03-02-2023 15:29 - edited 03-02-2023 15:30
I have some domains and website working. There are legal and I check them regularly. From yesterday I discovered that one of them is blocked under Cisco Umbrella, that it's a protection for OpenDNS, by my ISP (VirginMedia).
When I open the webpage https://foroarte.es I'm directed to and error screen and I can't unblock it because the block is made by Virgin. If I change my computer DNS to Google or CloudFlare DNS servers I can open the website, but it's impossible with the Virgin DNS that my Hub gives to every device. As any can check, there is a closed website, no phishing, no forms, no information collected. It's an static screen, but Virgin blocks it.
Are there any way to disable the block? I tried to contact the technical team but it's impossible to pass the filter of the customer service, that don't understand the issue, what is a DNS server or what is OpenDNS and Cisco Umbrella services.
Any help is welcomed.
Answered! Go to Answer
on 03-02-2023 17:43
on 04-02-2023 18:41
This thread was marked as resolved but I'm not so sure it is for VM customers ...
on 05-02-2023 15:08
For me using VM DNS servers is working fine and the security certificate doesn't have problems. Do you continue receiving the same screen?
on 05-02-2023 15:48
Using Chrome on my mobile via WiFi I see the website.
But using Edge or Firefox ...
on 05-02-2023 16:20
Thank you.
I'll try to detect where is the issue because it isn't a phishing place, I don't take any information of anybody.
05-02-2023 18:38 - edited 05-02-2023 18:38
@_Max_Power wrote:Thank you.
I'll try to detect where is the issue because it isn't a phishing place, I don't take any information of anybody.
There is some DNS confusion going on with your site. My connection (via BT) returns 188.164.198.## from nslookup and the page returns correctly via the url https://foroarte.es This appears to be a holding page (no login box).
The IP address from Roger_Gooner 91.142.212.## from VM DNS returns a not-secure warning "This server could not prove that it is 91.142.212.240; its security certificate is from foroarte2020.pruebas-evaluacion.es. This may be caused by a misconfiguration or an attacker intercepting your connection." This page shows a login box.
Other lookup sites have OpenDNS returning 146.112.61.### for foroarte.es
Alongside the DNS issues the website www.blocked.org.uk shows foroarte.es is blocked/filtered by
Vodafone (blocked for 18+ content)
Virginmedia (blocked malware)
OpenDNS Family Shield (returns a DNS error for an untrusted certificate, then Cisco Umbrella blocked for phishing)
CloudFlare Family DNS (blocks with 'This site can't be reached')
So you seem to have two ongoing issues, one with DNS and the other with reputational reporting for various security/AV providers which is causing content filtering to be applied in some instances.
on 05-02-2023 19:38
The right ip is 188.164.198.xx. the other IPs are a mistake. And yes, it's an static page without login, forms or links. It's only a warning that at this moment it's closed until this year version.
The some IP have some websites, it's a VPS with some domains and subdomains. I'll delete all the certificates in Plesk and generate it again, they use let's encrypt certificates.
Thank you for the information.