My website keeps getting marked as phishing

Cheunteimautz91

Hi my website keeps getting blocked by Swisscom for 'phishing' this has happened 3 times since march, and I have no idea why.

I have lost many sales because of this, and I only find out if a customer bothers to tell me.

I would like to stop this happening, it only happens for people using swisscom, if you use another internet provider or switch to 5G it works fine.

Does anyone know the cause of this? or if there is a department in Swisscom who i could speak to about this issue?

Thanks

stephanie

r00t

Hi @Cheunteimautz91

The Swisscom internet guard usually blocks websites that got hacked and are now getting abused (i.E. for phishing).

Did you already talk to your webmaster about this? Hacks don't always impact the whole site, so it is possible you won't notice it by only browsing it.

If you are confident this is a false positive, you can report your site as "safe" here.

Best,

r00t

Cheunteimautz91

Thanks for your reply, as far as I know, I have never been hacked. What does it mean to be abused for phishing? what is happening that I can stop being reported?

r00t

Hi @Cheunteimautz91

What does it mean to be abused for phishing?

This is a generalization of what might have happened. Attackers often hack (=get write access) to a site and then create a new page, that looks like the login site of a famous website (i.E. amazon.com/digitec.ch etc.). They then might share a direct link to this sub-page with potential victims. (i.E. by email). The victims then open the website, enter their login/password/cc details etc. thinking they log in into amazon.com, but in reality, your web server then sends this data to the attackers.

as far as I know, I have never been hacked

Again, as this might be transparent to you (not every attacker writes "You've been hacked" in big red letters on the website), I'd recommend checking with your webmaster/webhoster if there is anything going on.

what is happening that I can stop being reported?

There are two possibilities:

a) you're website is getting abused. In this case, the solution would be to stop the attackers from doing so. Please check with your webmaster/website provider/IT guy/website-builder.

b) Your website gets flagged, although there is nothing going on (false positive). Use this link to report this to Swisscom.

BTW: It is also possible, that instead of Swisscom, an antivirus software is blocking your website. The easiest way to figure this out is to ask your customer to provide a screenshot of the error message, as it should contain more information (like the logo of the solution blocking the site) on it. Most antivirus providers also have a form you can fill out and request the delisting of your website.

Best,

r00t