Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I have a WordPress website hosted on Pagely.

When I searched for a string ending in .com, it triggered a security threat warning and my site was blocked. I raised an issue, but I got the following answer:

Yes, any URL string ending in a .com triggers our security as it could possibly be harmful. I understand yours is not but that's how our security is setup.

Given that most popular web sites have domain names ending in .com, why would a URL ending in .com be classified as potentially harmful?

share|improve this question

closed as off topic by Chris S Nov 28 '12 at 18:28

Questions on Server Fault are expected to relate to professional server, networking, or related infrastructure administration within the scope defined by the community. Consider editing the question or leaving comments for improvement if you believe the question can be reworded to fit within the scope. Read more about reopening questions here.If this question can be reworded to fit the rules in the help center, please edit the question.

    
You'd probably have better luck on IT Security –  DKNUCKLES Nov 28 '12 at 18:14
1  
Sounds like F.U.D. to me.. –  Tom O'Connor Nov 28 '12 at 18:16

2 Answers 2

Wild guess (you should be asking Pagely why they deem it's a risk to get the actual answer), it's probably because .com is a file extension that's used by windows for some types of executables. My hunch is that they don't want people hosting malicious files on their service and this is one method they're using to keep them out.

share|improve this answer

I think the concern is that .com is a holdover executable extension on Windows from the good 'ol DOS days, just like .exe is executable. The folks doing the filtering don't want end users to save executable files from the Internet for concern that they may be malicious files. See "Difference between .com, .exe, and .bat?" on StackOverflow.

share|improve this answer
    
I just tried to searching for a string ending in .exe and no problem. So far, it's just .com. –  Brajeshwar Nov 28 '12 at 18:29
    
It could be that they don't trigger on .exe, for whatever reason. –  joeqwerty Nov 28 '12 at 18:30
    
@Brajeshwar Then I guess they suppose that since .com is a holdover and .exe is contemporary that .exe can be legitimate. Just for grins, have you tried searching for .net? –  Jeff Ferland Nov 28 '12 at 18:30

Not the answer you're looking for? Browse other questions tagged or ask your own question.