api.webtor.buzz blocked by Cloudflare Malware Blocking DNS (1.1.1.2 and 1.1.1.3)

[quinncomendant]

webtor.io is not working. I'm getting net::ERR_NAME_NOT_RESOLVED errors in the console logs. It seems the problem is because api.webtor.buzz is blocked by my DNS host, 1.1.1.3:

❯ host api.webtor.buzz
api.webtor.buzz has address 0.0.0.0
api.webtor.buzz has IPv6 address ::

I have reported this false positive to Cloudflare's NetOps team (done here: https://report.teams.cloudflare.com/) as categories P2P and File Sharing:

Since this is not guaranteed to get a response, you might consider using an alternate domain or IP addresses directly.

[vintikzzz]

Ok, I've done as you suggested.

[metal1one]

turned off defender and antivirus and still getting the error. Anything else needed to be done to get website working again?

[vintikzzz]

@metal1one may I ask you to check network panel in Google Chrome developer tools and check network panel?
I have attached screenshot of successful result.

[metal1one]

[vintikzzz]

@metal1one just visit https://api.webtor.buzz/ directly and make a screen of an error. And also copy your DNS servers ips...

[metal1one]

@metal1one just visit https://api.webtor.buzz/ directly and make a screen of an error. And also copy your DNS servers ips...

Yeah, it appears it is being blocked by whatever DNS my ISP is giving me... changing to googles dns servers and it works.

[quinncomendant]

Yeah, Cloudflare malware-blocking DNS (1.1.1.2) is still blocking api.webtor.buzz. You can test this on the command line by running dig @1.1.1.2 api.webtor.buzz +short and if the output is 0.0.0.0 it is blocked:

❯ dig @1.1.1.2 api.webtor.buzz +short
0.0.0.0

If you're on linux or mac, you can just add the correct IP address to your /etc/hosts file, which supersedes DNS:

138.201.33.57 api.webtor.buzz

You can help by submitting a request to reclassify api.webtor.buzz with the Cloudflare NetOps team:

1. Open https://report.teams.cloudflare.com/
2. Select P2P and Fire Sharing
3. Deselect Malware
4. Submit

[vintikzzz]

I am thinking about rotating domains for API (they are quite cheap nowadays). But I don't know how fast my domains would get blocked... I am afraid if these blocks are performed automatic, I would not be able to rotate it with appropriate speed...