Author Topic: How to remove my website from your blacklist?  (Read 196746 times)

0 Members and 1 Guest are viewing this topic.

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 32761
  • malware fighter
Re: How to remove my website from your blacklist?
« Reply #630 on: October 26, 2019, 01:18:03 PM »
Hi Marko87,

The PHISHING reported by Norton's, does it exist any longer: https://aw-snap.info/file-viewer/?protocol=secure&ref_sel=GSP2&ua_sel=ff&chk-cache=&fs=1&tgt=bWx8I1twbHVzLnNbYHxsbHR9fG5zW3tgaF1te2BdbnsjI31bdns%3D~enc

Your Word Press version is outdated, update a.s.a.p.
Plug-ins to update: The following plugins were detected by reading the HTML source of the WordPress sites front page.

cookie-law-info 1.7.4   latest release (1.8.1)
https://www.webtoffee.com/product/gdpr-cookie-consent/
wordpress-seo 9.7   latest release (12.3)
https://yoa.st/1uj
social-icons-widget-by-wpzoom   latest release (3.4.0)
https://www.wpzoom.com/plugins/social-widget/
Plugins are a source of many security vulnerabilities within WordPress installations, always keep them updated to the latest version available and check the developers plugin page for information about security related updates and fixes.

User Enumeration
  The first two user ID's were tested to determine if user enumeration is possible.

ID   User   Login
1   None   mlampret
2   None   zelimir
It is recommended to rename the admin user account to reduce the chance of brute force attacks occurring. As this will reduce the chance of automated password attackers gaining access. However it is important to understand that if the author archives are enabled it is usually possible to enumerate all users within a WordPress installation.

All link sites have been Google Safeweb OK-ed. Abuse report for IP: https://www.abuseipdb.com/check/185.53.12.128
Your site is been given as clean here:
https://checkphish.ai/insights/url/1572088757525/10ad35b07932f851ca6d3ceb2119da0a386b79b9539fee785d1afa36deeffb49

So wait for an avast team member to give a final verdict, we are just volunteers with relevant knowledge,
but only avast team member can come and unblock,

pozdravi,

polonus (3rd party cold recon website security analyst and website error-hunter)
« Last Edit: October 26, 2019, 01:21:01 PM by polonus »
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Offline David2140

  • Newbie
  • *
  • Posts: 1
Re: How to remove my website from your blacklist?
« Reply #631 on: October 28, 2019, 09:31:07 AM »
Hello, my web-site www.inq-mega.com is blocked by avast but it's clean... How can I remove it from blacklist?
thx

Offline Asyn

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 67321
    • >>>  Avast Forum - Deutschsprachiger Bereich  <<<
Win 8.1 [x64] - Avast PremSec 20.9.2433.Beta1 [UI.571] - CC 5.72 - EEK - FF ESR 78.4 [NS/AOS/uBO/PB] - TB 78.3.3 - SB/CP/SL/DU.B
Deutschsprachiger Bereich -> Avast Wissenswertes (Downloads, Anleitungen & Infos): https://forum.avast.com/index.php?topic=60523.0

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 83916
  • No support PMs thanks
Re: How to remove my website from your blacklist?
« Reply #633 on: October 28, 2019, 09:55:56 AM »
Hello, my web-site inq-mega.com is blocked by avast but it's clean... How can I remove it from blacklist?
thx

As has been mentioned many times before in this topic.
Your best option is to report it directly for investigation.
Report a false positive (select file or website)
https://www.avast.com/false-positive-file-form.php

This goes directly to the Avast virus labs Team.
Windows 10 Home 2004 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 20.8.2432 (build 20.8.5684.602) UI-1.0.564/ WinPatrol+/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

Offline jefferson sant

  • Starting Graphoman
  • *
  • Posts: 6829
  • volunteer
Re: How to remove my website from your blacklist?
« Reply #634 on: October 28, 2019, 10:15:35 PM »
Hi!

Our site was blacklisted, because there was a malicius script uploaded. We cleaned it and did a full audit, also updated the CMS and all plugins. Can you do a re-evaluation? It's htxps://www.mladiplus.si/

Thank you!

