d #156

New Issue

Closed

opened 2024-04-17 03:04:02 +02:00 by Ghost · 3 comments

Ghost commented

2024-04-17 03:04:02 +02:00

Is there an existing issue for this?

I have searched the existing issues

Affected Commit or Release

It's the website.

Description of Issue

I realize there's no danger, and that maybe nothing can be done about it, but just wondered if anyone should/could check if the domain has been put on a blacklist of some kind.

Expected Behavior

Not being flagged as suspicious.

Reproduction Steps

I'm using Win10, Firefox and BitDefender, just visiting the site like normal. It started happening only in the last few days. Not sure what other steps to suggest here.

Log File

none

System Configuration

Not applicable?

### Is there an existing issue for this? - [x] I have searched the existing issues ### Affected Commit or Release It's the website. ### Description of Issue I realize there's no danger, and that maybe nothing can be done about it, but just wondered if anyone should/could check if the domain has been put on a blacklist of some kind. ### Expected Behavior Not being flagged as suspicious. ### Reproduction Steps I'm using Win10, Firefox and BitDefender, just visiting the site like normal. It started happening only in the last few days. Not sure what other steps to suggest here. ### Log File none ### System Configuration Not applicable?

Ghost added the

bug

label 2024-04-17 03:04:02 +02:00

Ash882 commented

2024-04-20 22:18:55 +02:00

It has also been flagged by quad9

Reported the website as a false positive and they told me that "some of our automated systems flagged the IP's [...] as suspicious" and that it "typically happens if a new website has been stood up and is using an ip address from a pool of IP's that may have in the past been compromised or intentionally hosting malware.".

However they said they will remove the domain from the quad9's blocklist but that it may be flagged again by their automated systems.

I think something with the suyu website makes it appear suspicious.

It has also been flagged by [quad9](https://quad9.net/result/?url=suyu.dev) Reported the website as a false positive and they told me that "some of our automated systems flagged the IP's [...] as suspicious" and that it "typically happens if a new website has been stood up and is using an ip address from a pool of IP's that may have in the past been compromised or intentionally hosting malware.". However they said they will remove the domain from the quad9's blocklist but that it may be flagged again by their automated systems. I think something with the suyu website makes it appear suspicious.