Author Topic: How to remove my website from your blacklist?  (Read 185203 times)

0 Members and 1 Guest are viewing this topic.

Offline Asyn

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 64728
    • >>>  Avast Forum - Deutschsprachiger Bereich  <<<
Re: How to remove my website from your blacklist?
« Reply #660 on: March 14, 2020, 07:24:23 AM »
You can report a suspected FP (File/Website) here: https://www.avast.com/false-positive-file-form.php
Win 8.1 [x64] - Avast PremSec 20.4.2409.B#4 [UI.520] - CC 5.65 - EEK - FF ESR 68.8 [NS/AOS/uBO/PB] - TB 68.8.1 - ASB/ACP/ASL.BC
Deutschsprachiger Bereich -> Avast Wissenswertes (Downloads, Anleitungen & Infos): https://forum.avast.com/index.php?topic=60523.0

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 32448
  • malware fighter
Re: How to remove my website from your blacklist?
« Reply #661 on: March 14, 2020, 02:13:54 PM »
The detection could have been IP related, see: https://www.virustotal.com/gui/ip-address/23.226.129.121/relations
Checks OK.
Warning: TLS Recommendations
No redirect from HTTP to HTTPS found. You should redirect your website visitors to the HTTPS version to avoid the "Not Secure" browser warning.
JQuery risks at the hoster, see: https://www.shodan.io/host/23.226.129.121
See recommendations to improve website and website security:
https://webhint.io/scanner/3c59d854-eb12-43f4-8775-546e1ad6e065
Quote
Content that was returned by your request for the URL: hxtp://leagueoflegendsaccounts.com/
1:  Loading ...
/quote] Risk rating grade 2: https://sitereport.netcraft.com/?url=http%3A%2F%2Fleagueoflegendsaccounts.com

polonus (volunteer 3rd party cold recon website security analyst and website error-hunter)
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Offline conor_1997

  • Newbie
  • *
  • Posts: 1
Re: How to remove my website from your blacklist?
« Reply #662 on: March 20, 2020, 06:56:50 PM »
Hello,

My website appears to be getting blocked by avast for "URL:Phishing"

Can anybody advise me on how to stop my website from being blocked?

My website is an unfinished shopify store and can be found at - www.cjactive.com

Any help is very much appreciated, as this is obviously very annoying.

Thankyou.

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 83044
  • No support PMs thanks
Re: How to remove my website from your blacklist?
« Reply #663 on: March 20, 2020, 11:55:28 PM »
@ conor_1997
First  break active links(modify your post) to suspect sites, just put in the domain name, e.g. cjactive.com to avoid accidental exposure.

Second report this directly to Avast using the link posted previously:
You can report a suspected FP (File/Website) here: https://www.avast.com/false-positive-file-form.php

Avast isn't alone in blocking the site and it is considered to have low security and is a Critical (High) Security Risk.
https://sitecheck.sucuri.net/results/cjactive.com
WinXP ProSP3/ Core2Duo E8300/ 4GB Ram/ avast! free 18.5.2342/ Firefox ESR, uBlock Origin, uMatrix/ MailWasher Pro7.11.0/ DropMyRights/ WinPatrol+/ Drive Image 7.1/ SnagIt 10.0/ avast! mobile security
Windows 10 Home 1909 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 20.2.2401 (build 20.2.5130.570) UI-1.0.505/ WinPatrol+/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 32448
  • malware fighter
Re: How to remove my website from your blacklist?
« Reply #664 on: March 21, 2020, 12:30:49 AM »
Hi conor_1997,

Do as DavidR tells you and report.

Configuration settings mean that this site is insecure and also blacklisted by other av-solutions
(McAfee, Comodo, Trustwave for instance), see: hxtps://cjactive.com/password (also /admin even more insecure,
and entering excessive server info proliferation)

The hosting party is known to be into abuse of sorts (scanning the Internet),
consider: https://viz.greynoise.io/ip/23.227.38.65 which website is insecure: -http://zagat.ssl.shopify.com/

Connection to your site is not secure you should not enter any sensitive information on this site
(as actually passwords etc.)/
site cannot be reached...report to -cdn.shopify.com and CloudFlare.

Two more engines now detecting this URL: https://www.virustotal.com/gui/url/8edbbe679245d9745cf4381734909b0cd3837ccc13870fadb2d252ed7fd0569c/detection

DOM-XSS scan results: Results from scanning URL: hxtps://cjactive.com/password
Number of sources found: 13 document.cookie-index, document.write, location,pathname
Number of sinks found: 31 href=, src= & value
Quote
Following on url+ admin we could arrive at:
Weak security at uri: htXps://accounts.shopify dot com/lookup?rid=ddd8f56f-XXXXXXXXXXXXXXXXXXXX-7100564

See CSP report: script-src 'self' 'unsafe-eval' 'nonce-OTXXXXXXXXXXXXXXXczNDU3MTM=' 'nonce-6rWQg/2wNBSXXXXXXXXXXXt0hhzP4Q+V7n6D9aNf85A=' 'unsafe-inline';
style-src 'unsafe-inline' 'self';
upgrade-insecure-requests;
report-uri /csp-report?source%5Baction%5D=new&source%5Bapp%5D=identity&source%5Bcontroller%5D=account_lookup&source%5Buuid%5D=0162154301XXXXXXXXXXXXXX8210d41;  (X-rows inserted to break link)
  weak yellow alerted CSP settings. 

See for malcode detected at domains on that particular IP: https://www.virustotal.com/gui/ip-address/23.227.38.65/relations

Wait for a final verdict from avast team members (the only ones to come and eventually unblock).
But be assured with this settings in shopify your webshop is far from opening within secure settings yet  :P

polonus (volunteer 3rd party cold reconnaissance website security analyst and website error-hunter)

   
« Last Edit: March 21, 2020, 12:41:36 AM by polonus »
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Offline jefferson sant

  • Starting Graphoman
  • *
  • Posts: 6772
  • volunteer
Re: How to remove my website from your blacklist?
« Reply #665 on: March 27, 2020, 12:06:29 AM »
Hello,

My website appears to be getting blocked by avast for "URL:Phishing"

Can anybody advise me on how to stop my website from being blocked?

My website is an unfinished shopify store and can be found at - wxw.cjactive.com

Any help is very much appreciated, as this is obviously very annoying.

Thankyou.

Detection was removed in 26.03.2020 at 09:54 AM.

There were delays and therefore the much requests and nothing was reduced.Avast Threat Labs remains the same before covid-19.

Quote from: Avast
Our virus specialists have now cleared its reputation in our database.

With URLs this change should be instant, but it might take up to 24 hours with files.