Avast blocked my website (bacngoctuan.com)

Viruses and worms
1

Dear all,

We are running a site at URL: bacngoctuan.com

Avast! Internet Security was detected it as a malware site, below is report from our users:
sitecheck.sucuri.net/results/bacngoctuan.com
www.urlvoid.com/scan/bacngoctuan.com

I think this is a wrong detection, please check and remove it from black list.

I summit a ticket and no reply for me. My number ticket is
“Ticket ID: 16036
Subject: Report false virus alert on website”

Thanks in advanced!

2

Make the link to your site not clickable.
We do not want people to (accidentally) visit a (potential) harmful site.

Next to that, posting a report that is 12(!) months old is not helpful/useful.

3

Very suspicious code detected:
http://www.web-malware-removal.com/website-malware-virus-scanner/?url=bacngoctuan.com
https://www.virustotal.com/en/url/d80b61d018b4c94828c4320f071ed262d56adf86bade6606b9d77d42011f74ac/analysis/1447672295/

IP blacklisted:
http://zulu.zscaler.com/submission/show/ebcba753a8f943530c448ba08594177a-1447672173
http://urlquery.net/report.php?id=1447672574257
http://urlquery.net/report.php?id=1447672638434
http://multirbl.valli.org/lookup/125.212.226.149.html

NS, SOA and MX problems:
http://www.dnsinspect.com/bacngoctuan.com/1447672958

4

So

What i can do ? I want remove from blacklist

5

Vulnerable jQuery 1.10.2 library found:
Two or nultiple parameters on <!-- array( [name] => home [view] => [view_id] => 0 [view_url] => )1 before HTML.
See flagged code scanned: http://www.domxssscanner.com/scan?url=https%3A%2F%2Fbacngoctuan.com%2Ftemplate%2Fdefault%2Fscript%2Fjquery.min.js

polonus

6

What you must do is fixing the problems.

And again…
Make the link to your site not clickable.
We do not want people to (accidentally) visit a (potential) harmful site.

7

IP is on several blacklists http://multirbl.valli.org/lookup/125.212.226.149.html
More about cross scripting (level 3) http://push2check.net/bacngoctuan.com (click “css”)
Name server and SOA issues here http://dnscheck.pingdom.com/?domain=bacngoctuan.com&timestamp=1447699176&view=1
And here http://www.dnsinspect.com/bacngoctuan.com/1447699187
Going by other posts there seems to MX issues as well.

This is probably due to the netblock range… https://dazzlepod.com/ip/?ip_address=125.212.226.149#whois

8

I have fixed problem

Here is result: http://www.web-malware-removal.com/website-malware-virus-scanner/?url=bacngoctuan.com

9

Nice to hear that :wink: I am unblocking the IP now.