"This site can't be reached" error

Support
,
1

Hi guys,

The website (https://ozelprotocol.xyz/) that I have hosted with you throws a “This site can’t be reached error” on certain Internet Service Providers (with mine, it runs without issues).

The IT department of the company that I work with mentioned that you guys might want to run a virus scan on your servers, that if it’s a shared environment, it could be that someone else got their IP blacklisted. If that was the case, that you could swap my IP for another one.

Another solution that they proposed was to use CloudFlare to proxy the DNS zone.

Virustotal had some matches for my site: VirusTotal

Thanks for the help!

2
  1. https://ozelprotocol.xyz/ is resolving for me.
  2. We’d need the IP that is receiving “site can’t be reached” error to check if the IP is blacklisted.
  3. It’s not recommended to use Cloudfare or a similar service is used to Proxy to Netlify. Please see our guide here that outlines in more details.
3

It’s not in all sessions that the error is thrown. Check this one for example:

image
image2490×1102 164 KB

Everyone at my work get this error while on my personal computer, it runs without issues.

If you could tell me how to get the IP of the Netlify server that was assigned to my site, I’ll more than gladly get it for you (don’t know how to do that).

Did you see this where the URL is flagged as malicious: VirusTotal?

Thanks for the help.

4

I also get this error in my work computer, so I can do whatever instructions you need me to do in a device where the issue is replicable.

5

Hiya, @dnyrm just thought I’d weigh in on this issue

Like @SamO, the site is resolving fine for me. I think the issue is some sort of internal company firewall that is blocking the site. This isn’t surprising as these firewalls will typically scan a registry of malicious websites and block an employee from visiting any of the websites listed.

Your website is listed on 9 of these registries

I don’t think this is anything on the Netlify-end of things. Only way to fix this is either:

  1. Talk to your company IT team about whitelisting the website if it’s only really needed internally

  2. Make changes to your website so that it doesn’t allegedly resemble a phishing site

    • You could then contact each of the registries that have blacklisted your site and make a case that it isn’t a phishing website and shouldn’t be listed

Thanks,

6

It may be that they are attempting to access your site from a banned country. Where are they attempting to access the site from?

1 Like
7
  1. Talk to your company IT team about whitelisting the website if it’s only really needed internally

I spoke with them and the site is not visible not only on their work computers, but also in their personal ones (some of them tried to access them using their non-work laptops).

One even mentioned that their broadband flags the site with the warning: “We think this site may be fraudulent or contain virus […]”, and doesn’t let him access it without disabling the security settings.

Make changes to your website so that it doesn’t allegedly resemble a phishing site

How would that even work though? How does a website look like a phishing site? I just designed the site, without thinking to make it look like phishing, so I wouldn’t know what needs to be changed.

Thank you for your reply.

8

It may be that they are attempting to access your site from a banned country. Where are they attempting to access the site from?

From all over the world (remote company), but mostly USA and Europe.

9

As it’s the US/Europe, it’s unlikely the site is banned on geographical terms by the government. Perhaps the regional ISP’s have protections in place?

10

Having a quick look at the site it looks like a crypto wallet OAuth kind of app (Do forgive me if i’ve grossly overlooked). My guess is that these registries think you are phishing for peoples crypto credentials.

A splash page would better indicate what the app does instead of immediately taking the user to a sign in.

There are agencies your company will be able to contact who can troubleshoot and investigate why it’s flagged on so many registries.

To be clear, three of the registries mark it as “malicious” which is a higher security risk than “phishing”. Whatever detection system has reported your website believes it is a serious risk to user’s security.

Unfortunately, this really doesn’t look like anything the Netlify team could help with as it’s completely outside of their control.

Best wishes,

11

It does make sense that the website doesn’t work on the IT team’s personal devices.

  1. Tech-interested people are more likely to use stronger firewalls and browser protections on their personal devices
  2. The team will likely have a different ISP to you. Especially if they are located remotely across the world - as you explained
12

Thanks for the info.

It all makes sense.

1 Like