Why is Avast blocking my web site

[DanDubinsky]

My company has a web site that the latest version of Avast seems to not like. The url is hxxps://app.sportsyou.com. Some Mac laptops  with Avast say it blocked the threat URL:Mal and some windows laptops say URL:Botnet. We aren't a malicious site or a Botnet (The site is actually an S3 bucket hosted on AWS) and as far as we know we haven't been hacked. Is there any way to find out why Avast is blocking it and what we need to do to get it unblocked. This just started today with the latest Avast update Version 15.0, virus definitions: 21100602 and it only seems to block on some computers and not others.

[DavidR]

Just looking at the domain name and not sub.domain name
https://www.virustotal.com/gui/url/444b665e7b7bcb5daaf534e8214316b88c16980cafbc070c7c9619115cb46e92
Low Security Risk here - https://sitecheck.sucuri.net/results/sportsyou.com - but some points raised.
Some outdated software reported here - https://awesometechstack.com/analysis/website/sportsyou.com/
-  This may or may not be what Avast is alerting for - but you should certainly address this.

Reporting a Possible False Positive File or Website - https://www.avast.com/false-positive-file-form.php.
You should get a response in a day or two.

[DanDubinsky]

Thanks for that. Those security checking sites are pretty great. We did submit that white list form, but until they respond a lot of users are getting blocked out of our product, so we are under some pressure here.

One thought we were kicking around was this. We only added the app.sportsyou.com domain yesterday. Now we have some requests to hxxps://www.sportsyou.com redirecting there. Worst case scenario it does 5 redirects now if a user goes to hxxp://sportsyou.com to wind up at hxxps://app.sportsyou.com. Could all the redirects somehow make Avast think the sub-domain is bad? We could probably clean that up a bit, but we aren't sure if this is what's going on. We are guessing because we really have now idea why Avast is doing this. Also we are thinking of adding some additional security headers to see if this makes Avast happy.

Other weird thing is it worked all day yesterday after we launched that new sub-domain and only started choking this morning when some people updated Avast to 15.0. We also have lots of other subdomains with similar behavior that Avast seems fine with. It's really confusing...

Any additional ideas would be most welcome.

[polonus]

Hi Dan Dubinsky,

There is a (sub-)domain connectivity problem, says a Zonemaster scan.
Wait for a final verdict from avast team.

polonus

[DavidR]

@  DanDubinsky
Just a point, when posting links, don't make them active.
e.g.  Please 'modify' your post/s change the URL from http to hXXps, to break the link and avoid accidental exposure to suspect sites,  or better just post the domain name element, thanks.

Yes there is certainly a redirect on the main domain to app.sportsyou.com, why I have no idea, put as polonus said there is a (sub-)domain connectivity problem

[DanDubinsky]

Interesting that zonemaster can't find the subdomain. I'll have to look into that.We're thinking we might have to back that subdomain out. It's causing other issues also, besides Avast.

I changed the links to hxxp as requested. Sorry about that. The site is legit though. When virus checkers don't block it, it's a free product that allows coaches, players and parents to communicate on youth sports teams ( sorry in advance for the shameless plug  ).

[DavidR]

No problem, it is just to prevent the (non-technical) inquisitive accidentally clicking the link and getting a shock.  I may also be picked up by search bots also.