Author Topic: web shield false positive: "website-unavailable.com" - part of OpenDNS  (Read 13816 times)

0 Members and 1 Guest are viewing this topic.

Offline Rassilon

  • Newbie
  • *
  • Posts: 18
avast web shield (from avast free av) keeps blocking

http://website-unavailable.com

this domain is owned by OpenDNS and the opendns resolvers 208.67.222.222/208.67.220.220 will automatically redirect users to it in various cases.

[Querying whois.PublicDomainRegistry.com]

Registrant:
    OpenDNS
    OpenDNS Hostmaster        (hostmaster -=at=-opendns.com)
    410 Townsend st.
    Suite 250
    San Francisco
    California,94105
    US
    Tel. +001.4153443118
    Technical Support: 415-344-3166, Option 1


[...]
Creation Date: 14-Sep-2011
Expiration Date: 14-Sep-2012

Nameservers:
    auth1.opendns.com
    auth2.opendns.com
    auth3.opendns.com



# dig @auth1.opendns.com website-unavailable.com

;; ANSWER SECTION:
website-unavailable.com. 3600   IN      CNAME   guide.opendns.com.



Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 84754
  • No support PMs thanks
No alerts here using firefox 12.0 and avast free 7.0.1426, VPS version 120510-0.

Do you still get an alert and if so please post a screen shot of the alert window ?
Windows 10 Home 2004 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 21.2.2455 (build 21.2.6096.648) UI 1.0.608/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

Offline pantantrollo

  • Newbie
  • *
  • Posts: 4
same problem here with opera , firefox ....

build, AIS 7.0.1426 , 120510-1
« Last Edit: May 11, 2012, 02:04:18 AM by pantantrollo »

Offline iroc9555

  • CCS, Vzla.
  • Avast Überevangelist
  • Starting Graphoman
  • *****
  • Posts: 7462
  • No soporte por PM.
Interesting.

It did not alert with VPS 120510-0, but it is blocked with VPS 120510-1
Hernan.
Dim 9200. C2D E6600; 2.40GHz. 4GB DDR2RAM. XP Pro_86. Spk3. IE8 & FF41. Avast FREE 2015. CIS 5.12(FW/D+). MBAM Premium. MCShield. WinPatrol +. SpywareBlasterOpenDNS. uBlock. WOT. Sandboxie

Offline sideways

  • Newbie
  • *
  • Posts: 1
I am having website-unavailable.com blocked in both Iron Portable 18.0.1050.0 and Firefox 12.0 A screen cap would duplicate those already posted.

Offline mchain

  • Avast Evangelist
  • Ultra Poster
  • ***
  • Posts: 5417
  • Spartan Warrior
Same here.  Using Open DNS as well.  Clicked the http_// address in OP post, and got this.
Windows 10 Home 64-bit 1909 Avast Premier Security version 20.10.2442 (build 20.10.5824.618) UI version 1.0.591.

Offline alisonnic

  • Jr. Member
  • **
  • Posts: 20
I am getting this problem. Web shield is generating a popup every few minutes for "website-unavailable.com". I'm using OpenDNS, Firefox 12.0, and Avast! IS 7.0.1426, VPS 120511-0.

Screen shot of the popup is attached.

I'm glad to know this is a false positive.

Is there any way to stop these messages from coming up until Avast fixes the problem?

Thanks!

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 84754
  • No support PMs thanks
Yes I too am getting an alert on it today, I have reported it for analysis/network shield review at http://www.avast.com/contact-form.php?loadStyles.

Since this is a Network Shield alert and there are no user defined settings, e.g. exclusion list for sites you need to report a possible false positive alert on a website using the above contact form, so that it can be reviewed and hopefully the detection corrected, assuming that the site hasn't been hacked.

No detections on the site from http://sitecheck.sucuri.net/results/website-unavailable.com/ or http://www.urlvoid.com/scan/website-unavailable.com/
Windows 10 Home 2004 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 21.2.2455 (build 21.2.6096.648) UI 1.0.608/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

Offline mchain

  • Avast Evangelist
  • Ultra Poster
  • ***
  • Posts: 5417
  • Spartan Warrior
@ DavidR,

Link is not alerting anymore as of 5/11/12, vps version 120511-0.  Will do as you say, send off a false-positive report to Avast! if it happens again.

Thanks.
Windows 10 Home 64-bit 1909 Avast Premier Security version 20.10.2442 (build 20.10.5824.618) UI version 1.0.591.

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 84754
  • No support PMs thanks
The correction could also come in the form of a streaming update.

There have been 10 streaming updates today (obviously not all would be corrections), all of them time stamped after my last post. Hopefully it would have been one of those that corrected it.

Windows 10 Home 2004 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 21.2.2455 (build 21.2.6096.648) UI 1.0.608/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

Offline fxp

  • Newbie
  • *
  • Posts: 13
Re: web shield false positive: "website-unavailable.com" - part of OpenDNS
« Reply #10 on: August 13, 2013, 02:24:11 PM »
I use OpenDNS and have been getting alerts about unavailable.com all morning.  This is what's in the alert box:

Infection Details
URL:   http://www.website-unavailable.com/?wc
Process:   C:\Users\Frank\AppData\Local\Google\Chro...
Infection:   JS:Includer-AHH [Trj]

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 84754
  • No support PMs thanks
Re: web shield false positive: "website-unavailable.com" - part of OpenDNS
« Reply #11 on: August 13, 2013, 04:13:33 PM »
Please 'modify' your post change the URL from http to hXXp or www to wXw, to break the link and avoid accidental exposure to suspect sites, thanks.

Follow the reporting process outlined in Reply #7 above, though in this case it isn't the network shield, but the web shield which is alerting on this javascript redirection.
Windows 10 Home 2004 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 21.2.2455 (build 21.2.6096.648) UI 1.0.608/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

Offline A. User

  • Sr. Member
  • ****
  • Posts: 394
Re: web shield false positive: "website-unavailable.com" - part of OpenDNS
« Reply #12 on: August 13, 2013, 04:41:18 PM »
Also getting this. I use Norton DNS but tested it and found JS:Includer-AHH

Offline Secondmineboy

  • Avast Evangelist
  • Massive Poster
  • ***
  • Posts: 3651
Windows 10 1909, 4 GB DDR3 RAM, 500 GB 5400 RPM HDD, 1366 by 768 LCD Screen, Intel Core i3 5010U Dual Core, Intel HD Graphics 5500
HUAWEI P30 Pro. Android 10

Offline Secondmineboy

  • Avast Evangelist
  • Massive Poster
  • ***
  • Posts: 3651
Re: web shield false positive: "website-unavailable.com" - part of OpenDNS
« Reply #14 on: August 13, 2013, 05:08:52 PM »
Hallo Liubomirwm,

Norton says that the site is safe:

http://safeweb.norton.com/report/show?url=website-unavailable.com&ulang=eng
Windows 10 1909, 4 GB DDR3 RAM, 500 GB 5400 RPM HDD, 1366 by 768 LCD Screen, Intel Core i3 5010U Dual Core, Intel HD Graphics 5500
HUAWEI P30 Pro. Android 10