ClearCloud DNS Is Blocking Similarsites.com

c۞g
Posts: 21225
Joined: Mon Jan 05, 2009 4:02 am

RE: ClearCloud DNS

Post by c۞g » Wed Mar 30, 2011 9:14 pm

Great, now the Team can report publicly the what and the why for their determination.

OrOffer
Posts: 8
Joined: Sat Mar 06, 2010 2:25 pm

RE: ClearCloud DNS Is Blocking Similarsites.com

Post by OrOffer » Thu Mar 31, 2011 12:08 am

Hi,
i am the CEO of SimilarGroup , we operate Similarsites.com.
Thank you so much for your help with solving this issue.
i really don't know what they talking about ...
it look like it all start because a company named clean-mx form Germany,
http://support.clean-mx.de/clean-mx/viruses.php?domain=similarsites.com&sort=first%20desc
http://support.clean-mx.de/clean-mx/viruses.php?email=abuse@ee.net&response=alive
I am still trying to find out why they decided to mark our site has virus

Best,
Or

c۞g
Posts: 21225
Joined: Mon Jan 05, 2009 4:02 am

RE: Clean-MX

Post by c۞g » Thu Mar 31, 2011 4:32 am

Never bothered to check similarsites.com with them.
From your links, the incident marked alive appears to be the reason ClearCloudDNS blocks the domain for this file:
hxxp://www.similarsites.com/similarweb/download/similarwebie.exe

VirusTotal results: [url=http://www.virustotal.com/file-scan/report.html?id=a27d55e33e45fa3455cbdb62ba02ec7a845afae3ff3b74b2d252c8a43141649b-1301527164 t=_self]21 /43[/url]
This however is not Malware but results label as [url=http://en.wikipedia.org/wiki/Adware t=_self]Adware[/url]
You'll have to get white-listed with each AV vendor appearing in the VT results, which might require removal of user tracking and advertising

Curious, I downloaded the [url=https://addons.mozilla.org/en-US/firefox/addon/similarweb-sites-recommendatio/ t=_self]Firefox version[/url] of the toolbar:
http://releases.mozilla.org/pub/mozilla.org/addons/10548/similarweb_find_the_best_sites_on_the_internet-1.2.06-fx.xpi
Having [url=http://www.virustotal.com/file-scan/report.html?id=7e649c92b6dbee468f166d45a48e3b3e6ece41000a257c813b3cbc1a3a16bf23-1301542554 t=_self]0 results from VirusTotal[/url]

Which leads me to question antivirus vendor reliability.
IF an AV flags a Windows executable (Internet Explorer add-on) they should also flag other file formats of the same version / software.

OrOffer
Posts: 8
Joined: Sat Mar 06, 2010 2:25 pm

RE: ClearCloud DNS Is Blocking Similarsites.com

Post by OrOffer » Thu Mar 31, 2011 7:50 am

Hi g7w ,
the funny thing about that is that SimilarWeb is one of the most poplar Add-ons on Mozilla platform, with more then 2M downloads, and we being choosing by Mozilla to be one of the Featured addons on there platform.
https://addons.mozilla.org/en-US/firefox/addon/similarweb-sites-recommendatio/

So believe me that our product is safe and clean

Best,
Or

c۞g
Posts: 21225
Joined: Mon Jan 05, 2009 4:02 am

RE: Mozilla downloads

Post by c۞g » Thu Mar 31, 2011 8:16 am

It appears that AV vendors do not check .XPI files, but they do check .EXE files - Internet Explorer add-ons.

It's the IE installer that is being detected as "adware" - whether there are advertisements or not, the point is you (the vendor) need to contact each AV vendor and have them place this file (MD5 hash) in their "white list" (and any future update where the file hash changes) - when VirusTotal reports 0 results, Clean-MX will consider "closed / dead" and ClearCloudDNS will lift the ban / block on the domain to their users.

I do not believe WOT would partner with any site that would jeopardize any user's Internet / browser experience, but then again, it's not "what I think" that counts, it what the antivirus vendors "think" :)


Post Reply

Who is online

Users browsing this forum: No registered users and 4 guests