Detection was removed in 28.10.2019 at 11:01 AM.

Quote from: Avast
Our virus specialists have now cleared its reputation in our database.

With URLs this change should be instant, but it might take up to 24 hours with files.

Offline jefferson sant

  • Starting Graphoman
  • *
  • Posts: 6829
  • volunteer
Re: How to remove my website from your blacklist?
« Reply #635 on: October 30, 2019, 12:58:10 AM »
Hello, my web-site wxw.inq-mega.com is blocked by avast but it's clean... How can I remove it from blacklist?
thx

Detection was removed in 29.10.2019 at 05:00 AM

Quote from: Avast
Our virus specialists have now cleared its reputation in our database.

With URLs this change should be instant, but it might take up to 24 hours with files.

Offline gocicek

  • Newbie
  • *
  • Posts: 1
Re: How to remove my website from your blacklist?
« Reply #636 on: November 08, 2019, 12:18:34 PM »
Hello,

Our several sites are blacklisted. Here is a domain name:
https://www.kleparstvo-in-krovstvo.si/
https://www.kako-zaraditi-online.com/
https://www.parketar-fredi.com/
https://www.tomicclean.com/
https://www.inkapital.hr
https://www.danijel-tpo.hr/

We would like you to take a look at it and remove it from your blacklist.

Nice regards
Tomislav Cicek

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 32761
  • malware fighter
Re: How to remove my website from your blacklist?
« Reply #637 on: November 08, 2019, 12:57:28 PM »
Hi gocicek,

It is not only avast to block, also other solutions like McAfee (with a reputation of overdue blacklisting) and in this case also Norton's:
https://safeweb.norton.com/report/show?url=parketar-fredi.com

4 other engines also still detect: https://www.virustotal.com/gui/url/8c252722b7a16464c4c172507efc6cf54f9260853a09b3f854c07a3b6ddbaf07/detection

See: https://www.virustotal.com/gui/ip-address/213.136.94.88/relations

See also how this comes PHP related with login.php and index.php,
example: https://www.virustotal.com/gui/file/a3992ba89b79dd2cdb99d87adbe06293b1a921b8636ae80607f16f8314ae6808/detection

And the vulnerabilities menstioned here should be taken up with Contabo Hosting:
https://www.shodan.io/host/213.136.94.88  -> https://www.redhat.com/archives/rhsa-announce/2019-August/msg00047.html
and pitentially for cPanel: https://www.exploit-db.com/exploits/24183

For another website in the listing you give, a Word Press CMS site: https://toolbar.netcraft.com/site_report?url=https%3A%2F%2Fwww.tomicclean.com  (7 red Netcraft risk rate out of 10).
Website has a configuration mistake, that puts the site at risk:  Directory Indexing
In the test an attempt was made to list the directory contents of the uploads and plugins folders to determine if Directory Indexing is enabled. This is a common information leakage vulnerability that can reveal sensitive information regarding your site configuration or content.

/wp-content/uploads/      enabled
/wp-content/plugins/      disabled
Directory indexing was tested on the /wp-content/uploads/ and /wp-content/plugins/ directores. Note that other directories may have this web server feature enabled, so ensure you check other folders in your installation. It is good practice to ensure directory indexing is disabled for your full WordPress installation either through the web server configuration or .htaccess.

Also see blacklisting mentioned here: https://sitecheck.sucuri.net/results/https/www.tomicclean.com
Moreover retirable vulnerable jQuery library detected: https://retire.insecurity.today/#!/scan/024e902e1d1de73406d86308d3b84f039b5a89f9ca7e4d4e926e92eed2e242e6

So wait for a final verdict from an avast team member, as they are the only ones to come and unblock.
We here are just volunteers with relative knowledge on website security analysis, we just advise and recommend.

polonus (volunteer third party cold recon website security website analyst and website error-hunter)
« Last Edit: November 08, 2019, 01:57:49 PM by polonus »
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Offline jefferson sant

  • Starting Graphoman
  • *
  • Posts: 6829
  • volunteer
Re: How to remove my website from your blacklist?
« Reply #638 on: November 09, 2019, 09:45:15 PM »
Hello,

Our several sites are blacklisted. Here is a domain name:
hxxps://www.kleparstvo-in-krovstvo.si/
hxxps://www.parketar-fredi.com/
hxxps://www.tomicclean.com/
hxxps://www.danijel-tpo.hr/

We would like you to take a look at it and remove it from your blacklist.

