Avast WEBforum

Avast Products => Avast Free Antivirus / Premium Security (legacy Pro Antivirus, Internet Security, Premier) => Topic started by: 7PCGamer on February 13, 2019, 07:24:49 AM

Title: URL: Blacklist notification
Post by: 7PCGamer on February 13, 2019, 07:24:49 AM
Hi,

Trust you are doing well.
Just curious to know abt the URL: Blacklist notification, cud'nt find any documentation
.. is it some virus script codenamed "Blacklist"?

The msg popped when I was trying to access
https://www.locusinn.com/games/divinity/guides/DivinityQuestGuideV2.pdf
.. and it automatically terminates the connection.
Am using Avast Secure Browser latest version on a fully updated Win 7 HP x64.

I also checked the website profile on VirusTotal ... came out clean (snap attached)

Am getting similar messages frequently for 1st page results on Google.. anything wrong with my settings?

Thanks.

Title: Re: URL: Blacklist notification
Post by: Pondus on February 13, 2019, 07:48:14 AM
Quote
Just curious to know abt the URL: Blacklist notification, cud'nt find any documentation
.. is it some virus script codenamed "Blacklist"?

Blacklist (computing)   
https://en.wikipedia.org/wiki/Blacklist_(computing)
https://en.wikipedia.org/wiki/Wikipedia:Spam_blacklist
https://en.wikipedia.org/wiki/Template:Blacklisted-links




You dont give any info / screenshot about what avast say so we have to guess .......






Title: Re: URL: Blacklist notification
Post by: 7PCGamer on February 13, 2019, 08:00:13 AM

Thanks for the revert.
It says "infected with URL:Blacklist"
Will soon update the full string of notification.
I dont have access to this specific computer right now..

Title: Re: URL: Blacklist notification
Post by: Pondus on February 13, 2019, 08:12:42 AM
Quote
It says "infected with URL:Blacklist"
OK it seems avast may have changed a detection name? as i have not seen that before


It used to be:
URL:Mal = Blacklisted URL or IP
PDF:UrlMal-inf [Trj] = pdf.doc that containe link to a blacklisted URL


The infected with is just a general text that is on top of all messages even if it is not a infection




Title: Re: URL: Blacklist notification
Post by: 7PCGamer on February 13, 2019, 04:13:08 PM
Hi,
Heres the full string:
"Weve safely aborted connection on www.locusinn.com because it was infected with URL:Blacklist"

I am merely posing this as an example .. this kind of intervention has become somewhat frequent.
I have attached my web shield settings.. for soliciting recommendations.

Thanks.

 
Title: Re: URL: Blacklist notification
Post by: Pondus on February 13, 2019, 04:35:05 PM
you can check suspicious URLs here:

File and URL (blacklist)  check  https://www.virustotal.com/
Website check  https://sitecheck.sucuri.net/


If you suscpect false positives then see my post here on how to report
https://forum.avast.com/index.php?topic=14433.msg1289438#msg1289438


Title: Re: URL: Blacklist notification
Post by: DavidR on February 13, 2019, 04:56:34 PM
VirusTotal isn't very good for URL checking as it doesn't actually do a scan, but refers to blacklists. 

It is possible that the "infected with URL:Blacklist" could also be caused by an attempt to access a 3rd party URL from that site.
Title: Re: URL: Blacklist notification
Post by: mchain on February 14, 2019, 03:37:02 AM
Sucuri also does blacklist checks but also checks for other things:  https://sitecheck.sucuri.net/results/https/www.locusinn.com (https://sitecheck.sucuri.net/results/https/www.locusinn.com)

Seems [h]ttps://www.locusinn.com not configured correctly.  http://urlquery.net/report/74c504ba-1673-48d5-9732-b7def7da2389 (http://urlquery.net/report/74c504ba-1673-48d5-9732-b7def7da2389), i.e. insecure connection.