Website blocked by avast (URL: Mal)

Viruses and worms
1

I hope I’m posting this in the right place, if not feel free to move it.

I’m the webmaster of summerquarter.net and it seems there is an issue with it. Avast blocks it with the message “URL:Mal”. The website is built with wordpress and I have recently updated to the newest version.

Could the issue be related to an installed plugin perhaps?

I’d be very happy if a kind soul would let me know what to do to fix this issue.

2

It is blacklisted at crdf

See www.virustotal.com

You may report it at support.avast.com → avast virus lab

3

But the website also come IP blocked.
As I see no Avast alerts on the code: -http://www.domxssscanner.com/scan?url=http%3A%2F%2Fsummerquarter.net
I guess it is the IP general block - ask for an exclusion from Avast team members, we are not so we cannot unblock,
that can only be done by Avast team members, mail virus@avast.com and refer to this thread.
Re: https://www.virustotal.com/nl/ip-address/46.30.212.27/information/
And this situation is not particularly helping you: http://sameid.net/ip/46.30.212.27/12/
(all bad apples in that Ip basket can cause a general IP block for you :o ).
PHP vulnerabilities: https://msisac.cisecurity.org/advisories/2015/2015-091.cfm
CMS Warnings:
Warning User Enumeration is possible
The first two user ID’s were tested to determine if user enumeration is possible.

User ID 1 : bjarteedvardsen
User ID 2 : None

Theme code - consider: http://wpseek.com/source/wp/latest/nav.html?wp-content/themes/twentyfourteen/functions.php.source.html

This has a known sink: https://wordpress.org/support/topic/jquery-migrate-vulnerability-or-false-alarm

polonus (volunteer website security analyst and website error-hunter)

4

Hello,
the domain will be unblocked in a next stream update (10 minutes).

Milos

5

Thanks a lot!

Will the software “remember” that it has blocked the site before and therefore might still keep blocking it when I visit the site again (which is what happened last time I tried)?

6

Thanks for helping out!

So let me get this straight, my website is being blocked because it has the same IP-address as other less trustworthy websites? What causes which IP-address the website gets in the first place? My choice of domain provider? (one.com)

I’m sorry, this is totally new territory for me.

Meaning, I could need this https://wordpress.org/plugins/stop-user-enumeration/ ?

7

Yes some hosters aren’t pro-active to help website-owners to get more secure.
Whenever money comes first and abuse on websites is silently condoned, you could have such problems,
a story of “the good, the bad and the ugly” (where the hoster is the ugly party there :wink: ;D ).

Your second question can be answered affirmatively, so you’d better!

I gave your site some plus for responsible website administration :slight_smile: at WOT (where my nick = luntrus):
https://www.mywot.com/en/scorecard/summerquarter.net#view

polonus

8

Delay
Fixed in an update released at the last moment yesterday (04/09/15)
you have VPS stream update current,not is more being blocked by Avast.