Author Topic: How to remove my website from your blacklist?  (Read 76944 times)

0 Members and 2 Guests are viewing this topic.

Offline Subi

  • Newbie
  • *
  • Posts: 4
Re: How to remove my website from your blacklist?
« Reply #420 on: September 11, 2017, 02:14:48 PM »
Hello Eddy,

Could you help me, my server 213.181.208.128 is full of wp sites, all of them blocked by Avast, becouse: URL:MAL

I made an IP check:
https://www.virustotal.com/en/ip-address/213.181.208.128/information/

If I check only one site (4example), it says its clean:
https://sitecheck.sucuri.net/results/femesfafehergyarmat.hu

what is the problem with my server?

thx!

Offline Eddy

  • Avast Evangelist
  • Maybe Bot
  • ***
  • Posts: 31492
  • Watching (over?) you
    • Malware removal, Biljart and other things.
Re: How to remove my website from your blacklist?
« Reply #421 on: September 11, 2017, 04:53:43 PM »
Subi,

without looking any further, I already see that your problem is the use of shared hosting.
Step away from it and get dedicated hosting.

Offline polonus

  • Avast √úberevangelist
  • Maybe Bot
  • *****
  • Posts: 29847
  • malware fighter
Re: How to remove my website from your blacklist?
« Reply #422 on: September 11, 2017, 09:54:56 PM »
IP blacklisted by -213.181.208.128 blacklisted by 2 websites
1 Von Hamburg bis Hawaii
2 CH3man's Web

213.181.208.128/cgi-sys/defaultwebpage.cgi   is blacklisted for PHISHING: http://urlquery.net/report/ba047b99-2ad9-4f5d-98a6-5de122844094  &  http://urlquery.net/report/1156f16c-3f5f-449e-9f29-521e46f865d0
Dangerous as Google Safebrowsing blocks it as misleading website...phishing recently detected.
See: http://toolbar.netcraft.com/site_report?url=http://213.181.208.128

polonus (volunteer website security analyst and website error-hunter)
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Offline Subi

  • Newbie
  • *
  • Posts: 4
Re: How to remove my website from your blacklist?
« Reply #423 on: September 12, 2017, 01:26:52 PM »
213.181.208.128/cgi-sys/defaultwebpage.cgi
213.181.208.128/img-sys/powered_by_cpanel.svg

Hm, so the 404page and the cpanel logo is phishing... thats why all my hosted sites are blocked by you???

these are the same page of my server:
this is not phishing: http://hosting.aranyoldalak.hu/cgi-sys/defaultwebpage.cgi
nor this: http://hosting.mtt.hu/cgi-sys/defaultwebpage.cgi
this is phishing: http://213.181.208.128/cgi-sys/defaultwebpage.cgi

As I see, these pages are NOT phishing, and I don't know what could I do to remove from the blacklists...

Offline Eddy

  • Avast Evangelist
  • Maybe Bot
  • ***
  • Posts: 31492
  • Watching (over?) you
    • Malware removal, Biljart and other things.
Re: How to remove my website from your blacklist?
« Reply #424 on: September 12, 2017, 01:29:37 PM »
Did you even read my last post ?

Offline Subi

  • Newbie
  • *
  • Posts: 4
Re: How to remove my website from your blacklist?
« Reply #425 on: September 12, 2017, 01:35:14 PM »
Hi,

oh, the shared server the reason why all the sites blocking. ok. understand.

and it hink i could discuss the balcklist sites for the reason of the listing.

Offline Eddy

  • Avast Evangelist
  • Maybe Bot
  • ***
  • Posts: 31492
  • Watching (over?) you
    • Malware removal, Biljart and other things.
Re: How to remove my website from your blacklist?
« Reply #426 on: September 12, 2017, 01:36:55 PM »
Get the clue, it is not the domain that is blacklisted but the IP.
There is no discussion possible/needed.
There are a lot of malicious sites there.

Offline Subi

  • Newbie
  • *
  • Posts: 4
Re: How to remove my website from your blacklist?
« Reply #427 on: September 12, 2017, 01:39:29 PM »
OK, nothing isperfect :)

thanks a lot! i think i have some work.

bye

Offline WuqiYin

  • Newbie
  • *
  • Posts: 2
Re: How to remove my website from your blacklist?
« Reply #428 on: October 24, 2017, 10:45:16 AM »
Hi, Eddy!

Could you help me to check this link? Just one link has been blocked with URL:MAL.
The link is http://update.youngzsoft.com/ccboot/update/ccbootsetup.exe.
Other site under update.youngzsoft.com can work normal.

I checked the link in virustotal with these way before:
1. https://www.virustotal.com/#/url/b9a923f8b3a6488e075d9a0f432332b6ebefa649556d432a9701e0f1cb68a526/detection
2. Upload exe file to virustotal to check.
They all shows clean with these two way.

Could you help to analyze the reason? Thank you very much!

Offline polonus

  • Avast √úberevangelist
  • Maybe Bot
  • *****
  • Posts: 29847
  • malware fighter
Re: How to remove my website from your blacklist?
« Reply #429 on: October 24, 2017, 12:00:10 PM »
Hi WuqiYin,

Probably blocked because of an older cloud IP blacklisting.

No recent alert here: http://urlquery.net/report/f2e0119e-58bd-47cc-a0e0-dec628808ea8

Or to do with the executable, ET POLICY PE EXE or DLL Windows file download HTTP alerted, read:
http://www.solvusoft.com/en/files/error-virus-removal/exe/windows/youngzsoft-inc/ccboot/ccboot-exe/

In both cases we have to wait for an avast team member to arrive here and give a final verdict,
as we are just volunteers with relevant knowledge, but cannot unblock,

polonus (volunteer website security analyst and website error-hunter)
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Offline Milos

  • Avast team
  • Super Poster
  • *
  • Posts: 1806
Re: How to remove my website from your blacklist?
« Reply #430 on: October 24, 2017, 03:49:36 PM »
Hello,
URL was unblocked.

Milos

Offline WuqiYin

  • Newbie
  • *
  • Posts: 2
Re: How to remove my website from your blacklist?
« Reply #431 on: October 25, 2017, 03:11:52 AM »
Hi, Polonus and Milos!

Thank you for your reply!

I have send email to virus@avast.com before and post a URL on avast support page.
They replied me and told me that they detected that file again and the file is clean now.
So, they already removed it from avast block list.

Thank you very much!