Symantec Endpoint Protection (SEP) IPS blocks URL http://www.unitedpowerbd.com/ False Positive submission : Upon further analysis and investigation we have determined that the URL(s) in question meet the necessary criteria to be detected by our products and as such, the detection cannot be revoked. If malicious, the customer is asking why Symantecis not blocking it too as malicious or suspicious.
The website is blocked by Symantec.
The website was blocked for [SID: 28821] Web Attack: Mass Injection Website 19, and when we went and looked, security response verified the site was, indeed, attempting a mass injection attack. Basically,
The site is injected with a script that redirects the viewer to malicious domains.
Symantec is not blocking the same url.
ProxySG and WSS use the Symantec GIN services to categorize and classify URLs. It is possible that SEP and GIN do not use the same criteria for URL classification.
Subscribing will provide email updates when this Article is updated. Login is required.