Nice regards
Tomislav Cicek

URLs not being blocked by Avast.

Quote from: Avast
The provided URL doesn't seem to be detected by Avast.Could you please send us a screenshot of the detection message you're getting? https://support.avast.com/en-ww/article/Create-screenshot

Offline jefferson sant

  • Starting Graphoman
  • *
  • Posts: 6829
  • volunteer
Re: How to remove my website from your blacklist?
« Reply #639 on: November 12, 2019, 02:56:46 AM »
Hello,

Our several sites are blacklisted. Here is a domain name:
hxxps://www.kako-zaraditi-online.com/
hxxps://www.inkapital.hr

We would like you to take a look at it and remove it from your blacklist.

Nice regards
Tomislav Cicek

Detection cleaned in 11.11.2019 at 10:00 AM.

Quote from: Avast
Our virus specialists have now cleared its reputation in our database.

With URLs this change should be instant, but it might take up to 24 hours with files.

Offline Suzanne62

  • Newbie
  • *
  • Posts: 1
Re: How to remove my website from your blacklist?
« Reply #640 on: November 25, 2019, 12:31:16 PM »
Hi,

I am told by a colleague who has Avast, that my website won't load - there's a block, saying it's a phishing site!

Could you tell me what is causing this?

www.threebusinessservices.com

Thanks,
Suzanne

Offline Asyn

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 67321
    • >>>  Avast Forum - Deutschsprachiger Bereich  <<<
Win 8.1 [x64] - Avast PremSec 20.9.2433.Beta1 [UI.571] - CC 5.72 - EEK - FF ESR 78.4 [NS/AOS/uBO/PB] - TB 78.3.3 - SB/CP/SL/DU.B
Deutschsprachiger Bereich -> Avast Wissenswertes (Downloads, Anleitungen & Infos): https://forum.avast.com/index.php?topic=60523.0

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 32761
  • malware fighter
Re: How to remove my website from your blacklist?
« Reply #642 on: November 25, 2019, 01:40:50 PM »
See: https://www.shodan.io/host/198.185.159.144
Squarespace is vulnerable to database configuration disclosure, RCE, CSS attacks.
See detections for IP: https://www.virustotal.com/gui/ip-address/198.185.159.144/details
-> https://www.virustotal.com/gui/ip-address/198.185.159.144/relations

226 recommendations found through linting, specially look at security hints:
https://webhint.io/scanner/05e83092-96c4-47cb-bdb5-8bce9192d370

For me site opens up fine. Wait for an avast team member to give a final verdict.
Consider also this report: https://webcookies.org/cookies/www.threebusinessservices.com/28678728?112291

polonus
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Offline jefferson sant

  • Starting Graphoman
  • *
  • Posts: 6829
  • volunteer
Re: How to remove my website from your blacklist?
« Reply #643 on: November 27, 2019, 01:28:46 AM »
Hi,

I am told by a colleague who has Avast, that my website won't load - there's a block, saying it's a phishing site!

Could you tell me what is causing this?

wxw.threebusinessservices.com

Thanks,
Suzanne

Detection was removed in 26.11.2019 at 06:21 AM

Quote from: Avast
Our virus specialists have now cleared its reputation in our database.

With URLs this change should be instant, but it might take up to 24 hours with files.

Offline malcolm.newton

  • Newbie
  • *
  • Posts: 1
Re: How to remove my website from your blacklist?
« Reply #644 on: December 12, 2019, 10:04:48 PM »
could you remove https://www.usproptrader.com from your blacklist
it is not listed on any other services thanks