Author Topic: How to remove my website from your blacklist?  (Read 76861 times)

0 Members and 1 Guest are viewing this topic.

Online polonus

  • Avast Überevangelist
  • Maybe Bot
  • *****
  • Posts: 29842
  • malware fighter
Re: How to remove my website from your blacklist?
« Reply #15 on: December 09, 2014, 01:40:38 AM »
Sucuri still has iFrame malware detected: http://www.uploady.com/#!/download/VeJkIgvyeR6/OltbIVltZUVrL3IP

polonus
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Offline digitalconsult

  • Newbie
  • *
  • Posts: 1
Re: How to remove my website from your blacklist?
« Reply #16 on: December 20, 2014, 09:12:24 AM »
please remove this website from your black list : http://www.galerie-art-africain.com

we got a problem 2 weeks ago, that has been fixed directly, we are clean
virustotal : https://www.virustotal.com/fr/url/13f66d2374acd2e500840e09571d45157f8613eeec91a46b1a4f39d6edf431a2/analysis/

Google safebrowsing : http://www.google.com/safebrowsing/diagnostic?site=http://www.galerie-art-africain.com

but avast continues to show warnings

best regards,

Offline jimena.gamarra

  • Newbie
  • *
  • Posts: 1
Re: How to remove my website from your blacklist?
« Reply #17 on: January 09, 2015, 06:21:44 AM »
My website is also in the blacklist.
I checked it at www.urlvoid.com and www.virustotal.com and it is now clean. Could you please remove http://www.universoregalos.com.ar from your blacklist?
Thanks!!

Online polonus

  • Avast Überevangelist
  • Maybe Bot
  • *****
  • Posts: 29842
  • malware fighter
Re: How to remove my website from your blacklist?
« Reply #18 on: January 09, 2015, 06:49:35 AM »
Hi  jimena.gamarra,

Your website has been blocked as part of a general IP block see:  https://www.virustotal.com/nl/ip-address/69.195.124.71/information/
You could ask for an exclusion of your website with a reference to this thread here at virus@avast.com .
The unblocking has to be performed by an avast team member and we here are not avast team members,
I for instance am just a volunteer with relevant knowledge.

However you should check this included script,htxp://cdn.dsultra.com/js/registrar.js, for malvertising, read http://forum.joomla.org/viewtopic.php?f=621&t=684752

Furthermore you have a suspicious iFrame check.

Some minor issues here: http://www.dnsinspect.com/universoregalos.com.ar/1420781615

You should take the following security issues up with bluehost - security header scan issues, re: http://www.uploady.com/#!/download/1cSSy3~52nH/RQ5HvNPXjM~Ga6wZ  (one header configured correctly and nine missing  :o )

IDS alerts here: http://urlquery.net/report.php?id=1420782872184

polonus (volunteer website security analyst and website error-hunter)

« Last Edit: January 09, 2015, 06:55:11 AM by polonus »
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Offline CristianRamos

  • Newbie
  • *
  • Posts: 1

Online polonus

  • Avast Überevangelist
  • Maybe Bot
  • *****
  • Posts: 29842
  • malware fighter
Re: How to remove my website from your blacklist?
« Reply #20 on: January 25, 2015, 11:36:21 PM »
Ola CristianRamos,

I assume that your website was blocked as part of a general IP block, see: https://www.virustotal.com/nl/ip-address/186.64.113.100/information/
Some other domains on that same IP address are reported because of PHISH-ing.
So you should ask an avast team member to make an exclusion for your website, here: https://www.avast.com/contact-form.php

There are some minor issues you should take up with those that host that website, nothing malicious but as part of general security recommendations. See: http://www.dnsinspect.com/pelaoramos.cl/1422224803
WARNING: Name servers software versions are exposed:
186.64.113.4: "9.8.2rc1-RedHat-9.8.2-0.30.rc1.el6_6.1"
190.114.254.28: "9.3.6-P1-RedHat-9.3.6-25.P1.el5_11.2"
208.71.173.199: "9.8.2rc1-RedHat-9.8.2-0.30.rc1.el6_6.1"
216.224.180.87: "9.3.6-P1-RedHat-9.3.6-25.P1.el5_11.2"
Exposing name server's versions may be risky, when a new vulnerability is found your name servers may be automatically exploited by script kiddies until you patch the system. Hide version.
Also the security header situation for your site demands attention, see: https://www.uploady.com/#!/download/CUl01_pPODR/FBy7x1GMO_ryOmwZ

Con Dios,
polonus (volunteer website security analyst and website error-hunter)

« Last Edit: January 25, 2015, 11:38:21 PM by polonus »
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Offline jefferson sant

  • Ultra Poster
  • *****
  • Posts: 5073
  • volunteer
Re: How to remove my website from your blacklist?
« Reply #21 on: January 27, 2015, 08:06:49 PM »
Could you check my website?

http://www.pelaoramos.cl

I checked and no virus was found

https://www.virustotal.com/es/url/53829c6627b3fe24ef711b8ce526e0c1a16808c15bcbcc78dd014d05b3896906/analysis/

Thanks!

