Website reported as blocked for URL:Mal, report false infection?

Viruses and worms
21

Wat message is avast giving you ? (screenshot)

Suspicious (possibly malicious) :
https://quttera.com/detailed_report/www.espanholparaviagem.com

Issues on that ASN :
http://urlquery.net/report.php?id=1474702349281

Vulnerable library used :
http://retire.insecurity.today/#!/scan/c44362f50116f6ee223f0c0fb4fc4f79977b64ca5ae5acacacfeec6c06237db1

Wordpress issues :
WordPress Version 4.5.4
Version does not appear to be latest 4.6 - update now.

Warning User Enumeration is possible
The first two user ID’s were tested to determine if user enumeration is possible.
ID User Login
1 None admin
2 None dx2brasil

22

Suspicious > http://www.UnmaskParasites.com/security-report/?page=www.espanholparaviagem.com/oferta3/

23

IP 198.199.66[.]75 (which espanholparaviagem[.]com points to) was blocked in March due to CSRF attack coming from it.
I have now unblocked it.

24

Being on SSL via CloudFlare with a Let’s Encrypt Authority 3 Certificate is no reason for not implementing security headers,
see the meagre F-Status found here: https://securityheaders.io/?q=www.espanholparaviagem.com&followRedirects=on

Relying simply on a cdn solely for keeping your website secure, is not enough.

Also tackle the following issues. see: https://mxtoolbox.com/domain/www.espanholparaviagem.com/

polonus (volunteer website security analyst and website error-hunter)

25

need help ASAP .

One year , our company purchased the domain yyw[.]com as our company page .

but too many custermers repokrted as blocked for URL : Mal .

pls check and process for us .

my email : admin@yyw.com or 1398630@qq.com

26
27

thanks !

i will check now

28

Hello,
detection of yyw.com was disabled.

Milos

29

We are having this issue also. Our company purchased allegiantcare.com a few years ago and avast users report our domain gets blocked for blacklisting. Can you please remove allegiantcare.com from your blacklist?

30

Site is not even loading and avast doesn’t give a alert when trying to load the site.

Blacklisted :
https://www.virustotal.com/en/url/fedaa175143a03d4493bf8721b4515610f51141453ce3ed2e96ca35977839b11/analysis/1498143939/
http://www.urlvoid.com/scan/allegiantcare.com/
https://sitecheck.sucuri.net/results/allegiantcare.com
https://www.virustotal.com/en/ip-address/71.245.183.172/information/

Wordpress issues :
Warning User Enumeration is possible
The first two user ID’s were tested to determine if user enumeration is possible.
ID User Login
1 sjunker sjunker
2 None

Warning Directory Indexing Enabled

Certificate issue :
https://www.ssllabs.com/ssltest/analyze.html?d=allegiantcare.com

Very likely also vulnerable libraries are used.

31

allegiantcare.com >> BLACKLISTED X 3
https://virustotal.com/en/url/fedaa175143a03d4493bf8721b4515610f51141453ce3ed2e96ca35977839b11/analysis/1498143939/

and as said, site does not load, see screenshot http://urlquery.net/report.php?id=1498142085520

32

https://yandex.com/infected?l10n=en&url=allegiantcare.com&redircnt=1498144545.1
Issues for more than 24 hours.

33

Strange that it is not loading because we have customers on it all day and it is working for me off site.
I have contacted yandex and they have cleared my site but I guess it’s not updated.
I contacted the other too but have not heard back from them expect for sucuri, they want money to remove me. That doesn’t seem right. Is there anything else I can do?

34

You could start with fixing the Wordpress issues and the certificate issue.

35

allegiantcare[.]com is unblocked since yesterday, 17:42 CEST, but I strongly suggest following advice of other people commenting on this issue.

36

No direct threat coming from website, so it was unblocked by Avast Team: http://urlquery.net/report.php?id=1498213066446

However for the Word Press settings User Enumeration and Directory Listing should be set disabled.

The server at Verizon’s is set to speak too loudly Server: Apache/2.4.23 (Win64) OpenSSL/1.0.2j PHP/7.1.2
X-Powered-By: PHP/7.1.2 (excessive server info proliferation, we call this issue). PHP also can be’ a can of worms’ (vuln.).

For this external link we see a secure cookies warning, clickjacking warning and a http to https warning: https://asafaweb.com/Scan?Url=go.microsoft.com%2Ffwlink%2F%3Flinkid%3D66138%26clcid%3D0x409 - was on: https://aw-snap.info/file-viewer/?protocol=secure&tgt=accreditnet2.urac.org&ref_sel=GSP2&ua_sel=ff&fs=1 (hhtp blocked for shared hosting)!

Suspicious urls with this external link: https://aw-snap.info/file-viewer/?protocol=not-secure&tgt=www.surveymonkey.com&ref_sel=GSP2&ua_sel=ff&fs=1 with particular issues and warnings here: https://asafaweb.com/Scan?Url=https%3A%2F%2Fwww.surveymonkey.com

So you have issues for the website and you have to take up certain proliferation issues with provider Verizon’s (not maintaining best policies because of incompetence, not being interested to tackle issues or other factors, which is not offering you the best of infrastructure, a shame really but what can we do when regulators turn a blind eye and commerce rules big time ;).

polonus (volunteer website security analyst and website error-hunter)

37

Hi, i need help please!!

My website is block with URL:Mal by avast, how i resolve it?

Thansk

38

which website? Post a link here or at least a printscreen of the detection :wink:

39

We are in the same boat - I have numerous clients reporting our site is unsafe, but as the IT Director, of app.espace.cool - I can guarantee we are safe and behind a secure firewall at LiquidWeb. It’s really starting to impact our business. We serve many large churches in the US and they are soon going to be moving to other anti-virus software if we can’t get someone from Avast to answer our false detection report. I’ve seen in 3 separate emails and even called. Was told someone would call me right back… that was 3 days ago… still waiting. PLEASE HELP!

40

You can report a URL here: https://www.avast.com/report-a-url.php