Awast Flagged my Website as Malware

General Topics
1

Hello Team , My website , www.mohitsahu.in is flagged as malware in pc who have installed AVAST antivirus , its my website and has no malware in it , you can see the Google Virus Total result here

https://www.virustotal.com/en/url/6cc23411c760071cd3e0c419bda1ad1220e367c648cce05cdaa30debe8d23265/analysis/1447516077/

also tested with https://sitecheck.sucuri.net/results/mohitsahu.in

http://www.urlvoid.com/scan/mohitsahu.in/

Kindly Remove it as soon as possible

2

VirusTotal doesn’t actually scan the site it just refers to black lists, at least the latter two do a scan it may not be conclusive.

The avast alert is reporting URL:MAL and this usually indicates the site or IP address is blocked (can happen if your domain is on an IP with many other sites, some of which may be infected). Or it could refer to a 3rd party URL linked to from your site.

You can submit a support ticket - Try the following: https://support.avast.com/support/tickets/new.

3

Blacklisted & IDS
http://urlquery.net/report.php?id=1447519288842
http://urlquery.net/report.php?id=1447519308680
http://multirbl.valli.org/lookup/199.233.237.219.html

No secure protocols supported
https://www.ssllabs.com/ssltest/analyze.html?d=mohitsahu.in

NS & SOA problems
http://www.dnsinspect.com/mohitsahu.in/1447519692

4

Vulnerabilities found here http://retire.insecurity.today/#!/scan/25f14ec205f99b452b4d950543d2be5f75be66871f3d60407afdb26562e1b6a6
SOA issues here http://dnscheck.pingdom.com/?domain=mohitsahu.in&timestamp=1447521513&view=1
Level 1 warning here http://urlquery.net/report.php?id=1447521709125 (level 1 is the highest level)
Possible cross scripting here http://www.domxssscanner.com/scan?url=http%3A%2F%2Fmohitsahu.in
Several scans showed problems http://push2check.net/mohitsahu.in (css check for one)

Please make your link unclickable by using hxxp.

edit: additional

5

Additionally to the insecurity reports by Para-Noid & Eddy’s you should consider the following insecurities flagged:

See for that code to be retired asap: -http://www.domxssscanner.com/scan?url=http%3A%2F%2Fwww.mohitsahu.in%2Fjs%2Fjquery-1.6.4.min.js
and
-http://www.domxssscanner.com/scan?url=http%3A%2F%2Fmohitsahu.in%2Fjs%2Fjquery.prettyPhoto.js

WARNING: Name servers software versions are exposed: http://www.dnsinspect.com/mohitsahu.in/1447522473
exploitable → https://www.cvedetails.com/vulnerability-list/vendor_id-2834/Powerdns.html
See abuse: http://www.projecthoneypot.org/ip_199.233.237.97

polonus