Analyst
39A/3 Leningradskoe Shosse, Moscow, 125212, Russia Tel./Fax: + 7 (495) 797 8700 http://www.kaspersky.com https://securelist.com
https://opentip.kaspersky.com/ - get insights about suspicious files, hashes, URLs, IP addresses or domain names

 

Expand  

 

[SystemInfo]

  On 8/3/2022 at 4:37 PM, harlan4096 said:

 

Expand  

Thanks for the reply.
when he said next update he is saying database update or product version update?

[harlan4096]

Yes, databases

[SystemInfo]

  On 8/4/2022 at 5:32 AM, harlan4096 said:

Yes, databases

Expand  

OK thank you.