Author Topic: How to remove my website from your blacklist?  (Read 193557 times)

0 Members and 1 Guest are viewing this topic.

Offline JudasPerge

  • Newbie
  • *
  • Posts: 2
Re: How to remove my website from your blacklist?
« Reply #465 on: July 03, 2018, 09:02:51 AM »
Hello HonzaZ and Polonus,

Thanks a lot for your help !

Have a nice day.

Offline Александр562

  • Newbie
  • *
  • Posts: 4
Re: How to remove my website from your blacklist?
« Reply #466 on: July 03, 2018, 09:13:06 AM »
Hello, HonzaZ.
It seems we are ( hxxps://login.hma.ecvi[.]ru/ )  still blocked. Also we have avast business antivirus version.

IMG here https://cloud.mail.ru/public/7EAZ/QiMYCR9tC


Offline HonzaZ

  • Avast team
  • Advanced Poster
  • *
  • Posts: 1131
Re: How to remove my website from your blacklist?
« Reply #467 on: July 03, 2018, 09:28:10 AM »
I have disabled another detection on login.hma.ecvi[.]ru/login, hopefully it will be okay in a couple of minutes!

Offline Александр562

  • Newbie
  • *
  • Posts: 4
Re: How to remove my website from your blacklist?
« Reply #468 on: July 03, 2018, 10:25:37 AM »
HonzaZ, thx works fine!

Offline Seppi

  • Newbie
  • *
  • Posts: 3
Re: How to remove my website from your blacklist?
« Reply #469 on: July 03, 2018, 03:47:13 PM »
Hi all

Avast for Windows shows our website to be malicious. But we checked several times using local scans as well as external ones:

https://www.virustotal.com
http://zulu.zscaler.com
http://dnscheck.pingdom.com
http://www.siteadvisor.com

None of those showed a problem with our site. Also tried to send a deblock request to Avast, but they ignored it multiple times now. What should we do?

Thanks & regards

Offline bob3160

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 44082
  • 60 Years of Happiness
    • bob3160 Protecting Yourself, Your Computer and, Your Identity
Re: How to remove my website from your blacklist?
« Reply #470 on: July 03, 2018, 03:51:10 PM »
Hi all

Avast for Windows shows our website to be malicious. But we checked several times using local scans as well as external ones:

https://www.virustotal.com
http://zulu.zscaler.com
http://dnscheck.pingdom.com
http://www.siteadvisor.com

None of those showed a problem with our site. Also tried to send a deblock request to Avast, but they ignored it multiple times now. What should we do?

Thanks & regards
And the website in question is ???
Free avast! Security Seminar: http://bit.ly/2N1eaR2  -  Important: http://www.organdonor.gov/ -- My Web Site: http://bob3160.strikingly.com/ - Win 10 Pro v1909 64bit, 24 Gig Ram, 1TB SSD, AvastOmni 20.7.xxx, How to Successfully Install Avast http://goo.gl/VLXdeRepair & Clean Install https://goo.gl/t7aJGq

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 32687
  • malware fighter
Re: How to remove my website from your blacklist?
« Reply #471 on: July 03, 2018, 06:42:46 PM »
Hi Seppi,

Yes, curious to give it the 3rd party quick and dirty, give the link broken like htxp/htxps or -http or -https or . = dot etc.
and we see whether we can establish what caused the malware alert(s)? Is it hosted at afraid dot org for instance, that could be a reason your sub-domains aren't your sub-domains anymore  ;) and for avast alerts.

polonus
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Offline Rospez

  • Newbie
  • *
  • Posts: 2
Re: How to remove my website from your blacklist?
« Reply #472 on: July 03, 2018, 07:26:39 PM »
Hello,
I have an url (not the whole site) that is being blocked for URL:Mal
The page is hxxp://wxw.ik3qar[.]it/software/qarteXt_ita/download/QARTeXt_ITA_Setup.php

Adding at the end the GET params ?d=ok it should start software download (that's my software), while without params it is a redirect to the previous page. In both cases it is detected as a URL:Mal

Can you check for it ?
Thanks!
« Last Edit: July 05, 2018, 10:18:38 AM by Rospez »

Offline suporte68

  • Newbie
  • *
  • Posts: 1
Re: How to remove my website from your blacklist?
« Reply #473 on: July 04, 2018, 05:22:56 PM »
Hi Avast,

We are an ecommerce solutions provider and some of our clients are being flagged as phishing sites:
ibramacelastic.conexaossl.com.br
elasticibramac.conexaossl.com.br
barzel.conexaossl.com.br

We believe that its a mistake due to the use of a wildcard SSL in their stores.

Could you please remove them from the blacklist?