Hello

Quote from: Lukas Havel
It's false positive. The detection will be fixed in the next VPS.
 We are sorry for the inconvenience.
 Best regards, Lukas Havel

Estarei ativo durante a Semana, Sábado e Domingo apenas a noite.I will be active during the week, Saturday and Sunday only the night.

Offline Contato33

  • Newbie
  • *
  • Posts: 2
Re: How to remove my website from your blacklist?
« Reply #22 on: February 19, 2015, 08:34:54 PM »
Meu site está também na lista negra.
Eu verifiquei em www.urlvoid.com e www.virustotal.com e agora está limpo. Poderia, por favor remover http://www.janaynna.com.br de sua lista negra?
Obrigada !!

My website is also in the blacklist.
I checked it at www.urlvoid.com and www.virustotal.com and it is now clean. Could you please remove http://www.janaynna.com.br from your blacklist?
Thanks!!


Offline richard167

  • Newbie
  • *
  • Posts: 2
Re: How to remove my website from your blacklist?
« Reply #24 on: February 19, 2015, 11:19:39 PM »
Hi.
My website has been on a blacklist www.partypig.co.uk and i have rebuilt it on a new server. all software is up to date and it passes all the tests on :

http://freedns.afraid.org/domain/dnstrace.php?domain=www.partypig.co.uk&submit=Trace
https://www.virustotal.com
http://www.urlvoid.com/scan/partypig.co.uk/

and lots more places too. I have submitted requests through Avast antivirus software but its still blocked, hoping this is the place to get it a clean bill of health please !!!

thanks

Online polonus

  • Avast Überevangelist
  • Maybe Bot
  • *****
  • Posts: 29842
  • malware fighter
Re: How to remove my website from your blacklist?
« Reply #25 on: February 19, 2015, 11:27:50 PM »
Site cannot be resolved at the mo: http://www.dnsinspect.com/janaynna.com.br/1424384095
Has been taken down and not in namespace: janaynna.com.br,,,Not in namespace,
see: https://www.robtex.com/en/advisory/dns/br/com/janaynna/
Detected as Open Anonymous Proxy: http://www.liveipmap.com/162.144.44.17
mail abuse? -> http://antispam.imp.ch/05-uribl.php?lng=1
Warning—Incomplete Record
The record we received from the Whois server may be incomplete: http://whois.domaintools.com/janaynna.com.br
Server software outdated and vulnerable: Apache/2.4.10 (Unix) OpenSSL/0.9.8e-fips-rhel5 mod_bwlimited/1.4
Attacked - long OVERDUE malware?

polonus
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Online polonus

  • Avast Überevangelist
  • Maybe Bot
  • *****
  • Posts: 29842
  • malware fighter
Re: How to remove my website from your blacklist?
« Reply #26 on: February 19, 2015, 11:36:43 PM »
Hi richard167,

As far as I can establish your domain is victim of an IP block: http://anti-hacker-alliance.com/index.php?details=89.200.137.33
Issues here: http://www.dnsinspect.com/partypig.co.uk/1424384980
Ask foir a domain exclusion, I cannot help you as I am a volunteer with relevant knowledge but not an avast team member and only they will unblock eventually.

polonus
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Offline richard167

  • Newbie
  • *
  • Posts: 2
Re: How to remove my website from your blacklist?
« Reply #27 on: February 20, 2015, 12:06:13 AM »
Odd there are dozens of sites on that IP and this site only in last few weeks, what is an IP block please ? Also what is domain exclusion?
Thanks

Offline jefferson sant

  • Ultra Poster
  • *****
  • Posts: 5073
  • volunteer
Re: How to remove my website from your blacklist?
« Reply #28 on: February 22, 2015, 02:43:09 AM »
My website is also in the blacklist.
I checked it at www.urlvoid.com and www.virustotal.com and it is now clean. Could you please remove http://www.janaynna.com.br from your blacklist?
Thanks!!

Hello
there detected "hxxp://www.janaynna.com.br/_agenda/moto.jar"     
please confirm that this was clean ?
Estarei ativo durante a Semana, Sábado e Domingo apenas a noite.I will be active during the week, Saturday and Sunday only the night.

Offline HonzaZ

  • Avast team
  • Advanced Poster
  • *
  • Posts: 936
Re: How to remove my website from your blacklist?
« Reply #29 on: February 23, 2015, 08:42:24 AM »
Richard167:
I am unblocking partypig.co.uk now.

Contato33:
It was indeed blocked because of janaynna.com.br/_agenda/moto.jar. Seeing it is a long time now, I am unblocking the domain, I hope the issue was already taken care of.