Author Topic: How to remove my website from your blacklist?  (Read 193497 times)

0 Members and 1 Guest are viewing this topic.

Offline Eddy

  • Avast Evangelist
  • Maybe Bot
  • ***
  • Posts: 31345
  • Watching (over?) you
    • Malware removal, Biljart and other things.
Re: How to remove my website from your blacklist?
« Reply #390 on: June 23, 2017, 12:58:18 PM »
VirusTotal does not scan websites.

You are linking to a blacklisted website.
You are using afraid.org as nameserver.
https://forum.avast.com/?topic=148018.msg1075293#msg1075293

Wordpress issue :
Warning User Enumeration is possible
The first two user ID's were tested to determine if user enumeration is possible.
ID   User    Login
1   None   jomra
2   None   ruben-i-kotler

Vulnerable libraries that need to be retired :
http://retire.insecurity.today/#!/scan/eee01fc5ba9f903547544199bf66601c40a4bd50c299721d49984a7accdb27f4
http://zulu.zscaler.com/submission/show/4a3498bcb2f07a658bf777af210ab50e-1498214764

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 32687
  • malware fighter
Re: How to remove my website from your blacklist?
« Reply #391 on: June 23, 2017, 04:29:12 PM »
Using a free afraid dot org account means a clear security risk as you will not know who is the owner of your sub-domain(s)?
That is the risk.

For the script risks given by zulu.zsclaer scan result flagged, see: http://www.domxssscanner.com/scan?url=http%3A%2F%2Fwww.deigualaigual.net%2Fwp-includes%2Fjs%2Fjquery%2Fjquery.js%3Fver%3D1.12.4
with errors:
Quote
error: line:5: SyntaxError: missing ) in parenthetical:
          error: line:5: .events)n.removeEvent(b,d,e.handle);b.removeAttribute(n.expando)}"script"===c&&b.text!==a.text?(Da(b).text=a.text,Ea(b)):"object"===c?(b.parentNode&&(b.outerHTML=a.outerHTML),l.html5Clone&&a.innerHTML&&!n.trim(b.innerHTML)&&(b.innerHTML=a.innerHTML)):
          error: line:5:
means the output of the server is invalid, post action not well formed.
Yep, da old javascript it could often be a bitch!
Blocked for me by uMatrix external script, see: https://urlscan.io/result/cd26875b-61df-4fcf-a304-fc6ce2f023d3#summary
Also see api-scan for external script: https://urlscan.io/api/v1/result/cd26875b-61df-4fcf-a304-fc6ce2f023d3/

polonus (volunteer website security analyst and website error-hunter)
« Last Edit: June 23, 2017, 04:44:17 PM by polonus »
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Offline miroslav.braikov

  • Newbie
  • *
  • Posts: 1
Re: How to remove my website from your blacklist?
« Reply #392 on: July 16, 2017, 11:16:46 PM »
hxxp://vic[.]bg is reported as infected, but it is not
i've checked it with
https://sitecheck.sucuri.net/results/vic.bg/

what i have to do in order to be removed of your blacklist?
« Last Edit: July 18, 2017, 10:21:48 AM by HonzaZ »

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 32687
  • malware fighter
Re: How to remove my website from your blacklist?
« Reply #393 on: July 17, 2017, 12:02:33 AM »
Hi miroslav.braikov,

Wait for an avast team member to give the final verdict and eventually unblock.
We are volunteers with relevant knowledge but cannot unblock as that is for avast team members.

Still the security of your website could be somewhat improved.
Re: http://www.dnsinspect.com/vic.bg/10155323  (stealthed name servers and Found mail servers with inconsistent reverse DNS entries). 
Re: https://aw-snap.info/file-viewer/?protocol=not-secure&tgt=vic.bg%2F&ref_sel=GSP2&ua_sel=ff&fs=1   seems OK.
Server maybe Mute Remote vulnerable.
Vulnerable bootstrap library to be retired: http://retire.insecurity.today/#!/scan/e610cc95b2d8cce37b099473066cbad28eba676d4bdc100863126752c60f1f0e
F-status and see recommendations: https://observatory.mozilla.org/analyze.html?host=vic.bg

polonus (volunteer website security analyst and website error-hunter)
« Last Edit: July 17, 2017, 12:19:01 AM by polonus »
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Offline HonzaZ

