Author Topic: How to remove my website from your blacklist?  (Read 55005 times)

0 Members and 1 Guest are viewing this topic.


Offline HonzaZ

  • Avast team
  • Advanced Poster
  • *
  • Posts: 877
Re: How to remove my website from your blacklist?
« Reply #376 on: June 02, 2017, 09:25:12 AM »
Blacklisted for spreading malware: heyguyscomedy[.]com/d4jnwkc6ue.php
Hopefully it has been cleaned already, so I am unblocking it ;)

Offline Kelemen

  • Newbie
  • *
  • Posts: 2
Re: How to remove my website from your blacklist?
« Reply #377 on: June 13, 2017, 01:05:18 PM »
Hi, it was recently brought to my attention that my site kel.mn is blocked by Avast, including all the possible subdomains.

I have checked the domain using all the available online tools which were unable to find any malicious files there.

Can my domain be removed from your blacklist please?

Thanks.

Offline polonus

  • Avast Überevangelist
  • Maybe Bot
  • *****
  • Posts: 29123
  • malware fighter
Re: How to remove my website from your blacklist?
« Reply #378 on: June 13, 2017, 02:02:53 PM »
You have some security issues with your CMS:
WordPress Plugins
The following plugins were detected by reading the HTML source of the WordPress sites front page.

email-subscribers 3.2.9   latest release (3.3) Update required
http://www.icegram.com/
contact-form-7 4.7   latest release (4.8) Update required
https://contactform7.com/
Plugins are a source of many security vulnerabilities within WordPress installations, always keep them updated to the latest version available and check the developers plugin page for information about security related updates and fixes.

One jQuery library to be retired: http://retire.insecurity.today/#!/scan/fb2da25eae9ced5cfe5bbfb003dde551b1c6e3e311047136a01abb017fe07a1e

C+ status here: https://observatory.mozilla.org/analyze.html?host=kel.mn  see: recommendations.

DNS issues with CloudFlare: http://www.dnsinspect.com/kel.mn/10127457

Just wait for an Avast Team Member to come up with a verdict, and tell us why it has been blocked.
I think it is the use of problematic -zoho.mail, categorization vulnerabilities, but let's wait and see.

polonus (volunteer website security analyst and website error-hunter)
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Offline Kelemen

  • Newbie
  • *
  • Posts: 2
Re: How to remove my website from your blacklist?
« Reply #379 on: June 13, 2017, 02:10:36 PM »
You have some security issues with your CMS:
WordPress Plugins
The following plugins were detected by reading the HTML source of the WordPress sites front page.

email-subscribers 3.2.9   latest release (3.3) Update required
http://www.icegram.com/
contact-form-7 4.7   latest release (4.8) Update required
https://contactform7.com/
Plugins are a source of many security vulnerabilities within WordPress installations, always keep them updated to the latest version available and check the developers plugin page for information about security related updates and fixes.

One jQuery library to be retired: http://retire.insecurity.today/#!/scan/fb2da25eae9ced5cfe5bbfb003dde551b1c6e3e311047136a01abb017fe07a1e

C+ status here: https://observatory.mozilla.org/analyze.html?host=kel.mn  see: recommendations.

DNS issues with CloudFlare: http://www.dnsinspect.com/kel.mn/10127457

Just wait for an Avast Team Member to come up with a verdict, and tell us why it has been blocked.
I think it is the use of problematic -zoho.mail, categorization vulnerabilities, but let's wait and see.

polonus (volunteer website security analyst and website error-hunter)

Hey, thanks for the detailed report!

I guess that it was blacklisted long time ago when I was using afraid.org DNS service, but let's wait and see.

Offline polonus

  • Avast Überevangelist
  • Maybe Bot
  • *****
  • Posts: 29123
  • malware fighter
Re: How to remove my website from your blacklist?
« Reply #380 on: June 13, 2017, 02:52:42 PM »
Ha die Kelemen,

Well the problem comes indeed with free afraid dot org service, when you never know your sub-domains are/stay really yours.
You have steered away from afraid dot org, you might be good to go.

Just pay attention to the recommendations to make the site a tiny bit more secure,
and wait for an Avast Team Member to come and unblock.

We here are just volunteers with relevant knowledge. Avast Team Members do the unblocking,
sometimes even as quick as with a next upcoming streaming update,

Groetjes,

polonus
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Offline Milos

  • Avast team
  • Super Poster
  • *
  • Posts: 1706
Re: How to remove my website from your blacklist?
« Reply #381 on: June 14, 2017, 10:56:07 AM »
Hello,
domain "kel.mn" was unblocked yesterday 18:49 CET.

