Website blocked. URL:Mal2

[Yupi Nawate]

Hi all,

We don't have avast in our company, but our clients can't visit our website if they have avast installed.
The website is blocked with this message: URL:Mal2.

What can we do? I already sent a request to avast support (and another one right now) with no result.

Thanks,

David.

[giogio]

Please post your website link broked for example hxxp://www.google.com or test your site directly here
https://www.virustotal.com/#url

[Yupi Nawate]

Hi all,

We don't have avast in our company, but our clients can't visit our website if they have avast installed.
The website is blocked with this message: URL:Mal2.

What can we do? I already sent a request to avast support (and another one right now) with no result.

Thanks,

David.

Hi,

Now it is happening with 3 of our websites (hosted in the same server):

http://www.grupointerpack.com
http://dealers.grupointerpack.net
http://portal.grupointerpack.net

We already passed the tests at https://www.virustotal.com/
Bitdefender had blacklisted the last two, but now it's fixed (we contacted them), but Avast keeps on showing virus alert.

Please help.

David.

[polonus]

Problems here: http://dnscheck.pingdom.com/?domain=www.grupointerpack.com&timestamp=1396615634&view=1
The crux of the problem and reason for an avast blocking was sites are being hosted at afraid dot org.
In that case you cannot be sure the site is actually yours anymore.

This scan seems OK: http://sitecheck.sucuri.net/scanner/?scan=http%3A%2F%2Fwww.grupointerpack.com%2F
Also see: http://dnscheck.sidn.nl/?time=1396616221&id=1744106&view=basic&test=standard
Injection check flags: Suspicious Text before HTML

<script language="javascript" type="text/javascript">function submitenter(myfield,e){var keycode;if (window.event) keycode = window.event.keycode;else if (e) keycode = e.which;else return true;if (keycode == 13) { onclick_btn_enviar();//myfield.form.submit(); return false; }else return true;}var i;var imagenes = new array("images/ford_m.jpg","images/foto_espack.png","images/logo_espack.png","images/explorer.gif","images/firefox.gif","images/iso9001.png");var lista_imagenes = new array();function cargar_imagenes(){ for(i in imagenes){ lista_imagenes = new image(); lista_imagenes.src = imagenes;}}function mostrar(nombrecapa){document.getelementbyid(nombrecapa).style.visibility="visible";}function ocultar(nombrecapa){document.getelementbyid(nombrecapa).style.visibility="hidden";}</script>

External link blocked: htxp://www.grupointerpack.com/

See: http://fetch.scritch.org/%2Bfetch/?url=http%3A%2F%2Fwww.grupointerpack.com%2F&useragent=Fetch+useragent&accept_encoding=

Reason sites are being blocked is because they are hosted via afraid dot org, steer away from afraid dot org and avast may quickly unblock sites,
mostly within a coming update - for results see: Hosting provider: Telefonica de Espana
WHOIS:
IP Address: 80.33.195.45
Name Servers:
ns1.afraid dot org
ns2.afraid dot org
ns3.afraid dot org
ns4.afraid dot org

polonus

[lisabyrne]

  Have a similar problem with Avast blocking a website. URL:Mal1
My son's FIRST FRC Robotics team's website is blocked by Avast  www.dirtymechanics.org

He created the website and has cleared up other website blocking problems in the past year, but now Avast is blocking site.

Their team (FRC Team 3932 The Dirty Mechanics Robotics Team) just won 2014 FIRST FRC South Florida Regional Tournament and qualified to go to the World Championships Apr 23-26.
They need to have their website accessible right now to fundraise from sponsors the $25,000 it will take to cover registration, travel, & expenses for the team to participate.
If we can't get potential sponsors able to access the website, it is a huge problem
What can we do right now to fix this?  We can't wait to have a "ticket" entered and 7-10 days to get a response back.

Please look our real club up on usfirst.org along with our facebook page (link is on the site you blocked)

[Milos]

Hello,
either your DNS (afraid.org) host allows creation of subdomains for other persons, or your passwords were stolen or the DNS host itself was hosted, but your domain was clearly used for malicious purposes and was blocked.
Any domain hosted on afraid.org can be used by other persons for dns hosting without your control. It happened for your domain, it was misused for malicious purposes - in that case, when nobody has control on subdomains of domain (DNS hijacking), we block the whole domain in order to protect our users. For you, the solution is most probably only changing the dns hosting and letting us know later.

Milos