Page 1 of 2
[SOLVED] [04458004] False Positive Detection on the URLs
Posted: Mon, 19 Dec 2016, 13:20
by Abhi_virus
Dear Team,
We have seen detection on the following URL
http://inclk.com
http://clkads.com
http://clkrev.com
They are incorrectly being categorised as "Phishing and Fraud". Can you please fix this ASAp.
Please do let me know if you need any other details.
Thanks
Abhishek
Re: False Positive Detection on the URLs
Posted: Thu, 22 Dec 2016, 08:02
by Abhi_virus
Dear Team,
Please do let me know if you need any additional details for this reported issue.
Can you please share your inputs on this.
Re: False Positive Detection on the URLs
Posted: Mon, 26 Dec 2016, 15:35
by VirusBuster
I have checked the URLs and they are categorized as Advertisements & Pop-Ups at
Cyren (one of our engines), but not as Phishing and Fraud
Re: False Positive Detection on the URLs
Posted: Mon, 26 Dec 2016, 15:44
by Abhi_virus
Hi,
Thanks for your feedback.
please refer the attached screenshot , where panda is categorising it as Phishing & Fraud.
Re: False Positive Detection on the URLs
Posted: Mon, 26 Dec 2016, 16:00
by VirusBuster
According to that report it was on December 1st
Are they being detected now?
Re: False Positive Detection on the URLs
Posted: Mon, 26 Dec 2016, 17:30
by Abhi_virus
The detection is still there. Please refer the attached screenshot taken on 26th december 2016.
Re: False Positive Detection on the URLs
Posted: Mon, 26 Dec 2016, 17:55
by VirusBuster
Make sure that the protection gets syncronized before accessing it again
You should see a line in the report stating that
Can you post a copy of the antivirus report so that we can check the full URLs
Re: False Positive Detection on the URLs
Posted: Tue, 27 Dec 2016, 11:19
by Abhi_virus
Sure.
Please find the log file as attachment for the three URLs.
Re: False Positive Detection on the URLs
Posted: Tue, 27 Dec 2016, 13:54
by VirusBuster
Although the main domains are classified as Advertisements & Pop-Ups, anything under banners is classified as Phishing and Fraud
http://inclk.com/adServe/banners
http://clkads.com/adServe/banners
http://clkrev.com/adServe/banners
We have created the case
04458004 for this issue
We'll keep you updated
Re: [04458004] False Positive Detection on the URLs
Posted: Tue, 27 Dec 2016, 18:01
by VirusBuster
They won't be detected with the next signature update/syncronization