Author Topic: How to remove my website from your blacklist?  (Read 193507 times)

0 Members and 2 Guests are viewing this topic.

Offline Shone

  • Newbie
  • *
  • Posts: 10
Re: How to remove my website from your blacklist?
« Reply #165 on: June 27, 2016, 10:09:55 PM »
Those 2 subdomains arent mine  :(

Threat Report
small-warning
Security Risks
Threats found: 1 
Here is a complete list: (for more information about a specific threat, click on the Threat Name below)

Threat Name:
Web Attack: Malicious Toolkit Iframe Injection
Location:
http://dorybi.thats.im/sa/hes/13/sprej-losen-dlya-ukrepleniya-i-rost.php

small-warning
Phishing Attacks
Threats found: 1 
Here is a complete list: (for more information about a specific threat, click on the Threat Name below)

Location:
http://serve.thats.im/login

So if i completely remove that free subdomain ,and use only mine .com , i will be safe?
« Last Edit: June 27, 2016, 10:11:36 PM by Shone »

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 36755
Re: How to remove my website from your blacklist?
« Reply #166 on: June 27, 2016, 10:14:04 PM »
Quote
So if i completely remove that free subdomain ,and use only mine .com , i will be safe?
@HonzaZ is notified, he is the one with all the answers


Offline Shone

  • Newbie
  • *
  • Posts: 10
Re: How to remove my website from your blacklist?
« Reply #167 on: June 27, 2016, 10:21:18 PM »
Quote
So if i completely remove that free subdomain ,and use only mine .com , i will be safe?
@HonzaZ is notified, he is the one with all the answers

Thanks , im just realising how this works.It seems like im hurt by other users on same server IP,and other users in same "thats.im" domain . I'll need advice if leaving this free hosting company is only choice to avoid further problems.But if this kind of things happen on other hostings too,moving is pointless?

Offline Secondmineboy

  • Avast Evangelist
  • Massive Poster
  • ***
  • Posts: 3651
Re: How to remove my website from your blacklist?
« Reply #168 on: June 27, 2016, 10:48:37 PM »
Quote
So if i completely remove that free subdomain ,and use only mine .com , i will be safe?
@HonzaZ is notified, he is the one with all the answers

Thanks , im just realising how this works.It seems like im hurt by other users on same server IP,and other users in same "thats.im" domain . I'll need advice if leaving this free hosting company is only choice to avoid further problems.But if this kind of things happen on other hostings too,moving is pointless?

Moving isnt totally pointless a VPS or server is always best, harder to maintain but you get more control on security and privacy of course in exchange.

You can stay at the same company you use right now being Interserver in case its correct they also have VPSes and dedicated servers and i guess they can help you with setting up and moving over.

Otherwise maybe you can check out OVH as hosting company or STRATO (germany), HostEurope (Germany), Hetzner Online GmbH (Germany), Online.net or MyVirtualServer (Small company from Germany, good support and pretty cheap VPSes).

As web server i recommend NGINX (FREE) or LiteSpeed (Free or paid depending on version).

OS mostly used is Linux, which one is up to you, Debian or CentOS are the most-widely used ones on servers, DONT FORGET TO SECURE THEM.
Windows 10 1909, 4 GB DDR3 RAM, 500 GB 5400 RPM HDD, 1366 by 768 LCD Screen, Intel Core i3 5010U Dual Core, Intel HD Graphics 5500
HUAWEI P30 Pro. Android 10

Offline Shone

  • Newbie
  • *
  • Posts: 10
Re: How to remove my website from your blacklist?
« Reply #169 on: June 27, 2016, 11:00:49 PM »
Thanks Steven for your elaborate opinion.I was a fool for believing i can have site for free.  :'(

Offline bob3160

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 44082
  • 60 Years of Happiness
    • bob3160 Protecting Yourself, Your Computer and, Your Identity
Re: How to remove my website from your blacklist?
« Reply #170 on: June 27, 2016, 11:15:13 PM »
Thanks Steven for your elaborate opinion.I was a fool for believing i can have site for free.  :'(
Google Sites is free and has worked for me. :)
Free avast! Security Seminar: http://bit.ly/2N1eaR2  -  Important: http://www.organdonor.gov/ -- My Web Site: http://bob3160.strikingly.com/ - Win 10 Pro v1909 64bit, 24 Gig Ram, 1TB SSD, AvastOmni 20.7.xxx, How to Successfully Install Avast http://goo.gl/VLXdeRepair & Clean Install https://goo.gl/t7aJGq

Offline Secondmineboy

  • Avast Evangelist
  • Massive Poster
  • ***
  • Posts: 3651
Re: How to remove my website from your blacklist?
« Reply #171 on: June 27, 2016, 11:47:52 PM »
Thanks Steven for your elaborate opinion.I was a fool for believing i can have site for free.  :'(

