Why avast blocking my website cuaca.co.id?

system · 2017-03-07T02:23:44.000Z

I post in here caused I have problem, caused if I open https://www.cuaca.co.id in smartphone or in desktop avast appear block my website.

I tried scan but no malware in my site and I add https in my site:

https://virustotal.com/en/url/ce6e7217891dc585957f721fd7c236400ed413423c0d8ce96eae1947d669fe20/analysis/1488852204/
http://www.urlvoid.com/scan/cuaca.co.id/
https://safeweb.norton.com/report/show?url=cuaca.co.id

please help me.
Cheers

Asyn · 2017-03-07T06:04:21.000Z

→ https://sitecheck.sucuri.net/results/www.cuaca.co.id/

Eddy · 2017-03-07T09:15:46.000Z

Blacklisted :
https://www.websicherheit.at/website-malware-viren-scanner/?url=www.cuaca.co.id
https://sitecheck.sucuri.net/results/www.cuaca.co.id

Multiple blacklistings on that AS :
https://www.virustotal.com/en/ip-address/104.27.175.84/information/
http://urlquery.net/report.php?id=1488877018158

Suspicious :
https://www.virustotal.com/en/url/a93b17443c00e323b93aa15df2dbf7dc5565c71963582abf9fb073ad9c48f540/analysis/1488877809/
https://quttera.com/detailed_report/www.cuaca.co.id

Vulnerable libraries used :
http://retire.insecurity.today/#!/scan/00cd25a0e9d73280193e83db337411e9f2858a8bce8b0ad55e7b9129057d2f28

polonus · 2017-03-07T12:41:07.000Z

I do not have a crystal ball to see why the website has been blocked by avast. Only an Avast Team Member can tell us and also whether it will be unblocked by him, as we cannot as we are just volunteers with relevant knowledge.

The blacklisting seems unlikely as it is an old McAfee blacklisting, that not even Google Safebrowsing has now.

More likely there is a block because of mail servers that have inconsistent reverse DNS entries (the word of the game SPAM block).

Connect to Mail Servers FAIL: Connection to all mail servers failed. -dc-5dc711c9.cuaca.co.id.: dial tcp -45.63.93.149:25: getsockopt: connection refused To receive emails, mail servers should allow TCP connections on port 25.

and

Reverse Entries for MX records WARNING: Found mail servers with inconsistent reverse DNS entries. You should fix them if you are using those servers to send email. Server IP PTR (Reverse) IPs dc-5dc711c9.cuaca.co.id. 45.63.93.149 45.63.93.149.vultr.com. ? All mail servers should have a reverse DNS (PTR) entry for each IP address (RFC 1912). Missing reverse DNS entries will make many mail servers to reject your e-mails or mark them as SPAM.
All IP’s reverse DNS entries should resolve back to IP address (IP → PTR → IP). Many mail servers are configured to reject e-mails from IPs with inconsistent reverse DNS configuration.

polonus

LukasJ · 2017-03-08T21:25:10.000Z

The URL was blocked in 2013.
Now it has been removed from blacklist.

Announcements