01-30-2023 05:28 AM
Hello, I had my site blocked by cisco umbrella, how do I report it? My customers can no longer access my applications, the blocking message says that my domain has been blocked by attempted threats and phishing.
Tks
05-29-2023 06:02 AM
How did you fix yours bro?
They did the same thing to mine.
05-29-2023 12:23 PM
you can go to https://www.talosintelligence.com/reputation_center/lookup?search=cisco.com
there you can submit a web reputation ticket https://www.talosintelligence.com/reputation_center/web_reputation?domain=cisco.com&type=domain
AIV
05-29-2023 02:10 PM
You can dispute content categorization through either Talos, as KyoCode mentioned, and also through Umbrella if you]re in contact with their Umbrella administrator/IT.
See: https://docs.umbrella.com/umbrella-user-guide/docs/dispute-a-categorization
And: https://support.talosintelligence.com/#reputation_center_support_ticket
It's worth mentioning that, if you're able, to verify that no part of your domain/webservices have been compromised.
Every now and then I see a domain/website flagged for as phishing, and the reason is that through a vulnerability in their CMS (wordress plugin for example) a malicious actor was able to add a phishing page to the site without the admins knowledge.
If you have previously found a phishing page within your site and you've removed&remediated, it can sometimes help to mention that in the support ticket.
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: