Why is vodafone blocking my website?

[jackhood9]

Hi,

My website https://ce-tech.info/

Is being blocked by vodafone, stating that it's an 18+ website (it's not 18+ at all!)

It works on wifi and O2 networks, but vodafone is giving an issue.

I have https enabled and SSL certificates (can be checked on 

Please can this be fixed 

[DanPeakBody]

Hello, our site is blocked as well - https://www.peakbody.co.uk

We're a sports supplements website and it works on all other networks and ISPs. When accessing from vodafone you initially get a man-in-the-middle ssl cert hijack from allot.com. Could you please look into this and disable it.

[Jason]

Hi @DanPeakBody. I've checked the URL in question using my mobile on the Vodafone UK network and have faced no issues - I was able to access your website. To double-check, is this affecting Vodafone broadband users, or those on the Vodafone network outside of the UK? 

Also, if you could pop over a screenshot of the issue, that would be great. 

[DanPeakBody]

Hiya, the reports we've seen it's affecting customers on their mobile device on mobile data.
We've also seen a video of someone attempting to visit our site and being redirected the "securenet" webpage. As you can see in the images attached, the site is being redirected and using the "allot.com" certificate and service which I believe powers your securenet.

And to clarify, we're a UK business and it's affecting our UK customers on vodafone.

[Jason]

Thank you for both the confirmation and screenshots @DanPeakBody. I've taken a look at the screenshots and I can see that they're from a user on Vodafone Spain (España), not Vodafone UK - this explains why I was able to access your website. You will need to advise the person who sent you them screenshots to get in touch with Vodafone Spain regarding this. I can confirm that Vodafone UK users can access the URL in question, it doesn't need reclassifying on our network.  

[DanPeakBody]

Hello, thank you for your help but this is not the case. I understand the certificate says madrid and spain but that is nothing to do with our customers accounts.

We have two seperate instances I have direct access to speaking to and I have just called both to confirm they are both on UK Vodafone personal accounts - seperate accounts taken at seperate times and completely independently. They both have UK numbers, UK contracts, and are accessing the website from the UK (specifically Washington, Tyne and Wear). Both have assured me that it's impossible for them to have Spanish accounts.

Additionally I have also seen other posts on this forum that include a similar certificate with spain listed for UK customers. That is simply a quirk of their (allot.com's) infrastructure.

[Jason]

Thank you for the additional information. Although I've tested the URL in question with other users on the Vodafone UK network without issue, for peace of mind and to investigate into why it's not affecting everyone on the network, I've raised this to our Network team - reference number INC000005311707. Once we've received an update @DanPeakBody, we'll let you know. 

[DanPeakBody]

Thank you Jason

[DanPeakBody]

Just to add some more verification to this case, last night we got more testing done with more people using Vodafone. Everyone with SecureNet on their account was being blocked and those that have disabled it were not.

So this is absolutely a securenet block in place, so could we please be whitelisted.

[Cynric]

@DanPeakBody Strangely Cloudflare returns "Sorry, you have been blocked" and I'm currently testing from another ISP.

https://radar.cloudflare.com/scan/6f89579e-0d5e-4f5e-856c-125caa586a89/summary

UPDATE: I also tested Cloudflare from my mobile (to rule-out my ISP being a cause) and it too got the same outcome.

[DanPeakBody]

Thanks @Cynric , without being overly specific it's not entirely unexpected from that test as we're strict on traffic from certain countries and automation, looking at our own cloudflare logs it looks to be the case. Though a bit interesting to see cloudflare block itself, I'll certainly look into it seperately.

We'll adjust our security to bare that in mind but this is still a false positive that needs direct intervention from vodafone to resolve. Thanks again for the information.