Author Topic: How to remove my website from your blacklist?  (Read 193544 times)

0 Members and 1 Guest are viewing this topic.

Offline david765

  • Newbie
  • *
  • Posts: 3
Re: How to remove my website from your blacklist?
« Reply #75 on: September 10, 2015, 08:54:00 PM »
Thanks. What's the best way to contact them to have it excluded?

Offline jefferson sant

  • Starting Graphoman
  • *
  • Posts: 6829
  • volunteer
Re: How to remove my website from your blacklist?
« Reply #76 on: September 10, 2015, 09:20:07 PM »
What's the best way to contact them to have it excluded?

Contact here
Submit a ticket at https://support.avast.com/Tickets/Submit

-> Avast Virus lab

Offline david765

  • Newbie
  • *
  • Posts: 3
Re: How to remove my website from your blacklist?
« Reply #77 on: September 10, 2015, 09:21:11 PM »
Thanks!

Offline jefferson sant

  • Starting Graphoman
  • *
  • Posts: 6829
  • volunteer
Re: How to remove my website from your blacklist?
« Reply #78 on: September 10, 2015, 09:27:20 PM »

Offline ozioeh

  • Newbie
  • *
  • Posts: 2
Re: How to remove my website from your blacklist?
« Reply #79 on: September 15, 2015, 09:19:28 PM »
Hi,
my site

http://www.woomyung.com/
 have been blocked (url mal) during long times.

I tested  using almost recommended web checking site, but didn't find any issue.
And continusoly reported as false positive report, but didn't changed.

thank you.

 





Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 32687
  • malware fighter
Re: How to remove my website from your blacklist?
« Reply #80 on: September 15, 2015, 10:32:09 PM »
DNS issue: Allow TCP connections
WARNING: Couldn't connect using TCP protocol:
tcp4:1.201.102.134
Check your name server's configurations and firewall rules. When response to a DNS query exceeds 512 bytes, TCP is negotiated and used, all name servers should allow TCP connections (port 53).
Did not follow redirect to http://www.ec2-54-191-33-241.us-west-2.compute.amazonaws.com/
Website risk status 7 red out of 10: http://toolbar.netcraft.com/site_report?url=http://www.ec2-54-191-33-241.us-west-2.compute.amazonaws.com
jquery.easing.1.3.js hacked for hotlinking?
See: http://www.domxssscanner.com/scan?url=http%3A%2F%2Fwoomyung.com

See no direct known threats, wait for an explanation from Avast team for the URL:Mal general detection.
Reason for the general detection is probably the nameserver: Domain found using -*.whoisdomain.kr as name server
see: http://www.malwareurl.com/ns_listing.php?ns=ns4.whoisdomain.kr  with trojans and backdoors.

polonus (volunteer website security analyst and website error-hunter)


Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Offline HonzaZ

  • Avast team
  • Advanced Poster
  • *
  • Posts: 1131
Re: How to remove my website from your blacklist?
« Reply #81 on: September 16, 2015, 08:48:30 AM »
Re eanescomfort.com:
The URL was removed from our blacklist yesterday - most likely based on your report.

Re woomyung.com:
It was added to our blacklist because of DNS hijack. I hope the matter is now resolved, so I am unblocking the domain now.
« Last Edit: September 16, 2015, 08:50:29 AM by HonzaZ »

Offline ozioeh

  • Newbie
  • *
  • Posts: 2
Re: How to remove my website from your blacklist?
« Reply #82 on: September 16, 2015, 01:57:28 PM »
Thank you so much

Offline Krzysztof60

  • Newbie
  • *
  • Posts: 2
Re: How to remove my website from your blacklist?
« Reply #83 on: October 16, 2015, 02:58:59 PM »
Hello,
my site www.krzysztofkarpinski.pl is on Your blacklist.

Users who use AVAST can not get to my site.
The website is now clean and safe - confirm you can find here www.siteadvisor.com
What can I do to remove the page from your blacklist?

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 32687
  • malware fighter
Re: How to remove my website from your blacklist?
« Reply #84 on: October 16, 2015, 04:46:52 PM »
Witam Panie Krzysztofie!

This comes in English because this part of the forums is,

Fortinet webfilter is flagging the website, https://www.virustotal.com/nl/url/24a3718291ca18b88cba3d7832b39336b28136c90eab8cf2b7b625c7000ccdac/analysis/1445003923/

By the way you have the following WP misconfiguration:Warning Directory Indexing Enabled
In the test we attempted to list the directory contents of the uploads and plugins folders to determine if Directory Indexing is enabled. This is an information leakage vulnerability that can reveal sensitive information regarding your site configuration or content.

/wp-content/uploads/ enabled
/wp-content/plugins/ disabled

Directory indexing was tested on the /wp-content/uploads/ and /wp-content/plugins/ directores. Note that other directories may have this web server feature enabled, so ensure you check other folders in your installation. It is good practice to ensure directory indexing is disabled for your full WordPress installation either through the web server configuration or .htaccess.

Vuln.: Results from scanning URL: http://krzysztofkarpinski.pl/wp-includes/js/jquery/jquery.js?ver=e237b87e9ac201aedbe95acc6d03803a
Number of sources found: 43
Number of sinks found: 19

Also considering the discussion here: https://productforums.google.com/forum/#!topic/webmaster-pl/d6rq5mBbpCc (po polsku)  Do a scan here: urlquery dot net and there you will see what Fortinet flags. Wait until back online as it now is down.
Avast flags a general URL:Mal alert for chrome.exe.

My bet is the problem is not with your site but the hoster, see badness history (trojans and droppers) https://www.virustotal.com/nl/ip-address/87.98.239.87/information/

pozdrawiam,

Damian aka polonus (volunteer website security analyst and website error-hunter)

Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 32687
  • malware fighter
Re: How to remove my website from your blacklist?
« Reply #85 on: October 16, 2015, 10:40:08 PM »
Re: http://urlquery.net/report.php?id=1445027045186
The malware flagged  detected by Fortinet's, verified on 2015-10-16
18 suspicious files on IP see: http://urlquery.net/report.php?id=1444685724978
You certainly should take things up with the hoster - Blacklisted URLs: 11864
22 instances of malware on another domain with that same IP.  :o

polonus
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Offline HonzaZ

  • Avast team
  • Advanced Poster
  • *
  • Posts: 1131
Re: How to remove my website from your blacklist?
« Reply #86 on: October 18, 2015, 10:03:51 AM »
Unblocked ;-)
The reason was money fraud at krzysztofkarpinski.pl/log/kmart.tar.gz, in case anyone is wondering :-)

Offline Krzysztof60

  • Newbie
  • *
  • Posts: 2
Re: How to remove my website from your blacklist?
« Reply #87 on: October 19, 2015, 02:02:06 PM »
AVAST actually no longer blocks my website - thank you :)

Polonus - thank you for your commitment and a large amount of valuable information.
Indexing already disabled - I think so :)
As for the rest I have to ask for help from someone who knows how and what to do next;)

Anyway - Thank you for your help :D

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 32687
  • malware fighter
Re: How to remove my website from your blacklist?
« Reply #88 on: October 19, 2015, 03:14:24 PM »
For expert help you might contact Redleg, the man behind File Viewer -> https://aw-snap.info/file-viewer/
To jest za darmo.

polonus
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Offline rich35

  • Newbie
  • *
  • Posts: 1
Re: How to remove my website from your blacklist?
« Reply #89 on: October 30, 2015, 08:19:30 PM »
Hi,

Can you unblock our website illo-online.com please.