Author Topic: web shield false positive: "website-unavailable.com" - part of OpenDNS  (Read 16596 times)

0 Members and 1 Guest are viewing this topic.

Rassilon

  • Guest
avast web shield (from avast free av) keeps blocking

http://website-unavailable.com

this domain is owned by OpenDNS and the opendns resolvers 208.67.222.222/208.67.220.220 will automatically redirect users to it in various cases.

[Querying whois.PublicDomainRegistry.com]

Registrant:
    OpenDNS
    OpenDNS Hostmaster        (hostmaster -=at=-opendns.com)
    410 Townsend st.
    Suite 250
    San Francisco
    California,94105
    US
    Tel. +001.4153443118
    Technical Support: 415-344-3166, Option 1


[...]
Creation Date: 14-Sep-2011
Expiration Date: 14-Sep-2012

Nameservers:
    auth1.opendns.com
    auth2.opendns.com
    auth3.opendns.com



# dig @auth1.opendns.com website-unavailable.com

;; ANSWER SECTION:
website-unavailable.com. 3600   IN      CNAME   guide.opendns.com.



Online DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 89053
  • No support PMs thanks
No alerts here using firefox 12.0 and avast free 7.0.1426, VPS version 120510-0.

Do you still get an alert and if so please post a screen shot of the alert window ?
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.3.6108 (build 24.3.8975.762) UI 1.0.801/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

pantantrollo

  • Guest
same problem here with opera , firefox ....

build, AIS 7.0.1426 , 120510-1
« Last Edit: May 11, 2012, 02:04:18 AM by pantantrollo »

iroc9555

  • Guest
Interesting.

It did not alert with VPS 120510-0, but it is blocked with VPS 120510-1

sideways

  • Guest
I am having website-unavailable.com blocked in both Iron Portable 18.0.1050.0 and Firefox 12.0 A screen cap would duplicate those already posted.

Offline mchain

  • Avast Evangelist
  • Ultra Poster
  • ***
  • Posts: 5616
  • Spartan Warrior
Same here.  Using Open DNS as well.  Clicked the http_// address in OP post, and got this.
Windows 10 Home 64-bit 22H2 Avast Premier Security version 24.1.6099 (build 24.1.88821.762)  UI version 1.0.797
 UI version 1.0.788.  Windows 11 Home 23H2 - Windows 11 Pro 23H2 Avast Premier Security version 24.2.6105 (build 24.1.8918.827) UI version 1.0.801

alisonnic

  • Guest
I am getting this problem. Web shield is generating a popup every few minutes for "website-unavailable.com". I'm using OpenDNS, Firefox 12.0, and Avast! IS 7.0.1426, VPS 120511-0.

Screen shot of the popup is attached.

I'm glad to know this is a false positive.

Is there any way to stop these messages from coming up until Avast fixes the problem?

Thanks!

Online DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 89053
  • No support PMs thanks
Yes I too am getting an alert on it today, I have reported it for analysis/network shield review at http://www.avast.com/contact-form.php?loadStyles.

Since this is a Network Shield alert and there are no user defined settings, e.g. exclusion list for sites you need to report a possible false positive alert on a website using the above contact form, so that it can be reviewed and hopefully the detection corrected, assuming that the site hasn't been hacked.

No detections on the site from http://sitecheck.sucuri.net/results/website-unavailable.com/ or http://www.urlvoid.com/scan/website-unavailable.com/
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.3.6108 (build 24.3.8975.762) UI 1.0.801/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

Offline mchain

  • Avast Evangelist
  • Ultra Poster
  • ***
  • Posts: 5616
  • Spartan Warrior
@ DavidR,

Link is not alerting anymore as of 5/11/12, vps version 120511-0.  Will do as you say, send off a false-positive report to Avast! if it happens again.

Thanks.
Windows 10 Home 64-bit 22H2 Avast Premier Security version 24.1.6099 (build 24.1.88821.762)  UI version 1.0.797
 UI version 1.0.788.  Windows 11 Home 23H2 - Windows 11 Pro 23H2 Avast Premier Security version 24.2.6105 (build 24.1.8918.827) UI version 1.0.801

Online DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 89053
  • No support PMs thanks
The correction could also come in the form of a streaming update.

There have been 10 streaming updates today (obviously not all would be corrections), all of them time stamped after my last post. Hopefully it would have been one of those that corrected it.

Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.3.6108 (build 24.3.8975.762) UI 1.0.801/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

fxp

  • Guest
Re: web shield false positive: "website-unavailable.com" - part of OpenDNS
« Reply #10 on: August 13, 2013, 02:24:11 PM »
I use OpenDNS and have been getting alerts about unavailable.com all morning.  This is what's in the alert box:

Infection Details
URL:   http://www.website-unavailable.com/?wc
Process:   C:\Users\Frank\AppData\Local\Google\Chro...
Infection:   JS:Includer-AHH [Trj]

Online DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 89053
  • No support PMs thanks
Re: web shield false positive: "website-unavailable.com" - part of OpenDNS
« Reply #11 on: August 13, 2013, 04:13:33 PM »
Please 'modify' your post change the URL from http to hXXp or www to wXw, to break the link and avoid accidental exposure to suspect sites, thanks.

Follow the reporting process outlined in Reply #7 above, though in this case it isn't the network shield, but the web shield which is alerting on this javascript redirection.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.3.6108 (build 24.3.8975.762) UI 1.0.801/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

Offline A. User

  • Sr. Member
  • ****
  • Posts: 388
Re: web shield false positive: "website-unavailable.com" - part of OpenDNS
« Reply #12 on: August 13, 2013, 04:41:18 PM »
Also getting this. I use Norton DNS but tested it and found JS:Includer-AHH

Offline Secondmineboy

  • Avast Evangelist
  • Massive Poster
  • ***
  • Posts: 3645
Windows 10 1909, 4 GB DDR3 RAM, 500 GB 5400 RPM HDD, 1366 by 768 LCD Screen, Intel Core i3 5010U Dual Core, Intel HD Graphics 5500
HUAWEI P30 Pro. Android 10

Offline Secondmineboy

  • Avast Evangelist
  • Massive Poster
  • ***
  • Posts: 3645
Re: web shield false positive: "website-unavailable.com" - part of OpenDNS
« Reply #14 on: August 13, 2013, 05:08:52 PM »
Hallo Liubomirwm,

Norton says that the site is safe:

http://safeweb.norton.com/report/show?url=website-unavailable.com&ulang=eng
Windows 10 1909, 4 GB DDR3 RAM, 500 GB 5400 RPM HDD, 1366 by 768 LCD Screen, Intel Core i3 5010U Dual Core, Intel HD Graphics 5500
HUAWEI P30 Pro. Android 10