How to remove my website from your blacklist?

[polonus]

Hi Marko87,

The PHISHING reported by Norton's, does it exist any longer: https://aw-snap.info/file-viewer/?protocol=secure&ref_sel=GSP2&ua_sel=ff&chk-cache=&fs=1&tgt=bWx8I1twbHVzLnNbYHxsbHR9fG5zW3tgaF1te2BdbnsjI31bdns%3D~enc

Your Word Press version is outdated, update a.s.a.p.
Plug-ins to update: The following plugins were detected by reading the HTML source of the WordPress sites front page.

cookie-law-info 1.7.4   latest release (1.8.1)
https://www.webtoffee.com/product/gdpr-cookie-consent/
wordpress-seo 9.7   latest release (12.3)
https://yoa.st/1uj
social-icons-widget-by-wpzoom   latest release (3.4.0)
https://www.wpzoom.com/plugins/social-widget/
Plugins are a source of many security vulnerabilities within WordPress installations, always keep them updated to the latest version available and check the developers plugin page for information about security related updates and fixes.

User Enumeration
  The first two user ID's were tested to determine if user enumeration is possible.

ID   User   Login
1   None   mlampret
2   None   zelimir
It is recommended to rename the admin user account to reduce the chance of brute force attacks occurring. As this will reduce the chance of automated password attackers gaining access. However it is important to understand that if the author archives are enabled it is usually possible to enumerate all users within a WordPress installation.

All link sites have been Google Safeweb OK-ed. Abuse report for IP: https://www.abuseipdb.com/check/185.53.12.128
Your site is been given as clean here:
https://checkphish.ai/insights/url/1572088757525/10ad35b07932f851ca6d3ceb2119da0a386b79b9539fee785d1afa36deeffb49

So wait for an avast team member to give a final verdict, we are just volunteers with relevant knowledge,
but only avast team member can come and unblock,

pozdravi,

polonus (3rd party cold recon website security analyst and website error-hunter)

[David2140]

Hello, my web-site www.inq-mega.com is blocked by avast but it's clean... How can I remove it from blacklist?
thx

[Asyn]

-> https://sitecheck.sucuri.net/results/www.inq-mega.com

[DavidR]

Hello, my web-site inq-mega.com is blocked by avast but it's clean... How can I remove it from blacklist?
thx

As has been mentioned many times before in this topic.

Your best option is to report it directly for investigation.

Report a false positive (select file or website)
https://www.avast.com/false-positive-file-form.php

This goes directly to the Avast virus labs Team.

[jefferson sant]

Hi!

Our site was blacklisted, because there was a malicius script uploaded. We cleaned it and did a full audit, also updated the CMS and all plugins. Can you do a re-evaluation? It's htxps://www.mladiplus.si/

Thank you!

Detection was removed in 28.10.2019 at 11:01 AM.

Our virus specialists have now cleared its reputation in our database.

With URLs this change should be instant, but it might take up to 24 hours with files.

[jefferson sant]

Hello, my web-site wxw.inq-mega.com is blocked by avast but it's clean... How can I remove it from blacklist?
thx

Detection was removed in 29.10.2019 at 05:00 AM

Our virus specialists have now cleared its reputation in our database.

With URLs this change should be instant, but it might take up to 24 hours with files.

[gocicek]

Hello,

Our several sites are blacklisted. Here is a domain name:
https://www.kleparstvo-in-krovstvo.si/
https://www.kako-zaraditi-online.com/
https://www.parketar-fredi.com/
https://www.tomicclean.com/
https://www.inkapital.hr
https://www.danijel-tpo.hr/

We would like you to take a look at it and remove it from your blacklist.

