Author Topic: How to remove my website from your blacklist?  (Read 193577 times)

0 Members and 3 Guests are viewing this topic.

Offline miguel167

  • Newbie
  • *
  • Posts: 1
Re: How to remove my website from your blacklist?
« Reply #180 on: June 30, 2016, 05:37:16 PM »
Hello.

I have a little Magento ecommerce http://ribastiendaonline.com One month ago was hacked but now is clean. I noticed that Avast users get warning advise. I think my website is clean now. Can you give a feedback to know whats is the problem?

Thank you so much!

Regards


Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 32687
  • malware fighter
Re: How to remove my website from your blacklist?
« Reply #182 on: June 30, 2016, 06:44:46 PM »
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Offline Shone

  • Newbie
  • *
  • Posts: 10
Re: How to remove my website from your blacklist?
« Reply #183 on: July 01, 2016, 01:53:38 PM »
Also your WordPress settings are insecure: Warning User Enumeration is possible
The first two user ID's were tested to determine if user enumeration is possible.

ID   User   Login
1   fragmaster   fragmaster
2      None
It is recommended to rename the admin user account to reduce the chance of brute force attacks occurring. As this will reduce the chance of automated password attackers gaining access. However it is important to understand that if the author archives are enabled it is usually possible to enumerate all users within a WordPress installation.

Re: http://toolbar.netcraft.com/site_report?url=http://s633037578.onlinehome.us

SRI Hash status A = OK, this here has a meagre F-Status: https://securityheaders.io/?q=http%3A%2F%2Fs633037578.onlinehome.us%2F&followRedirects=on

polonus (volunteer website security analyst and website error-hunter)
If im supposed to hunt loopholes and spend more time securing web site than making it, whats the point.
Ill do some research and fix what i can.
« Last Edit: July 01, 2016, 02:07:57 PM by Shone »

Offline Eddy

  • Avast Evangelist
  • Maybe Bot
  • ***
  • Posts: 31345
  • Watching (over?) you
    • Malware removal, Biljart and other things.
Re: How to remove my website from your blacklist?
« Reply #184 on: July 01, 2016, 02:06:03 PM »
Keeping a site secure and bug free is part of having a website.
A website is not a "set and forget" thing.

Offline Asyn

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 66715
    • >>>  Avast Forum - Deutschsprachiger Bereich  <<<
Re: How to remove my website from your blacklist?
« Reply #185 on: July 01, 2016, 02:09:21 PM »
Keeping a site secure and bug free is part of having a website.
A website is not a "set and forget" thing.
+1
Win 8.1 [x64] - Avast PremSec 20.8.2427.B#2 [UI.560] - CC 5.71 - EEK - FF ESR 68.12 [NS/AOS/uBO/PB] - TB 68.12 - SB/CP/SL/DU.BC
Deutschsprachiger Bereich -> Avast Wissenswertes (Downloads, Anleitungen & Infos): https://forum.avast.com/index.php?topic=60523.0

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 32687
  • malware fighter
Re: How to remove my website from your blacklist?
« Reply #186 on: July 01, 2016, 02:29:56 PM »
Yes and it is not only you.
As a website owner/ website admin you also have a responsibility towards the visitors of your website.

polonus
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Offline Shone

  • Newbie
  • *
  • Posts: 10
Re: How to remove my website from your blacklist?
« Reply #187 on: July 01, 2016, 04:06:42 PM »
Yes and it is not only you.
As a website owner/ website admin you also have a responsibility towards the visitors of your website.

polonus

All In One WP Security & Firewall plugin.Do you recommend it?

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 32687
  • malware fighter
Re: How to remove my website from your blacklist?
« Reply #188 on: July 01, 2016, 04:25:41 PM »
Hi Shone,

First pay attention to the kernel software that is often fully bug-tested, when updated and fully patched.
Kernel CMS is safe, providing the general settings are right. We discussed that.
The insecurity starts with outdated and non-patched plug-in's, even left code is worse.
That plug-in may be OK when the other conditions are also met.
Mind no plug-in is always completely safe. As is demonstrated by the fact,
that this was detected in that plug-in software quite a while ago:
https://wptavern.com/serious-flaw-discovered-in-the-all-in-one-wordpress-security-and-firewall-plugin

polonus
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Offline Shone

  • Newbie
  • *
  • Posts: 10
Re: How to remove my website from your blacklist?
« Reply #189 on: July 01, 2016, 04:40:13 PM »
thanks polonus  :D

Offline HonzaZ

  • Avast team
  • Advanced Poster
  • *
  • Posts: 1131
Re: How to remove my website from your blacklist?
« Reply #190 on: July 04, 2016, 09:20:37 AM »
Yup, ribastiendaonline.com was blacklisted, it even appeared in a blogpost: https://blog.mxlab.eu/2016/05/06/new-javascript-malware-upcoming-payment-1-month-notice/
I am now unblocking it, hoping that you got rid of the insecurities that caused the infection ;)

Offline Nr_

  • Newbie
  • *
  • Posts: 4
Re: How to remove my website from your blacklist?
« Reply #191 on: July 08, 2016, 09:17:45 PM »
Hi.

A number of users on http://dgfamily.77forum.com/ have reported that Avast is blocking them from using the site. The site doesn't appear on any other blacklists according to both virustotal and urlvoid and I have no reason otherwise to believe that the site has been compromised.

Is it possible that the site could have been falsely flagged, and in that case, would it be possible for the block to be lifted?

Thanks.

Offline HonzaZ

  • Avast team
  • Advanced Poster
  • *
  • Posts: 1131
Re: How to remove my website from your blacklist?
« Reply #192 on: July 08, 2016, 09:34:59 PM »
I can access dgfamily.77forum.com without any problems. Do you have a printscreen or something that could point us to the right direction?

Offline Nr_

  • Newbie
  • *
  • Posts: 4
Re: How to remove my website from your blacklist?
« Reply #193 on: July 08, 2016, 10:08:23 PM »
Interesting. I'll ask around and see if the users that reported the issues can provide a screenshot or two. Thanks.

Offline Nr_

  • Newbie
  • *
  • Posts: 4
Re: How to remove my website from your blacklist?
« Reply #194 on: July 09, 2016, 07:30:26 AM »
I heard back from one person so far and it appears that it's the forum theme that's causing issues. http://puu.sh/pV5ID.png