Avast WEBforum
Other => Viruses and worms => Topic started by: REDACTED on July 23, 2016, 05:03:18 PM
-
Can you please remove trafficleverlinks . com from the blacklist. I have scan it with all the tools referenced on this forum and it has come back clean. It is affecting other domains of mine on that ipaddress all of which are clean and are legitimate websites.
-
-> https://sitecheck.sucuri.net/results/trafficleverlinks.com
You can report a URL here: https://www.avast.com/report-a-url.php
-
It is affecting other domains of mine on that ip address all of which are clean and are legitimate websites.
Seems a very strong indication that is is a IP block.
Really bad IP history :
https://www.virustotal.com/en/ip-address/162.144.23.210/information/
Problems on that ASN :
http://urlquery.net/report.php?id=1469288062146
http://urlquery.net/report.php?id=1469287979660
TLS/SSl problems :
https://www.ssllabs.com/ssltest/analyze.html?d=www.trafficleverlinks.com
IP on multiple blacklists :
http://multirbl.valli.org/lookup/162.144.23.210.html
Vulnerable libraries used :
http://retire.insecurity.today/#!/scan/50a845c36015d295067b12330a163c9b8ae5a6aa47b60a334eadfe19ef2dd3a2
ADVISE :
- Fix the JQuery vulnerabilities.
- Get dedicated hosting (own IP).
-
Thanks guys. I removed the weebly website stuff that had the jquery stuff. Will redo it later. I did submit it to avast to remove. Before I go and get dedicated ip, I want to make sure it is the ip. Do not want this follow to new ip.
-
I removed trafficleverlinks[.]com from our blacklist ;)