"Contains malicious content"

  • 28 January 2014
  • 2 replies

Hi.  One of our customers reports that one of our sites displays a webroot warning message:
{site url}
(Contains malicious content)
This website contains a known threat and has been blocked
How do I find out what the threat is?  I have scanned the contents of the site and reviewed html source, and nothing seems amiss.  It's an archived site that hasn't been touched in about 6 months.

2 replies

Userlevel 7
Badge +35
Hi robbrandt,
You can submit the URL in question to our URL reputation service for more information on why the warning is appearing.
To validate that there is nothing malicious on the site and request a URL reputation change, you can simply fill out this form: http://www.brightcloud.com/support/repchangerequest.php
The team will then work with you to get the reputation where it needs to be.
Please let us know if you have any additional questions.
Thanks.  In the meantime I took a wild guess that the animoto.com video player was causing the problem, and disabled it.  The customer reports that the warning has gone away.
I tried putting in our address in your form afterwards and it checks out OK.  However I also tried putting the animoto.com URL as well (embed.animoto.com) and is passes too, although it fails on other services: