Author Topic: URL:Mal possible FP  (Read 1692 times)

0 Members and 1 Guest are viewing this topic.

REDACTED

  • Guest
URL:Mal possible FP
« on: July 25, 2016, 10:49:01 PM »
My site gushmi.com is clear, i check it with virustotal but avast is blocking it because of url/mal. Please help

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 89029
  • No support PMs thanks
Re: URL:Mal possible FP
« Reply #1 on: July 25, 2016, 11:10:39 PM »
My site gushmi.com is clear, i check it with virustotal but avast is blocking it because of url/mal. Please help

Please start your own new topic (button at the top of the listing) in this forum https://forum.avast.com/index.php?board=4.0 and we will try and help you rather than breath life into a topic over three years old.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.3.6108 (build 24.3.8975.762) UI 1.0.801/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33897
  • malware fighter
Re: URL:Mal possible FP
« Reply #2 on: July 25, 2016, 11:36:56 PM »
Hi Hernan Zapata & DavidR,

The reason for avast blocking the site is quite clear and obvious as it has been blocked because the site is hosted at afraid dot org.
When the site owner steers away from afraid dot org, and an avast team member may come to unblock it.
We cannot do that as we are just volunteers with relevant knowledge,
the proof of it all can be found here: http://www.dnsinspect.com/gushmi.com/1469482159

polonus (volunteer website security analyst and website error-hunter)
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Offline HonzaZ

  • Avast team
  • Advanced Poster
  • *
  • Posts: 1038
Re: URL:Mal possible FP
« Reply #3 on: July 26, 2016, 09:40:26 AM »
1. I split the topics. Every possible FP should be in its own topic.
2. gushmi.com has its DNS hosted on afraid.org, which has insecure free version. Either pay and switch to "stealth" option, or move somewhere else. Even now, we can spot active URL (10qtest.gushmi[.]com) that is on a different IP than the main domain, which is always suspicious behaviour.

Offline Eddy

  • Avast Evangelist
  • Maybe Bot
  • ***
  • Posts: 31079
  • Watching (over?) you
    • Malware removal, Biljart and other things.
Re: URL:Mal possible FP
« Reply #4 on: July 26, 2016, 09:46:48 AM »
As addition, VirusTotal does not scan websites.
It only checks blacklists.

If a site is not listed by VirusTotal it doesn't mean it is free from malicious things.