Website blocked with URL:Mal msg

Viruses and worms
1

My website http://www.superfactura.com.ar/ and subdomains are getting blocked by avast
I’ve checked it with sucuri, virustotal, antiabuse.org, etc and all of them show no problems

Can somebody help me to solve this issue?
thanks!

2

See errors problems here: http://dnscheck.pingdom.com/?domain=www.superfactura.com.ar&timestamp=1409152993&view=1
Your domain is not in Namespace!

The DrWeb URL check results:
Checking: https://www.google.com/jsapi?key=UA-5821663-4
File size: 23.98 KB
File MD5: a1cf38da62b2345962e9b7ae877c3486

https://www.google.com/jsapi?key=UA-5821663-4 - Ok

Checking: https://ajax.googleapis.com/ajax/libs/jquery/1.4.2/jquery.min.js
File size: 70.48 KB
File MD5: 10092eee563dec2dca82b77d2cf5a1ae

https://ajax.googleapis.com/ajax/libs/jquery/1.4.2/jquery.min.js - archive JS-HTML

https://ajax.googleapis.com/ajax/libs/jquery/1.4.2/jquery.min.js/JSTag_1[aded][6c01] - Ok
https://ajax.googleapis.com/ajax/libs/jquery/1.4.2/jquery.min.js/JSTag_2[d2f4][46fa] - Ok
https://ajax.googleapis.com/ajax/libs/jquery/1.4.2/jquery.min.js - Ok

Checking: htxp://www.superfactura.com.ar/
Engine version: 7.0.9.4080
Total virus-finding records: 5432787
File size: 2676 bytes
File MD5: 0ed200fa70edeca03595d58447f7fada

htxp://www.superfactura.com.ar/ - archive JS-HTML

htxp://www.superfactura.com.ar//JSTAG_1[1fb][1f5] - Ok
htxp://www.superfactura.com.ar/ - Ok

polonus

3

Domain Doctor report: https://manage.centralnic.com/support/domain_doctor/superfactura.com.ar
concluded with errors.

Now you can conclude why avast has blocked your website, because it is hosted at afraid dot org.
Steer away from afraid dot org and report to avast and they may come to unblock the site.
I cannot because I am not an avast! team member and only these may unblock.
I just analyze websites here “for the good of my soul and acquire knowledge and insight I may use elsewhere”.

polonus

4

Blacklisted by: dnsblchile
http://multirbl.valli.org/lookup/200.123.173.153.html

No hosts associated with it:
http://bgp.he.net/ip/200.123.173.153

Timed out and 404:
http://maldb.com/www.superfactura.com.ar/

Hosted at… AFRAID.ORG:
http://toolbar.netcraft.com/site_report?url=http%3A%2F%2Fwww.superfactura.com.ar

Read this:
https://forum.avast.com/index.php?topic=153800.msg1118228#msg1118228

5

Hoi Eddy, je was me een fractie van een seconde voor.
Wel hij heeft nu de boodschap wel begrepen, denk ik.

groetjes,

Damiaan

6

Polonus, Eddy, thanks for your valuable answers.
I’ve managed to modify the PTR records so it’s ok right know… just need avast to remove this site

thanks!

7

Looks like you did not read or understood the “read this” in my previous reply.
You are still using afraid.org

As Milos said:

To your case: Any domain hosted on afraid.org can be used by other persons for dns hosting without your control. It happened for your domain, it was misused for malicious purposes - in that case, when nobody has control on subdomains of domain (DNS hijacking), we block the whole domain in order to protect our users. For you, the solution is most probably only changing the dns hosting and letting us know later.
8

Eddy, we have recently changed that. We are no longer using afraid.

thanks!

9

Looks like there still are problems:

http://dnscheck.pingdom.com/?domain=www.superfactura.com.ar
http://www.dnsstuff.com/tools#dnsReport

Everything else looks ok now.
Use the contact form and ask avast to unblock the url.

10

Hi, This website was unblocked 11.09., 13:17 CEST, so I hope all is good now :slight_smile: