Website on the Allow list but still blocked

[Ciaran]

Hi,  

I have a website that, when I vist, it sasy it is blocked due to Malware.

https://theoff.com.au

 

I have placed it on the Allow List, both as IP and URL.

However it is still blocked.

I contacted my host provider thinking it was theri issue; they responded witht the follwoing;

"We have been monitoring the server your site is hosted on and it has not had any downtime within the last 5 days.

It looks like your IP (101.174.131.154) may have been automatically blocked. I have now added it to the server whitelist.

Please try to access your site now, you may need to clear your cache."

I cleared the cache and the issue is still there. 

I ran the support tool and zip is attached. 

Thanks in Advance

Ciaran

mbst-grab-results.zip

Edited May 14 by AdvancedSetup
Disabled hyperlinks

[Porthos]

@Ciaran 

1 hour ago, Ciaran said:

have placed it on the Allow List, both as IP and URL.

However it is still blocked.

You did not enter the correct IP. You need the IP of the website, not your IP. See below.

 

-Website Data-
Category: Trojan
Domain:
IP Address: 67.23.226.119
Port: 443
Type: Outbound
File: C:\Program Files\Mozilla Firefox\firefox.exe

 

-Website Data-
Category: Malware
Domain: theoff.com.au
IP Address: 67.23.226.119
Port: 443
Type: Outbound
File: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

 

 

 

Edited May 14 by Porthos

[AdvancedSetup]

Your post was moved to the False Positive forum for review by the Research team

 

[AdvancedSetup]

So the IP is blocked Along with dozens of URLs still detected also dozens of files still detected as well

https://www.virustotal.com/gui/ip-address/67.23.226.119/relations

 

It might be best to work with your hosting provider to see if they can move you onto a cleaner Server