  • Avast team
  • Advanced Poster
  • *
  • Posts: 1131
Re: How to remove my website from your blacklist?
« Reply #394 on: July 18, 2017, 10:23:56 AM »
Hi,
There was a false positive on a favicon.ico file (hxxp://vic[.]bg/imgs/vicBG.ico)... I have disabled the detection, it should be okay in the next VPS, but you might want to remove the .ico file to be able to access it before the update rolls out ;)

Offline glauciojcmachado

  • Newbie
  • *
  • Posts: 1
Re: How to remove my website from your blacklist?
« Reply #395 on: July 31, 2017, 02:16:57 AM »
Também estou com este problema. Meu site não tem nada de errado com ele, mas todos os usuários avast reclamam. Como podem retirar da lista negra?
I'm also having this problem. My site has nothing wrong with it, but all avast users complain. How can they be blacklisted?
https://www.gravityscan.com/verify/c49dbb2d2e31f4a2fd732050addb2af599494b1383a97a2eaee2a8a28629ebda
https://www.google.com/transparencyreport/safebrowsing/diagnostic/?hl=pt-BR#url=universodovinil.com.br
Agradeço a atenção

Offline Asyn

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 66715
    • >>>  Avast Forum - Deutschsprachiger Bereich  <<<
Win 8.1 [x64] - Avast PremSec 20.8.2427.B#2 [UI.560] - CC 5.71 - EEK - FF ESR 68.12 [NS/AOS/uBO/PB] - TB 68.12 - SB/CP/SL/DU.BC
Deutschsprachiger Bereich -> Avast Wissenswertes (Downloads, Anleitungen & Infos): https://forum.avast.com/index.php?topic=60523.0

Offline HonzaZ

  • Avast team
  • Advanced Poster
  • *
  • Posts: 1131
Re: How to remove my website from your blacklist?
« Reply #397 on: July 31, 2017, 09:02:55 AM »
universodovinil[.]com.br was blocked because it was a router CSRF source. I am now unblocking the domain, but note that it will be automatically blocked again if there is another attack from it.

Offline Michał89

  • Newbie
  • *
  • Posts: 2
Re: How to remove my website from your blacklist?
« Reply #398 on: August 30, 2017, 11:03:13 AM »
Hi

My all malicious links has been removed from http://maricom[.]pl and Wordpress has been reinstaled and updated. Can you remove my site from your blacklist.

Offline Asyn

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 66715
    • >>>  Avast Forum - Deutschsprachiger Bereich  <<<
Re: How to remove my website from your blacklist?
« Reply #399 on: August 30, 2017, 12:32:30 PM »
You can report a URL here: https://www.avast.com/report-a-url.php
Win 8.1 [x64] - Avast PremSec 20.8.2427.B#2 [UI.560] - CC 5.71 - EEK - FF ESR 68.12 [NS/AOS/uBO/PB] - TB 68.12 - SB/CP/SL/DU.BC
Deutschsprachiger Bereich -> Avast Wissenswertes (Downloads, Anleitungen & Infos): https://forum.avast.com/index.php?topic=60523.0



Offline Stareclipse

  • Newbie
  • *
  • Posts: 2
Re: How to remove my website from your blacklist?
« Reply #402 on: August 30, 2017, 09:35:10 PM »
Hello, our website Asrcargo.ru is blocked again, despite it has been broken only once in 2016. Since that time the site was blocked by Avast several times without any reasons, so I write messages every month or two.

The site is absolutely clean, confirmed by Google Search Console, access is under 2 factor authentication, no any malware, scripts or viruses detected. Please check and delete our domain from your database.

Offline bob3160

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 44082
  • 60 Years of Happiness
    • bob3160 Protecting Yourself, Your Computer and, Your Identity
Re: How to remove my website from your blacklist?
« Reply #403 on: August 30, 2017, 09:45:50 PM »
Free avast! Security Seminar: http://bit.ly/2N1eaR2  -  Important: http://www.organdonor.gov/ -- My Web Site: http://bob3160.strikingly.com/ - Win 10 Pro v1909 64bit, 24 Gig Ram, 1TB SSD, AvastOmni 20.7.xxx, How to Successfully Install Avast http://goo.gl/VLXdeRepair & Clean Install https://goo.gl/t7aJGq

Offline Stareclipse

  • Newbie
  • *
  • Posts: 2
Re: How to remove my website from your blacklist?
« Reply #404 on: August 30, 2017, 10:00:29 PM »
Many thanks!! I searched this page for so a long time!


Report a URL
https://www.avast.com/report-a-url.php