URL:Mal on my website

Viruses and worms
1

Hello,

I’m really looking for help with my website (xxx.criss-colfer.fr)

I have an URL:Mal alert when I try to access it.

I ran several test :
https://www.virustotal.com/fr/url/a34d8b423c0d6c90331ecda9b2a3ff5c51b34b8c74ad76fb04cc0b0381006f23/analysis/1429286522/ => site is blacklisted on Yandex.
https://www.virustotal.com/fr/ip-address/69.65.12.58/information/ => there are other websites detected as malicious.
http://www.urlvoid.com/scan/criss-colfer.fr/ => it seems clean on this

I don’t know what to do…

Can anyone help, please ?

Thanks,
Lulu

2

You are using afraid.org as host … evrything from afraid.org is blocked

3

External domain links: http://criss-colfer.fr links to the following External Domains:
==>apis.google.com
==>s0.wp.com
==>stats.wp.com
==>0.gravatar.com
==>1.gravatar.com
==>fonts.googleapis.com
==>wp.me

Tracker(s) found:
google
wp
Gravatar

Site is being blacklisted by Yandex, but main reason for Avast blocking is

[b]Found all name servers. United States ns1.afraid.org. → 50.23.197.95 United States ns2.afraid.org. → 208.43.71.243 United States ns3.afraid.org. → 69.197.18.162 United States ns4.afraid.org. → 70.39.97.253[/b]

As soon as you steer away from afraid dot org your site may come unblocked, just report here: virus@avast.com

I cannot unblock as unblocking is done by avast team members.

polonus

4

See Milos post here https://forum.avast.com/index.php?topic=148018.msg1075293#msg1075293

5

Hi Pondus,

And if not for being on afraid dot org, site could also be blocked for PHISHing, re:
https://www.virustotal.com/en/url/a34d8b423c0d6c90331ecda9b2a3ff5c51b34b8c74ad76fb04cc0b0381006f23/analysis/1429287757
Flagged: htxp://criss-colfer.fr/?dm=6e55d6721d2e915347d0efeb970b14d4&action=load&blogid=3&siteid=1&t=1267362492&back=http%3A%2F%2Fchris-colfer.fr%2F

polonus

6

Thank you all for your help.

Franch legislation about .fr domain is really strict. This is why I add to use afraid.org to bypass it and get host with my actual host. I’ll see with them what I can do to get ride of afraid.org.

Polonus, what can I do about the PHISHing alert ?

Thanks,
Lulu

7

I changed the DNS, so my website is no longer using afraid.org.
But how can I be sure that my website is safe now ?

Thanks,
Lulu

8

see here: http://evuln.com/tools/malware-scanner/criss-colfer.fr/
and that seems clean now: http://killmalware.com/criss-colfer.fr/#
report at virus@avast.com and await their reaction,

polonus

9

Hi,
Thanks for confirmation - I am unblocking your domain now ;-)!
Honza

10

Thank you. :smiley: