Author Topic: Avast reports URL:Mal / URL:Mal2 blocks.  (Read 2011 times)

0 Members and 2 Guests are viewing this topic.

REDACTED

  • Guest
Avast reports URL:Mal / URL:Mal2 blocks.
« on: April 25, 2016, 05:54:25 AM »
Hi. Two of my sites reports URL:Mal blocs:
fun4dog.ru
sledsport.ru

I've checked them with sitecheck.sucuri.net, http://quttera.com and no problems were found. Is there anything that I missed?

Thanks in advance.


Offline HonzaZ

  • Avast team
  • Advanced Poster
  • *
  • Posts: 1038
Re: Avast reports URL:Mal / URL:Mal2 blocks.
« Reply #2 on: April 25, 2016, 08:50:25 AM »
fun4dog.ru unblocked ;)
sledsport.ru was never on our blacklist.

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 34067
  • malware fighter
Re: Avast reports URL:Mal / URL:Mal2 blocks.
« Reply #3 on: April 25, 2016, 02:50:27 PM »
Good there no longer are existing malcode issues for those sites, there is room for some website security improvement however.
For the code here: -
sledsport.ru/published/publicdata/SS77892WEBASYST/attachments/SC/themes/sale/head.js
SyntaxError: XML tag name mismatch (expected link): line:54:      </head>
For some ecternal code (the reason for that B-Status there): https://sritest.io/#report/74a6f471-b3d5-47ea-931e-3729838bb05d
HonzaZ did not mention this, but it is better to steer away from afraid dot org: https://seomon.com/domain/sledsport.ru/dns/
NS
TTL   Target   Same
7200   -ns1.afraid.org   18357
7200   -ns2.afraid.org   20389
7200   -ns3.afraid.org   18247
7200   -ns4.afraid.org   18232

Aklso see F-Status here: https://securityheaders.io/?q=http%3A%2F%2Fsledsport.ru%2F

Excessive server header info proliferation detected: Apache/2.2.22 (Ubuntu) Server
Do not let your servers speak that loud. -> http://toolbar.netcraft.com/site_report?url=http://hosted-by.ihc.ru

See: -http://ns1.ihc.ru/ Nginx 1.9.9. webserver  -> http://www.infoworld.com/article/3028560/security/latest-nginx-updates-address-three-security-flaws.html

HTML doc 5 errors and 8 warnings: https://seomon.com/domain/sledsport.ru/html_validator/

polonus (volunteer website security analyst and website error-hunter)
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!