Please evaluate – site incorrectly flagged for phishing

[shuttlez]

Site URL - bellemaisongascony.com

Scorecard - https://www.mywot.com/en/scorecard/bell ... ascony.com

Introduction - this is a real estate site for a long established French estate agency. It has been listed by WOT as potentially unsafe because of phishing, but I have been unable to find it on any blacklists, and have no reason to believe that there are any malicious scripts on the site. It is protected by Wordfence and is monitored by Hetrix tools, Google Search Console and the hosts, Siteground, none of whom have detected any malware. I would like to know where the information is held that leads WOT to believe that this site represents a phishing risk, so that I can correct it as swiftly as possible. Many thanks.

Privacy policy - bellemaisongascony.com/en/privacy-policy/

Contact the site owners - contact link in main site navigation

Whois information - http://whois.domaintools.com/bellemaisongascony.com

Verified - yes

[NotBuyingIt]

It has been listed by WOT as potentially unsafe because of phishing …

@shuttlez, Welcome to the WoT users' community forums.

I looked up your domain on URLVoid which reported that it was blacklisted on five services, including BitDefender and SCUMWARE, about three years ago. I requested that URLVoid rescan, and the new report show adverse opinions only by WoT and one other service. See the latest report at
https://www.urlvoid.com/scan/bellemaisongascony.com/

For another example of an old blacklisting, see the 2017 report at
http://mirror1.malwaredomains.com/files/20170623.txt

Please contact the WoT staff and ask for the confidence level that the WoT system currently places on the reputation score(s) that it calculated for your site. A very low confidence level would suggest that a reasonable number of new ratings might easily change your site's WoT reputation score. A contact form is at
https://support.mywot.com/hc/en-us/requests/new

[shuttlez]

Thank you so much, it really helps to know where to look. CRDF have now removed us from their list after I submitted a request and I have emailed OpenPhish to ask them to do the same. Are you saying that the only way to remedy the situation with WOT is to ask users to rate the site?

[NotBuyingIt]

CRDF have now removed us from their list after I submitted a request and I have emailed OpenPhish to ask them to do the same.

See also the report at
https://www.virustotal.com/gui/url/2e6cca90830154e6848622bbcf3d228a6e68caac0166af1267a0268e49a91a54/detection

Are you saying that the only way to remedy the situation with WOT is to ask users to rate the site?

The trustworthiness score on WoT scorecards is based upon the ratings of WoT users and supplemented with the opinions of several third-party "Trusted Sources". You may wish to contact the WoT support staff to identify any Trusted Sources which have contributed to your site's score. Most users who may have rated your site probably are not aware of this site evaluation. You may wish to request that the WoT support staff notify them that you want them to update or reconsider their ratings.

If this site evaluation attracts enough attention from the users' community, your site's reputation score could change significantly within a few weeks. Unfortunately, I notice that very few accomplished reviewers are participating in the forum at the moment.

Beware unethical parties who offer to "improve" your site's reputation for pay or other considerations. The WoT system is designed to resist scorecard manipulation and other site owners have seen their sites' reputations harmed when they attempted to buy "likes" or employ shady reputation-repair services.

[shuttlez]

Does anyone know how to get through to Clean MX to ask them to delist us? And is there any way of finding ALL of the blacklists that a site is listed on? Norton / Symantec don't seem to be on Virustotal or any other aggregate list I have seen, but I discovered today that they have blacklisted our domain.

[NotBuyingIt]

Does anyone know how to get through to Clean MX to ask them to delist us? And is there any way of finding ALL of the blacklists that a site is listed on? Norton / Symantec don't seem to be on Virustotal or any other aggregate list I have seen, but I discovered today that they have blacklisted our domain.

Perhaps these webpages will help —
http://www.clean-mx.de/7_kontakt.php
https://safeweb.norton.com/help/site_owners

A screen capture of the 2017 phishing incident reported by Clean-MX is at
https://www.phishtank.com/phish_detail.php?phish_id=5064126

Although the reported URL to your site currently displays a 404 message, your server returns an HTTP 301 'Moved Permanently' code instead of an HTTP 404 'Not Found' code for that URL. Unfortunately, some listing services may use automated systems which expect an HTTP 404 code in order the de-list suspicious webpages.

[shuttlez]

That's so helpful thank you very much for taking the time to help me!

I tested the URL that was problematic in 2017 in Pingdom and got a 404 response. How did you test it to get 301?

Norton delisted us when I contacted them, but I have still had no response at all from Comodo Valkyrie Verdict, which is really frustrating as I submitted their form about a week ago. Thanks for the link to the Clean MX site. I don't know how I missed that, I was just stuck on their awful support page! This experience has been an eye opener.

[NotBuyingIt]

I tested the URL that was problematic in 2017 in Pingdom and got a 404 response. How did you test it to get 301?

The HTTP 301 was reported by a cURL test of the suspicious URL. I notice that Virustotal reported an HTTP 404 code and PhishTank reported "currently offline".

[shuttlez]

Is anyone able to enlighten me as to what score or what criteria are required for a site to be "trusted" and to turn from red to green? The score for this one has climbed up to 2.5 thanks to a handful of evaluations from kind users. I have tried everything I can think of to get through to the two services that still have us blacklisted (Clean MX and Comodo Valkyrie Verdict) but they simply don't respond. I would have thought this alone should be reason enough not to trust their data but in any case I feel completely powerless and very frustrated. Has anyone any suggestions? Many thanks.

[spectre]

Firstly, please remember we're currently experiencing a worldwide pandemic, and companies if working may have a smaller than usual staff. You would need to allow more than a few days for a response under normal circumstances.
Clean MX and Comodo Valkyrie Verdict are not Wot Trusted Sources. If you don't get a response in another week or two, you could contact VirusTotal.

Secondly, the members who've rated your website are all new to Wot and will have little impact on your website's reputation. Also, if any of these new accounts are related to your website EG - staff, friends etc, they should state their relationship to your site in their comments.