Jump to content

ESET Endpoint is blocking a web site with the message Potentially unwanted content found


Recommended Posts

Eset is blocking a website and i checked the website in www.virustotal.com and it is clean.

The message is Potentially unwanted content found. I do not want to disable PUA so i want to know if there is way i can add an excepction only for this website.

 

Link to comment
Share on other sites

  • Administrators

What website is it? Whether it was compromised cannot be 100% determined via the VirusTotal service.

Link to comment
Share on other sites

2 hours ago, Marcos said:

cannot be 100% determined via the VirusTotal service

Can you explain why, please?

i would say if some other 75 vendors determined that a website is safe , than it is safe.....

Link to comment
Share on other sites

  • Administrators
1 hour ago, total said:

i would say if some other 75 vendors determined that a website is safe , than it is safe.....

First of all, the url check feature checks a website against blacklists only. It does not scan actual files on websites. To check actual web content, run a Quttera scan instead.

Link to comment
Share on other sites

Hi Marcos, Thanks for your reply. The web site is hxxp://dutyfreeholding.com/

I want to know why ESET is blocking that website? Could you help me with that.? What is the reason?

I scan the website with Quttera scan as you suggested and it is clean.

Normalized URL:

 https://dutyfreeholding.com/

Last scan date:

 5/5/2022, 12:30:27 PM

Current status:

 Clean
Link to comment
Share on other sites

7 hours ago, FJCZ said:

I want to know why ESET is blocking that website?

Firefox also blocks the website; reason dutyfreeholding.com uses an invalid security certificate. The certificate is not trusted because it is self-signed.

Link to comment
Share on other sites

22 hours ago, Marcos said:

the url check feature checks a website against blacklists only

You are right, but the "black list" was generated after the website was analyzed.

Link to comment
Share on other sites

  • Administrators

Not all websites that contain malware are blacklisted. For instance, we cannot blacklist gmail just because users receive malware in a gmail mailbox.

Link to comment
Share on other sites

Ok, right now who is blocking the Website is ESET because of PUA. I want to know the reason ESET is blocking the website. There is a way i could be able to know the reason? I checked the url with the web page that you recommended Quttera scan  and the url is clean.

how can i open this website if ESET is not removing the website? I do not want to disable completely PUA.

Link to comment
Share on other sites

  • Administrators

The site has been unblocked since the malware has been removed.

Link to comment
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.
Note: Your post will require moderator approval before it will be visible.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

 Share

  • Recently Browsing   0 members

    • No registered users viewing this page.
×
×
  • Create New...