I found out my domain is on blacklist, I’m going to use it again… it was sitting for a long time.
Considered a Low Risk here - https://sitecheck.sucuri.net/results/krules.net - but with hardening improvements suggested.
A small number of other scanners detect it - https://www.virustotal.com/gui/url/aa8fe05ad2004466d543576b784006479b0cdf39b6e905b51ff37358dd79d92d?nocache=1 -
Some other security pointers mentioned here - https://en.internet.nl/site/krules.net/2828203/
Whilst these may not be why Avast alerts - but the above could help bring it up to date.
Possible False Positive - New location to report both a False Positive and or a False Negative - https://www.avast.com/submit-a-sample#pc
A WordPress security scan shows you do not have the latest version of WP.
User enumeration (ID 1) not being disabled: It is recommended to rename the admin user account to reduce the chance of brute force attacks occurring. This will reduce the chance of automated password attackers gaining access. Take note that if the author archives are enabled, it is usually possible to enumerate all users within a WordPress installation.
Tackle these issues and then consider: https://quttera.com/detailed_report/krules.net and you are good to go.
Also consider the vulnerabilities at the hosting party - https://www.shodan.io/host/51.81.113.65
polonus