Author Topic: Why is Avast blocking my website?  (Read 12992 times)

0 Members and 1 Guest are viewing this topic.

Offline jefferson sant

  • Starting Graphoman
  • *
  • Posts: 6677
  • volunteer
Re: Why is Avast blocking my website?
« Reply #15 on: September 18, 2019, 03:16:50 AM »
It was reported that the detection was back.We were unable to reach contact due to a link problem.

Detection has been removed by AVG in 17.09.2019 at 04:10 AM.

Quote from: AVG
The detection by AVG was incorrect and was removed in a recent AVG update, please wait at least 24 hours.

Avast has been confirmed not to be blocked anymore.

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33892
  • malware fighter
Re: Why is Avast blocking my website?
« Reply #16 on: September 19, 2019, 06:22:12 PM »
-http://www.seltecuae.com/ now no longer seen being blocked,

polonus
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Offline simeont9

  • Newbie
  • *
  • Posts: 1
Re: Why is Avast blocking my website?
« Reply #17 on: December 05, 2019, 01:03:17 PM »
hxtps://squeezecreative.eu

please help me, i can not understand why you are blocking my site, sururi test is ok, which scanner you are using in obtaining the info which lead you blocking my site?

thank you in advance

simeon
« Last Edit: December 06, 2019, 10:54:40 AM by Milos »

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33892
  • malware fighter
Re: Why is Avast blocking my website?
« Reply #18 on: December 05, 2019, 02:16:15 PM »
It is not only avast that blocks this website because of PHISHING, it is also MBAM that blocks it and other vendors.
And another three to flag, see in the VT scan results: https://www.virustotal.com/gui/url/27f132e6926f7407de18fbf6bc5cfcfa8921acd2e704372a1a771ebe93bb451e/detection

Re: Unable to parse page. Check your target is accessible and try again.....
OK here: http://isithacked.com/check/https%3A%2F%2Fsqueezecreative.eu%2F

Word Press CMS has an outdated version: https://sitecheck.sucuri.net/results/https/squeezecreative.eu

More detection on this same IP: https://www.virustotal.com/gui/ip-address/213.169.137.237/relations

Nelly's linting improvement recommendations: https://webhint.io/scanner/fabf7621-dfa0-4c97-9d30-7b49b50bd05b
0 passed as linter is unable to scan & parse site.....

DOM-XSS issues sources and sinks -> Results from scanning URL: -https://squeezecreative.eu/
Number of sources found: 10
Number of sinks found: 109

Results from scanning URL: -https://squeezecreative.eu/wp-content/plugins/revslider/public/assets/js/jquery.themepunch.tools.min.js?ver=5.4.6.4
Number of sources found: 0
Number of sinks found: 3

Results from scanning URL: -https://squeezecreative.eu/wp-content/plugins/revslider/public/assets/js/jquery.themepunch.tools.min.js?ver=5.4.6.4
Number of sources found: 41
Number of sinks found: 17

Results from scanning URL: -https://squeezecreative.eu/wp-includes/js/wp-embed.min.js?ver=4.9.10
Number of sources found: 17
Number of sinks found: 2

Results from scanning URL: -https://squeezecreative.eu/wp-includes/js/wp-embed.min.js?ver=4.9.10
Number of sources found: 46
Number of sinks found: 9

With combinations of sources (input that can be controlled) like window.name 1.455 & sessionStorage 1/2
and sinks (methods to be abused) like eval 31/50 Function 1/5 059 & setTimeout 1/103 just to name a few.

This in the context of two vulnerable retirable jQuery libraries detected:
https://retire.insecurity.today/#!/scan/d0eca830111fdd9d1136a5d98c5b7897cfe2ace2c58a341bca47ddd21fc95ff5

See: https://snyk.io/vuln/npm:jquery:20150627 = SNYK DB for DOM-XSS exploitable flaws etc.
Convert special characters such as ?, &, /, <, > and spaces to their respective HTML or URL encoded equivalents.

Could be obfuscated code is flagged after ;eval(function(p,a,c,k,e,r), but that is only a fair guess on my part.

Wait for an Avast Team Member for a final verdict and an eventual green light.
They are the only ones to come and unblock, as we here are just volunteers with relative knowledge.

polonus (volunteer 3rd party cold recon website security analyst and website error-hunter)


Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Offline Milos

  • Avast team
  • Super Poster
  • *
  • Posts: 2293
Re: Why is Avast blocking my website?
« Reply #19 on: December 06, 2019, 10:55:40 AM »
hxtps://squeezecreative.eu

please help me, i can not understand why you are blocking my site, sururi test is ok, which scanner you are using in obtaining the info which lead you blocking my site?

thank you in advance

simeon
Hello,
you can report it here: https://www.avast.com/false-positive-file-form.php

Milos

Offline jefferson sant

  • Starting Graphoman
  • *
  • Posts: 6677
  • volunteer
Re: Why is Avast blocking my website?
« Reply #20 on: December 10, 2019, 02:19:16 PM »
hxtps://squeezecreative.eu

please help me, i can not understand why you are blocking my site, sururi test is ok, which scanner you are using in obtaining the info which lead you blocking my site?

thank you in advance

simeon

Detection was cleared 10.12.2019 at 06:17 AM

Quote from: Avast
Our virus specialists have now cleared its reputation in our database.

With URLs this change should be instant, but it might take up to 24 hours with files.