Topic for sites being detected as fraud/malware

[hadwin]

hadwin last edited by

Hello,

https://skidka.ru
false positive by APWG

[Pikabu007]

Pikabu007 last edited by

Good day.
https://pikabu.ru/
false positive by APWG

[bobineurope]

bobineurope last edited by

I have started getting messages saying the site rt.com may be hacked or fraudulent.

If I click on the Ignore this Warning button, I get a message that shows too quickly for me to capture, but I think says there is a five second delay because of a DDOS attack. I get the same delay message when switching pages on the site.

This doesn't happen on the Vivaldi browser.

Have I been hacked?

[leocg]

leocg Moderator Volunteer @bobineurope last edited by

@bobineurope You have the option to protect you from malicious sites enabled and rt.com was included in a list of suspicious pages by one of the third party services used by Opera for that protection.

[slytheringirl]

slytheringirl last edited by

It's been blocking archiveofourown.org everytime I click on a link referring to the site.

Any other ao3 links on other pages don't block the site, just the ones on Tumblr.

[superflexible]

superflexible last edited by

We use MyCommerce for processing our license orders. Opera is blocking it because of APWG. MyCommerce is a general payment provider. Just because some other vendors' customers were unhappy, that's not a reason to block the whole payment provider. Please look at
https://www.syncovery.com/cgi-bin/syncweb.cgi?lic=singlebus&step=5&qty=1&id=3876216648381029430578690
and click on the MyCommerce button.

[pakoistinen]

pakoistinen last edited by

Opera browser makes an incorrect fraud warning for the domain coinhako.com. This is incorrectly flagged as dangerous site by opera's APWG service. Please remove this domain from being flagged as dangerous.

Search for related incident history in opera forums reveals that many legit sites have been previously flagged the same way. (netflix, live.com, paypal, etc)

This seems like a systemic flaw in the browser's security architecture. People can misuse APWG service to incorrectly flag totally legit sites as fraudulent. Root cause is that APWG does not validate user reported dangerous sites. Please reconsider changing your browser threat intelligence provider.

[sgunhouse]

sgunhouse Moderator Volunteer @pakoistinen last edited by

@pakoistinen Per the warning message, Opera does not maintain warning lists. Talk to apwg (there's a link in the warning message) about their listing of it as a possible fraud site.

[pakoistinen]

pakoistinen @sgunhouse last edited by

@sgunhouse

1. This is opera browser feature that you have integrated to the product. You own it and need to correct it. It is a proven systematic problem with the opera showing incorrect warnkngs.

2. The browser does not display instructions how to report incorrect warnings. There is a help page but it does not contain anything about incorrect warnings or reporting false positives

Back to you I think.

[sgunhouse]

sgunhouse Moderator Volunteer @pakoistinen last edited by

@pakoistinen I don't own it as I don't work for Opera. But I told you how to report it. Of course, if you don't want to make the effort that's your problem.

[2lh8]

2lh8 last edited by

We've launched a closed beta of our website. We have two domains - one with the utf-8 symbol š (our company name is in lithuanian, and that letter is used in the word) and one with the š replaced by s, for people who do not have an easy way to type the š character. Our utf-8 domain simply redirects to non utf-8 one. Our QA reported that the opera GX browser shows our sites as fake due to the change in utf-8 character. How do I prevent that?

[leocg]

leocg Moderator Volunteer @2lh8 last edited by

@2lh8 Contact the service that included your site in a list of possible dangerous sites and ask them to remove your site from their list.

Also report the issue to Opera using the Report a Problem tool.