Skip to main content

WordPress Plugin - websitebuilder-demo.net URL is blocked due to Malware

Kaust Digital Team

We have using Brizy WordPress plugin and not functional as per the network security it got blocked due to malware issue as the url filter which is websitebuilder-demo.net. You can see the report from https://urlfiltering.paloaltonetworks.com/ and https://www.virustotal.com/gui/home/upload - Can you please review the website and we can use the Pro plugin which we brought last week.




0

Comments

15 comments

Date Votes
  • Ariel H.

    Hi,

    Thank you for bringing this to our attention.  I’ve passed this along to our team for review and will update you as soon as I have more information.

    Kind regards,
    Ariel H.

    0
  • Kaust Digital Team

    @Ariel - Any updates on this?

    0
  • Ariel H.

    Hi,

    Apologies for the delay. We've completed a thorough cleanup to ensure our template site is free from malware and have submitted requests to both Palo Alto Networks and VirusTotal to remove websitebuilder-demo.net from their blacklists. It may take a little time for the site to be fully cleared.

    In the meantime, if you're trying to preview the templates, you can temporarily view them here: https://www.brizy.io/templates

    We'll keep you updated with any progress.

    Best regards,
    Ariel H.

    0
  • Kaust Digital Team

    Hi Ariel - Thanks for the update. We rescanned and the issue is same. Is it possible to move the cloned templates to our WordPress stack - Please advice.

    0
  • Ariel H.

    Hi,

    Thank you for the update.

    At the moment, it's not possible to move the cloned templates to the WordPress stack. However, please rest assured that we're actively reaching out to the blacklisting site to request that our template site be delisted. We'll keep you updated as soon as we have any news. Sorry for the inconvenience.

    Kind regards,
    Ariel H.

    0
  • Kaust Digital Team

    Hi Ariel,

    It's been a week. Any updates on removing blacklisting?

     

    0
  • Ariel H.

    Hi,

    Thank you for keeping in touch.

    We’ve already reached out to the blacklisting sites regarding the issue, and we did receive a response from them. However, our site has not yet been removed from their blacklist.

    We will follow up with them again, unfortunately, this process may take some additional time. 

    Best regards,
    Ariel H.

    0
  • Kaust Digital Team

    Hi Ariel,

    Any progress - Once Palo Alto Networks unblock, we can start using in our network as our security settings are based on that.

    0
  • K C George

    Hello

    A few times, we have requested Palo Alto Networks to take another look at the malware tag attached to the websitebuilder-demo.net.  We haven't heard back favorably from them as of yet.  There is little we can do if they refuse to relook at it.

    We use this URL to show the preview of the design templates that come along with Brizy. You have the option to preview the design templates also at https://www.brizy.io/templates If Palo Alto Networks does not respond favorably, would this be a solution? Can you give us more details on how this block affects your projects? 

    0
  • Kaust Digital Team

    Hi George,

    Thanks for the update - we are using WordPress and our university firewall is managed by Palo Alto Network settings - Apart from previewing we to start the design from WordPress it self as shown in the below image and as per security team - they advised us to contact you to remove the vulnerabilities.

    0
  • K C George
    • Edited

    Hello there,

    To fix this issue, we should whitelist your webserver IP address in our Firewall. Your URL https://gbcwp.kaust.edu.sa/ does not resolve correctly and gives the following error. 

    I did a DNS lookup of your root domain, https://kaust.edu.sa/ and it shows that your website is hosted on a webserver with the IPs 45.223.20.138 and 45.223.22.138

    Can you confirm if the domain https://gbcwp.kaust.edu.sa/ is also hosted on the same web server? Once we get a confirmation from you, we can white list these two IPs.

    0
  • Kaust Digital Team

    Hi George,

    Thanks for looking into DNS. Actually this is for internal purpose testing and https://gbcwp.kaust.edu.sa is not publicly available on the internet. For internal we have a different IP range and this will not help on whitelisting. Best approach is to whitelist from Palo Alto Network

    0
  • K C George

    Hello there,

    Brizy Starter Templates allow users to import a complete, ready-to-use website (including content, plugins, and settings) from an external server to your WordPress site. To use the starter template feature, your webserver must be connected to the internet and must have a public IP.  Since your test site is not publicly available on the internet, the Starter Template feature will not work for this specific site.

    0
  • Kaust Digital Team

    @George - Even if we publish to the internet, the firewall is at Palo Alto network on different range with their CDN and we already checked wit IT security. So whitelisting from Palo Alto network is the only option and we request you to keep following up.

    Is there any other way export from Brizy cloud and import to Wordpress brizy plugin?

    0
  • K C George

    Hello there,

    The Palo Alto network will block the preview URL if you preview a stater template. Please do not preview a template before importing it.

    Kindly tell us what happens when you try to import a Brizy Stater Template (without previewing it) to a website which is connected to Internet and has a public IP? Share a screenshot if you see an error.

    0

Please sign in to leave a comment.

Didn't find what you were looking for?

Ask a Question