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 32687
  • malware fighter
Re: How to remove my website from your blacklist?
« Reply #474 on: July 04, 2018, 09:15:35 PM »
Hi suporte68,

Just dove into one of these domains,

Re: https://aw-snap.info/file-viewer/?protocol=not-secure&tgt=barzel.conexaossl.com.br&ref_sel=GSP2&ua_sel=ff&fs=1
Re: low security risk given: https://sitecheck.sucuri.net/results/barzel.conexaossl.com.br
Two warning and a error:fail -> https://sitecheck.sucuri.net/results/barzel.conexaossl.com.br
Two retirable jQuery libraries detected: https://retire.insecurity.today/#!/scan/d55cc763e4906344d62079952c39c3f1412c60bfeaa661ae008c6bdfa1d0ff17
77 security issues (important and minor issues): https://sonarwhal.com/scanner/11a46790-27a3-49d8-b366-e9d130a69e3c
F-grade status and recommendations: https://observatory.mozilla.org/analyze/barzel.conexaossl.com.br
Netcraft risk rating 1 red out of 10: https://toolbar.netcraft.com/site_report?url=barzel.conexaossl.com.br

Let these websites run https://certbot.eff.org/ to properly enable HTTPS on their websites.

Just wait for a final verdict from an avast team member as they are to only ones to come and unblock.

We here are just volunteers with relevant knowledge through 3rd party cold reconnaissance website security analysis.

polonus (volunteer website security analyst and website error-hunter)
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 32687
  • malware fighter
Re: How to remove my website from your blacklist?
« Reply #475 on: July 04, 2018, 09:26:46 PM »
To Rospez,

This is what heuristical scanning turns out at VT -> https://www.virustotal.com/#/domain/www.ik3qar.it
Probably blocked as a PHISHING detection by Avira's: https://www.virustotal.com/#/url/82d6ad6bbeaa42a8e9b94f5bfe136f614468844246ee0f7fbbd7f825aa9d2f76/detection

Consider: https://observatory.mozilla.org/analyze/ik3qar.it

polonus (volunteer website security analyst and website error-hunter)
« Last Edit: July 04, 2018, 09:32:24 PM by polonus »
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Offline Rospez

  • Newbie
  • *
  • Posts: 2
Re: How to remove my website from your blacklist?
« Reply #476 on: July 05, 2018, 10:17:29 AM »
Thanks Polonus,
most (all) of the warnings shown are old, and the link which was potenitially subject to SQLInjection was removed, other were fixed.

I still don't know  the reason of the virus warning, but following my false-positive form fill, warnings were removed and recognized as false positive.

Thanks for help!

Offline Seppi

  • Newbie
  • *
  • Posts: 3
Re: How to remove my website from your blacklist?
« Reply #477 on: July 06, 2018, 09:24:08 AM »
Hi all

Avast for Windows shows our website to be malicious. But we checked several times using local scans as well as external ones:

https://www.virustotal.com
http://zulu.zscaler.com
http://dnscheck.pingdom.com
http://www.siteadvisor.com

None of those showed a problem with our site. Also tried to send a deblock request to Avast, but they ignored it multiple times now. What should we do?

Thanks & regards
And the website in question is ???

Hi, sorry, here it is: hxxps://wildagzug[.]ch/

Still blocked at Avast ... an idea, anyone?
« Last Edit: July 09, 2018, 09:54:08 AM by HonzaZ »

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 32687
  • malware fighter
Re: How to remove my website from your blacklist?
« Reply #478 on: July 06, 2018, 02:56:09 PM »
It is a general IP detection for your IP caused by another domain sharing the same IP that has been infested: https://urlquery.net/report/7755d347-6acd-4b44-83f6-501812258b79

As your domain does not seem to spread malware: https://aw-snap.info/file-viewer/?protocol=secure&tgt=wildagzug.ch%2F&ref_sel=GSP2&ua_sel=ff&fs=1

Ask for unblocking your domain by an avast team member.
We here are just volunteers with relevant knowledge, but only avast team can come and unblock.

Some improvements you can make with 134 security glitches:
See: https://sonarwhal.com/scanner/5109397b-af5a-4da7-86cf-9ec4994ae1df
F-status and recommendations here: https://observatory.mozilla.org/analyze/wildagzug.ch

Also consider scan results here: https://www.htbridge.com/websec/?id=0Dchzc6R
also: https://asafaweb.com/Scan?Url=https%3A%2F%2Fwildagzug.ch

polonus (volunteer website security analyst and website error-hunter)
« Last Edit: July 06, 2018, 03:28:27 PM by polonus »
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Offline HonzaZ

  • Avast team
  • Advanced Poster
  • *
  • Posts: 1131
Re: How to remove my website from your blacklist?
« Reply #479 on: July 09, 2018, 09:49:39 AM »
Rospez, ik3qar[.]it/software/qartest_ita/download/qartest_ita_setup.php was unblocked 04.07., 11:08 CEST.