Milos

Offline sagyaron

  • Newbie
  • *
  • Posts: 1
Re: How to remove my website from your blacklist?
« Reply #382 on: June 18, 2017, 09:48:56 PM »
Hi Milos
My website is also block, sagiagency[.]com , i've change server and dns, I would be happy if you could please help me unblock the website.
thank you in advance.
Yaron
« Last Edit: June 19, 2017, 08:57:01 AM by HonzaZ »


Offline Asyn

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 45881
    • >>>  Avast Forum - Deutschsprachiger Bereich  <<<
Re: How to remove my website from your blacklist?
« Reply #384 on: June 18, 2017, 10:09:39 PM »
You can report a URL here: https://www.avast.com/report-a-url.php
Windows 8.1 [64-Bit] - Avast 17.5.2302.Beta8 - CCleaner 5.31 [OD] - MCShield [OD] - Firefox ESR 52.2 [NS/uBO] - Thunderbird 52.2.1 [EM]
Deutschsprachiger Bereich -> Avast Wissenswertes (Downloads, Anleitungen und Infos): https://forum.avast.com/index.php?topic=60523.0

Offline polonus

  • Avast Überevangelist
  • Maybe Bot
  • *****
  • Posts: 29123
  • malware fighter
Re: How to remove my website from your blacklist?
« Reply #385 on: June 18, 2017, 10:30:38 PM »
Hi Yaron, יום טוב

Adding to what Eddy so aptly reported,

It is not only avast that blocks, it is also blocked by Bitdefender's TrafficLight.

DNS issue: Name Servers Versions
WARNING: Name servers software versions are exposed:
188.166.127.243: "9.9.4-RedHat-9.9.4-29.el7_2.3"
212.129.26.2: "9.9.4-RedHat-9.9.4-29.el7_2.3"

Exposing name server's versions may be risky, when a new vulnerability is found your name servers may be automatically exploited by script kiddies until you patch the system. Take this up with the hoster of the name server(s).

Let's encrypt Authority X3 certificate is installed correctly, same origin aka sri-hashes also properly created.

What was flagged, the counter adware, has now not been detected, wait for an Avast Team Member to give the definite verdict.

We are just volunteers with relevant knowledge, but only Avast Team Members can unblock.
Wait until until  coming Monday, when one is to appear here.

polonus (volunteer website security analyst and website error-hunter)
כֹּל טוּב
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Offline HonzaZ

  • Avast team
  • Advanced Poster
  • *
  • Posts: 877
Re: How to remove my website from your blacklist?
« Reply #386 on: June 19, 2017, 08:58:32 AM »
I have removed sagiagency[.]com from our blacklist ;)!

Offline D=a=

  • Newbie
  • *
  • Posts: 1
Re: How to remove my website from your blacklist?
« Reply #387 on: June 23, 2017, 12:41:36 PM »
Hi there,

our website deigualaigual[.]net and its subdomains have passed the tests of urlvoid, pingdom, virustotal, with the result that the web and its subdomines are clean, so we need  it to be removed from the blacklist of avast. Thanks.

Regards.

Offline Pondus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 32791
Re: How to remove my website from your blacklist?
« Reply #388 on: June 23, 2017, 12:48:36 PM »
Hi there,

our website deigualaigual[.]net and its subdomains have passed the tests of urlvoid, pingdom, virustotal, with the result that the web and its subdomines are clean, so we need  it to be removed from the blacklist of avast. Thanks.

Regards.
probably because you are using afraid.org free host
Nameservers: ns2.afraid.org, ns3.afraid.org, ns4.afraid.org, ns1.afraid.org


Chief Wiggum: Uh, no, you got the wrong number. This is 9-1…2.


Offline Asyn

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 45881
    • >>>  Avast Forum - Deutschsprachiger Bereich  <<<
Windows 8.1 [64-Bit] - Avast 17.5.2302.Beta8 - CCleaner 5.31 [OD] - MCShield [OD] - Firefox ESR 52.2 [NS/uBO] - Thunderbird 52.2.1 [EM]
Deutschsprachiger Bereich -> Avast Wissenswertes (Downloads, Anleitungen und Infos): https://forum.avast.com/index.php?topic=60523.0