Author Topic: Site blocking  (Read 940 times)

0 Members and 1 Guest are viewing this topic.

Offline Perwiz

  • Newbie
  • *
  • Posts: 1
Site blocking
« on: September 27, 2019, 10:17:50 AM »
Good day.
Please check the site hxtp://oil-market.ru/ for unclear reasons, Avast blocks access to the site. I apply screenshots.
https://prnt.sc/pblm89
https://prnt.sc/pblmf4
https://prnt.sc/pblmmi

Result of checking
https://www.virustotal.com/gui/url/f690e681b3883158303b85f6666c70847e03fdfd1c4cc4386bdf85a7c50c8ca9/detection

On the server side, as well as the outer part of the virus was not found.
« Last Edit: September 27, 2019, 10:25:19 AM by Milos »

Offline Milos

  • Avast team
  • Super Poster
  • *
  • Posts: 2294
Re: Site blocking
« Reply #1 on: September 27, 2019, 10:25:07 AM »

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33900
  • malware fighter
Re: Site blocking
« Reply #2 on: September 27, 2019, 12:10:16 PM »
Witam Perwiz,

There were 6 engines to detect this during the time of the date given below, could have been cleansed now or is still persistent.
Scanned: https://www.virustotal.com/gui/ip-address/141.8.198.191/relations
Detections
URL
2019-09-21
6/ 71
-http://oil-market.ru/language/ec21buyer -> https://aw-snap.info/file-viewer/?protocol=secure&ref_sel=GSP2&ua_sel=ff&chk-cache=&fs=1&tgt=XVtsLW18fWt7dC59dWBsfG5ndXxne2B7XjIxYnV5e30%3D~enc

We have been there with this being reported earlier in the Virus & Worms section here:
Consider secure connection for -http://code.jivosite.com/widget.js -> https://forum.avast.com/index.php?topic=181426.0

7 SSL issues -> https://www.immuniweb.com/ssl/?id=buZlVLw1

Website has been blacklisted by Norton's as well: https://sitecheck.sucuri.net/results/https/oil-market.ru/language/ec21buyer

Outdated server software has been detected: Nginx under 1.17.3  with vulnerabilities: http://nginx.org/en/security_advisories.html

Alerted but with 0 findings @: https://safeweb.norton.com/report/show?url=https%3A%2F%2Foil-market.ru%2Flanguage%2Fec21buyer

So what is the problem for this particular Norton Safe Web alert and blacklisting to continue?

Again wait for a final verdict from the avast team member, responsible for blocking that particular site.
They are the only ones to come and unblock your website.

Best policy linting gave these results: 119 improvement recommendations:
https://webhint.io/scanner/7d2087d0-005d-4dd4-b6b0-2021f9cedf6b
So there is ample room for improvement security-wise and applying best policies.

Apply what seems sensible to you or the owner of that website!

Wait for a reaction from avast team, we here are just volunteers with expertise,
for instance for me that lies in the field of 3rd party cold recon website security analysis and website error-hunting.

pozdrawiam,

polonus
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!