site blocked by cisco umbrella

[jonathan1486987]

Hello, I had my site blocked by cisco umbrella, how do I report it? My customers can no longer access my applications, the blocking message says that my domain has been blocked by attempted threats and phishing.

Tks

[markchidozie2]

How did you fix yours bro?

They did the same thing to mine.

[KyoCode]

you can go to https://www.talosintelligence.com/reputation_center/lookup?search=cisco.com

there you can submit a web reputation ticket https://www.talosintelligence.com/reputation_center/web_reputation?domain=cisco.com&type=domain

AIV

[Jonatan Jonasson]

You can dispute content categorization through either Talos, as KyoCode mentioned, and also through Umbrella if you]re in contact with their Umbrella administrator/IT.

See: https://docs.umbrella.com/umbrella-user-guide/docs/dispute-a-categorization

And: https://support.talosintelligence.com/#reputation_center_support_ticket

It's worth mentioning that, if you're able, to verify that no part of your domain/webservices have been compromised.
Every now and then I see a domain/website flagged for as phishing, and the reason is that through a vulnerability in their CMS (wordress plugin for example) a malicious actor was able to add a phishing page to the site without the admins knowledge.

If you have previously found a phishing page within your site and you've removed&remediated, it can sometimes help to mention that in the support ticket.