Indonesia Website Infected

Dear All,

Would you please help to validate whether for this link URL has been infected by malware?
You may visit to : hxxp://www.depotplumpang.com

And please find another web scanner vendor report :
https://anubis.iseclab.org/?action=result&task_id=17e505d2c412d1e34a5d21159ed270867&format=html#chapter1
http://www.urlvoid.com/scan/depotplumpang.com/
http://sitecheck.sucuri.net/results/www.depotplumpang.com
https://www.virustotal.com/en/url/15699dd099d46074938908766d23281ce070e88102629a013c2061f3e0a21213/analysis/
http://trafficlight.bitdefender.com/info?url=http://depotplumpang.com
http://app.webinspector.com/public/reports/21858911

Some of report shown this website have a good reputation and clean from malware. But avast block this website it’s because of Malware form injection in the website.

See here: http://dnscheck.pingdom.com/?domain=depotplumpang.com
Avast! blocks this site because the nameservers are ns1.afraid.org. etc.
As soon as the site owner steers away from using afraid dot org,
the site might become unblocked, sometimes as soon as with a coming update.
Quote from avast! team’s Milos on a similar occasion (with malware) :

Either your DNS host (afraid.org) allows creation of subdomains for other persons, or your passwords were stolen or the DNS host itself was hosted, but your domain was clearly used for malicious purposes and was blocked.
Any domain hosted on afraid.org can be used by other persons for dns hosting without your control. It happened for your domain, it was misused for malicious purposes - in that case, when nobody has control on subdomains of domain (DNS hijacking), we block the whole domain in order to protect our users. For you, the solution is most probably only changing the dns hosting and letting us know later.
via use contact from http://www.avast.com/contact-form.php

Apart from all this consider these insecurities and warnings found up here: https://asafaweb.com/Scan?Url=www.depotplumpang.com

polonus

Hi Polonus,

Many thanks for your sharing and information, it is true this customer have a problem with their DNS because once we call this website by ip address (http://110.138.27.83) avast didn’t blocked the access.
I’ll let my customer to know about this information and many thanks for your help.

You are welcome, by the way this is not blocked: http://110.138.27.83/

polonus

Hi Polonus,

Yes indeed, if we call this website by public ip address it doesn’t block by avast.
Thank you so much Polonus.