Well you can have sites for free problem is that these are shared so you have one server that hosts dozends of sites and when one site is malicious on that server some AVs and security softwares start blocking the IP and therefore ANY site on that one server.
Windows 10 1909, 4 GB DDR3 RAM, 500 GB 5400 RPM HDD, 1366 by 768 LCD Screen, Intel Core i3 5010U Dual Core, Intel HD Graphics 5500
HUAWEI P30 Pro. Android 10

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 32687
  • malware fighter
Re: How to remove my website from your blacklist?
« Reply #172 on: June 27, 2016, 11:57:15 PM »
The shared IP domain status with the risk of being blocked,
because of bad-behaving neighbours is always existing.
Free has always come "at a price".
If that is allright for you and you do not mind, then it works for you.
On their Google monoculture platforms that price has a name and is called "AdMob",
showing personalised ads, and when developers won't pay that price,
then their apps won't get allowed into the Google webshop.

polonus
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Offline Shone

  • Newbie
  • *
  • Posts: 10
Re: How to remove my website from your blacklist?
« Reply #173 on: June 28, 2016, 12:01:43 AM »
Thanks Steven for your elaborate opinion.I was a fool for believing i can have site for free.  :'(

Well you can have sites for free problem is that these are shared so you have one server that hosts dozends of sites and when one site is malicious on that server some AVs and security softwares start blocking the IP and therefore ANY site on that one server.

Exactly. There goes credibility out of window. You cant have people trust your site when its flagged as infected. I cant show site to friends and mention every time what false positive means.. I had idea that only load time or uptime would be affected with 0 price. Not complete disaster of red flag horn saying im trying to trick my friends.

Offline Shone

  • Newbie
  • *
  • Posts: 10
Re: How to remove my website from your blacklist?
« Reply #174 on: June 28, 2016, 12:16:10 AM »
The shared IP domain status with the risk of being blocked,
because of bad-behaving neighbours is always existing.
Free has always come "at a price".
If that is allright for you and you do not mind, then it works for you.
On their Google monoculture platforms that price has a name and is called "AdMob",
showing personalised ads, and when developers won't pay that price,
then their apps won't get allowed into the Google webshop.

polonus
I expected that "price" would be ninja ads or something like that . So i checked from several IPs and was happy to find none. I knew "free" would bite me very soon, just didnt know how.

Offline Eddy

  • Avast Evangelist
  • Maybe Bot
  • ***
  • Posts: 31345
  • Watching (over?) you
    • Malware removal, Biljart and other things.
Re: How to remove my website from your blacklist?
« Reply #175 on: June 28, 2016, 07:32:17 AM »
Looks to me the problem is really easy to solve.
Don't use frames.
Frames where deprecated in HTML-4 and are obsolete in HTML-5

Offline HonzaZ

  • Avast team
  • Advanced Poster
  • *
  • Posts: 1131
Re: How to remove my website from your blacklist?
« Reply #176 on: June 28, 2016, 09:15:19 AM »
@HonzaZ is notified, he is the one with all the answers
I wish :D

Anyway, we block whole "thats.im", I can see a couple hundred subdomains on that domain and most of them are randomly generated, therefore highly suspicious.
The fact that we haven't been contacted by anyone else in the 6 months we have been blocking it also indicates that there are not many legit sites.

I suggest moving to another hosting. As others pointed out, dedicated (or at least paid) hostings usually have much better quality, but I think for a small website and a small number of visitors, some (other) free one might be suitable as well... Good luck ;)!

Offline Shone

  • Newbie
  • *
  • Posts: 10
Re: How to remove my website from your blacklist?
« Reply #177 on: June 30, 2016, 04:37:16 AM »
i rehosted my site . http://s633037578.onlinehome.us/ is this whitelisted, it seems so.

Offline Eddy

  • Avast Evangelist
  • Maybe Bot
  • ***
  • Posts: 31345
  • Watching (over?) you
    • Malware removal, Biljart and other things.
Re: How to remove my website from your blacklist?
« Reply #178 on: June 30, 2016, 10:26:39 AM »
There is malicious activity detected on that ASN :
http://urlquery.net/report.php?id=1467274091340

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 32687
  • malware fighter
Re: How to remove my website from your blacklist?
« Reply #179 on: June 30, 2016, 12:12:53 PM »
Also your WordPress settings are insecure: Warning User Enumeration is possible
The first two user ID's were tested to determine if user enumeration is possible.

ID   User   Login
1   fragmaster   fragmaster
2      None
It is recommended to rename the admin user account to reduce the chance of brute force attacks occurring. As this will reduce the chance of automated password attackers gaining access. However it is important to understand that if the author archives are enabled it is usually possible to enumerate all users within a WordPress installation.

Re: http://toolbar.netcraft.com/site_report?url=http://s633037578.onlinehome.us

SRI Hash status A = OK, this here has a meagre F-Status: https://securityheaders.io/?q=http%3A%2F%2Fs633037578.onlinehome.us%2F&followRedirects=on

polonus (volunteer website security analyst and website error-hunter)
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!