Author Topic: Website blocked by avast (URL: Mal)  (Read 3755 times)

0 Members and 4 Guests are viewing this topic.

REDACTED

  • Guest
Website blocked by avast (URL: Mal)
« on: September 04, 2015, 01:25:11 PM »
I hope I'm posting this in the right place, if not feel free to move it.

I'm the webmaster of summerquarter.net and it seems there is an issue with it. Avast blocks it with the message "URL:Mal". The website is built with wordpress and I have recently updated to the newest version.

Could the issue be related to an installed plugin perhaps?

I'd be very happy if a kind soul would let me know what to do to fix this issue.

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37698
Re: Website blocked by avast (URL: Mal)
« Reply #1 on: September 04, 2015, 01:54:28 PM »
It is blacklisted at crdf

See www.virustotal.com

You may report it at support.avast.com -> avast virus lab


Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 34052
  • malware fighter
Re: Website blocked by avast (URL: Mal)
« Reply #2 on: September 04, 2015, 02:13:37 PM »
But the website also come IP blocked.
As I see no Avast alerts on the code: -http://www.domxssscanner.com/scan?url=http%3A%2F%2Fsummerquarter.net
I guess it is the IP general block - ask for an exclusion from Avast team members, we are not so we cannot unblock,
that can only be done by Avast team members, mail virus@avast.com and refer to this thread.
Re: https://www.virustotal.com/nl/ip-address/46.30.212.27/information/
And this situation is not particularly helping you: http://sameid.net/ip/46.30.212.27/12/
(all bad apples in that Ip basket can cause a general IP block for you  :o ).
PHP vulnerabilities: https://msisac.cisecurity.org/advisories/2015/2015-091.cfm
CMS Warnings:
Warning User Enumeration is possible
The first two user ID's were tested to determine if user enumeration is possible.

User ID 1 : bjarteedvardsen
User ID 2 : None

Theme code - consider: http://wpseek.com/source/wp/latest/nav.html?wp-content/themes/twentyfourteen/functions.php.source.html

This has a known sink: https://wordpress.org/support/topic/jquery-migrate-vulnerability-or-false-alarm

polonus (volunteer website security analyst and website error-hunter)
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Offline Milos

  • Avast team
  • Super Poster
  • *
  • Posts: 2295
Re: Website blocked by avast (URL: Mal)
« Reply #3 on: September 04, 2015, 02:38:36 PM »
Hello,
the domain will be unblocked in a next stream update (10 minutes).

Milos

REDACTED

  • Guest
Re: Website blocked by avast (URL: Mal)
« Reply #4 on: September 04, 2015, 07:52:53 PM »
Hello,
the domain will be unblocked in a next stream update (10 minutes).

Milos

Thanks a lot!

Will the software "remember" that it has blocked the site before and therefore might still keep blocking it when I visit the site again (which is what happened last time I tried)?

REDACTED

  • Guest
Re: Website blocked by avast (URL: Mal)
« Reply #5 on: September 04, 2015, 08:05:01 PM »
But the website also come IP blocked.
As I see no Avast alerts on the code: -http://www.domxssscanner.com/scan?url=http%3A%2F%2Fsummerquarter.net
I guess it is the IP general block - ask for an exclusion from Avast team members, we are not so we cannot unblock,
that can only be done by Avast team members, mail virus@avast.com and refer to this thread.
Re: https://www.virustotal.com/nl/ip-address/46.30.212.27/information/
And this situation is not particularly helping you: http://sameid.net/ip/46.30.212.27/12/
(all bad apples in that Ip basket can cause a general IP block for you  :o ).

Thanks for helping out!

So let me get this straight, my website is being blocked because it has the same IP-address as other less trustworthy websites? What causes which IP-address the website gets in the first place? My choice of domain provider? (one.com)

I'm sorry, this is totally new territory for me.

CMS Warnings:
Warning User Enumeration is possible
The first two user ID's were tested to determine if user enumeration is possible.

User ID 1 : bjarteedvardsen
User ID 2 : None

Meaning, I could need this https://wordpress.org/plugins/stop-user-enumeration/ ?

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 34052
  • malware fighter
Re: Website blocked by avast (URL: Mal)
« Reply #6 on: September 05, 2015, 12:45:52 PM »
Yes some hosters aren't pro-active to help website-owners to get more secure.
Whenever money comes first and abuse on websites is silently condoned, you could have such problems,
a story of "the good, the bad and the ugly" (where the hoster is the ugly party there  ;)  ;D ).

Your second question can be answered affirmatively, so you'd better!

I gave your site some plus for responsible website administration  :) at WOT (where my nick = luntrus):
https://www.mywot.com/en/scorecard/summerquarter.net#view

polonus
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Offline jefferson sant

  • Starting Graphoman
  • *
  • Posts: 6669
  • volunteer
Re: Website blocked by avast (URL: Mal)
« Reply #7 on: September 06, 2015, 02:02:22 AM »
Will the software "remember" that it has blocked the site before and therefore might still keep blocking it when I visit the site again (which is what happened last time I tried)?

Delay
Fixed in an update released at the last moment yesterday (04/09/15)
you have VPS stream update current,not is more being blocked by Avast.
« Last Edit: September 06, 2015, 02:05:54 AM by jefferson sant »