Author Topic: URL:Mal infection on specific site  (Read 2026 times)

0 Members and 1 Guest are viewing this topic.

REDACTED

  • Guest
URL:Mal infection on specific site
« on: February 17, 2015, 02:16:04 PM »
Hi, if i try to go to www.uppladdning.nu (normal site/safe) The site gets blocked and a popup warning about URL:Mal

I have tried from diffrent computer with Avast aswell, same problem.
Have runned the scanns and atachted the logs. But the last, aswMBR crashes everytime on the same scan, have included a picture of it.

Any thoughts?

/KG


Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37554
  • Not a avast user
Re: URL:Mal infection on specific site
« Reply #1 on: February 17, 2015, 03:47:54 PM »
Quote
Hi, if i try to go to www.uppladdning.nu (normal site/safe)
there are no safe site on the net ... safe today can be hacked tomorrow

URL:Mal means URL or IP is blacklisted for whatever reason



Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37554
  • Not a avast user
Re: URL:Mal infection on specific site
« Reply #2 on: February 17, 2015, 03:49:44 PM »
VirusTotal
https://www.virustotal.com/nb/url/b3807bc47a4a016d41144545c86cefa7cc271422e50a860db40eff9550548dba/analysis/1424184278/

IP History  https://www.virustotal.com/nb/ip-address/23.101.63.214/information/
Multiple domains on same IP and many are blacklisted .... click more button under list(s) for more info


IP void  http://www.urlvoid.com/ip/23.101.63.214
Quote
IP ADDRESS: 23.101.63.214

We have found in our database of already analyzed websites that there are 12 websites hosted in the same web server with IP address 23.101.63.214 and IP hostname waws-prod-db3-015.cloudapp.net. Remember that it is not good to have too many websites located in the same web server because if a website gets infected by malware, it can easily affect the online reputation of the IP address and also of all the other websites.



so to me this looks like a IP block

if you think it is wrong, report it here  https://support.avast.com/ > avast virus lab




do you suspect a infection since you have attached scan logs?

essexboy will be online later and check your logs


« Last Edit: February 17, 2015, 03:55:26 PM by Pondus »

Offline Eddy

  • Avast Evangelist
  • Maybe Bot
  • ***
  • Posts: 31079
  • Watching (over?) you
    • Malware removal, Biljart and other things.
Re: URL:Mal infection on specific site
« Reply #3 on: February 17, 2015, 03:57:21 PM »
The problem is with: wxw.uppladdning.nu/js/rs_rc.aspx

REDACTED

  • Guest
Re: URL:Mal infection on specific site
« Reply #4 on: February 17, 2015, 04:28:10 PM »
Thank you for the information. I just ran the scans and attached the logs to have it done. Didnt think I was infected since same thing happend on diffrent computers.

Will have to try and get a hold of the webadmin of the site and refer to this thread for them to get it unblocked.

/KG