Nice regards
Tomislav Cicek

[polonus]

Hi gocicek,

It is not only avast to block, also other solutions like McAfee (with a reputation of overdue blacklisting) and in this case also Norton's:
https://safeweb.norton.com/report/show?url=parketar-fredi.com

4 other engines also still detect: https://www.virustotal.com/gui/url/8c252722b7a16464c4c172507efc6cf54f9260853a09b3f854c07a3b6ddbaf07/detection

See: https://www.virustotal.com/gui/ip-address/213.136.94.88/relations

See also how this comes PHP related with login.php and index.php,
example: https://www.virustotal.com/gui/file/a3992ba89b79dd2cdb99d87adbe06293b1a921b8636ae80607f16f8314ae6808/detection

And the vulnerabilities menstioned here should be taken up with Contabo Hosting:
https://www.shodan.io/host/213.136.94.88  -> https://www.redhat.com/archives/rhsa-announce/2019-August/msg00047.html
and pitentially for cPanel: https://www.exploit-db.com/exploits/24183

For another website in the listing you give, a Word Press CMS site: https://toolbar.netcraft.com/site_report?url=https%3A%2F%2Fwww.tomicclean.com  (7 red Netcraft risk rate out of 10).
Website has a configuration mistake, that puts the site at risk:  Directory Indexing
In the test an attempt was made to list the directory contents of the uploads and plugins folders to determine if Directory Indexing is enabled. This is a common information leakage vulnerability that can reveal sensitive information regarding your site configuration or content.

/wp-content/uploads/      enabled
/wp-content/plugins/      disabled
Directory indexing was tested on the /wp-content/uploads/ and /wp-content/plugins/ directores. Note that other directories may have this web server feature enabled, so ensure you check other folders in your installation. It is good practice to ensure directory indexing is disabled for your full WordPress installation either through the web server configuration or .htaccess.

Also see blacklisting mentioned here: https://sitecheck.sucuri.net/results/https/www.tomicclean.com
Moreover retirable vulnerable jQuery library detected: https://retire.insecurity.today/#!/scan/024e902e1d1de73406d86308d3b84f039b5a89f9ca7e4d4e926e92eed2e242e6

So wait for a final verdict from an avast team member, as they are the only ones to come and unblock.
We here are just volunteers with relative knowledge on website security analysis, we just advise and recommend.

polonus (volunteer third party cold recon website security website analyst and website error-hunter)

[jefferson sant]

Hello,

Our several sites are blacklisted. Here is a domain name:
hxxps://www.kleparstvo-in-krovstvo.si/
hxxps://www.parketar-fredi.com/
hxxps://www.tomicclean.com/
hxxps://www.danijel-tpo.hr/

We would like you to take a look at it and remove it from your blacklist.

Nice regards
Tomislav Cicek

URLs not being blocked by Avast.

The provided URL doesn't seem to be detected by Avast.Could you please send us a screenshot of the detection message you're getting? https://support.avast.com/en-ww/article/Create-screenshot

[jefferson sant]

Hello,

Our several sites are blacklisted. Here is a domain name:
hxxps://www.kako-zaraditi-online.com/
hxxps://www.inkapital.hr

We would like you to take a look at it and remove it from your blacklist.

Nice regards
Tomislav Cicek

Detection cleaned in 11.11.2019 at 10:00 AM.

Our virus specialists have now cleared its reputation in our database.

With URLs this change should be instant, but it might take up to 24 hours with files.

[Suzanne62]

Hi,

I am told by a colleague who has Avast, that my website won't load - there's a block, saying it's a phishing site!

Could you tell me what is causing this?

www.threebusinessservices.com

Thanks,
Suzanne

[Asyn]

-> https://sitecheck.sucuri.net/results/www.threebusinessservices.com

[polonus]

See: https://www.shodan.io/host/198.185.159.144
Squarespace is vulnerable to database configuration disclosure, RCE, CSS attacks.
See detections for IP: https://www.virustotal.com/gui/ip-address/198.185.159.144/details
-> https://www.virustotal.com/gui/ip-address/198.185.159.144/relations

226 recommendations found through linting, specially look at security hints:
https://webhint.io/scanner/05e83092-96c4-47cb-bdb5-8bce9192d370

For me site opens up fine. Wait for an avast team member to give a final verdict.
Consider also this report: https://webcookies.org/cookies/www.threebusinessservices.com/28678728?112291

polonus

[jefferson sant]

Hi,

I am told by a colleague who has Avast, that my website won't load - there's a block, saying it's a phishing site!

Could you tell me what is causing this?

wxw.threebusinessservices.com

Thanks,
Suzanne

Detection was removed in 26.11.2019 at 06:21 AM

Our virus specialists have now cleared its reputation in our database.

With URLs this change should be instant, but it might take up to 24 hours with files.

[malcolm.newton]

could you remove https://www.usproptrader.com from your blacklist
it is not listed on any other services thanks