Author Topic: How to remove my website from your blacklist?  (Read 193551 times)

0 Members and 1 Guest are viewing this topic.

Offline Asyn

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 66715
    • >>>  Avast Forum - Deutschsprachiger Bereich  <<<
Re: How to remove my website from your blacklist?
« Reply #660 on: March 14, 2020, 07:24:23 AM »
You can report a suspected FP (File/Website) here: https://www.avast.com/false-positive-file-form.php
Win 8.1 [x64] - Avast PremSec 20.8.2427.B#2 [UI.560] - CC 5.71 - EEK - FF ESR 68.12 [NS/AOS/uBO/PB] - TB 68.12 - SB/CP/SL/DU.BC
Deutschsprachiger Bereich -> Avast Wissenswertes (Downloads, Anleitungen & Infos): https://forum.avast.com/index.php?topic=60523.0

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 32687
  • malware fighter
Re: How to remove my website from your blacklist?
« Reply #661 on: March 14, 2020, 02:13:54 PM »
The detection could have been IP related, see: https://www.virustotal.com/gui/ip-address/23.226.129.121/relations
Checks OK.
Warning: TLS Recommendations
No redirect from HTTP to HTTPS found. You should redirect your website visitors to the HTTPS version to avoid the "Not Secure" browser warning.
JQuery risks at the hoster, see: https://www.shodan.io/host/23.226.129.121
See recommendations to improve website and website security:
https://webhint.io/scanner/3c59d854-eb12-43f4-8775-546e1ad6e065
Quote
Content that was returned by your request for the URL: hxtp://leagueoflegendsaccounts.com/
1:  Loading ...
/quote] Risk rating grade 2: https://sitereport.netcraft.com/?url=http%3A%2F%2Fleagueoflegendsaccounts.com

polonus (volunteer 3rd party cold recon website security analyst and website error-hunter)
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Offline conor_1997

  • Newbie
  • *
  • Posts: 1
Re: How to remove my website from your blacklist?
« Reply #662 on: March 20, 2020, 06:56:50 PM »
Hello,

My website appears to be getting blocked by avast for "URL:Phishing"

Can anybody advise me on how to stop my website from being blocked?

My website is an unfinished shopify store and can be found at - www.cjactive.com

Any help is very much appreciated, as this is obviously very annoying.

Thankyou.

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 83750
  • No support PMs thanks
Re: How to remove my website from your blacklist?
« Reply #663 on: March 20, 2020, 11:55:28 PM »
@ conor_1997
First  break active links(modify your post) to suspect sites, just put in the domain name, e.g. cjactive.com to avoid accidental exposure.

Second report this directly to Avast using the link posted previously:
You can report a suspected FP (File/Website) here: https://www.avast.com/false-positive-file-form.php

Avast isn't alone in blocking the site and it is considered to have low security and is a Critical (High) Security Risk.
https://sitecheck.sucuri.net/results/cjactive.com
WinXP ProSP3/ Core2Duo E8300/ 4GB Ram/ avast! free 18.5.2342/ Firefox ESR, uBlock Origin, uMatrix/ MailWasher Pro7.11.0/ DropMyRights/ WinPatrol+/ Drive Image 7.1/ SnagIt 10.0/ avast! mobile security
Windows 10 Home 2004 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 20.7.2425 (build 20.7.5568.595) UI-1.0.558/ WinPatrol+/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 32687
  • malware fighter
Re: How to remove my website from your blacklist?
« Reply #664 on: March 21, 2020, 12:30:49 AM »
Hi conor_1997,

Do as DavidR tells you and report.

Configuration settings mean that this site is insecure and also blacklisted by other av-solutions
(McAfee, Comodo, Trustwave for instance), see: hxtps://cjactive.com/password (also /admin even more insecure,
and entering excessive server info proliferation)

The hosting party is known to be into abuse of sorts (scanning the Internet),
consider: https://viz.greynoise.io/ip/23.227.38.65 which website is insecure: -http://zagat.ssl.shopify.com/

Connection to your site is not secure you should not enter any sensitive information on this site
(as actually passwords etc.)/
site cannot be reached...report to -cdn.shopify.com and CloudFlare.

Two more engines now detecting this URL: https://www.virustotal.com/gui/url/8edbbe679245d9745cf4381734909b0cd3837ccc13870fadb2d252ed7fd0569c/detection

DOM-XSS scan results: Results from scanning URL: hxtps://cjactive.com/password
Number of sources found: 13 document.cookie-index, document.write, location,pathname
Number of sinks found: 31 href=, src= & value
Quote
Following on url+ admin we could arrive at:
Weak security at uri: htXps://accounts.shopify dot com/lookup?rid=ddd8f56f-XXXXXXXXXXXXXXXXXXXX-7100564

See CSP report: script-src 'self' 'unsafe-eval' 'nonce-OTXXXXXXXXXXXXXXXczNDU3MTM=' 'nonce-6rWQg/2wNBSXXXXXXXXXXXt0hhzP4Q+V7n6D9aNf85A=' 'unsafe-inline';
style-src 'unsafe-inline' 'self';
upgrade-insecure-requests;
report-uri /csp-report?source%5Baction%5D=new&source%5Bapp%5D=identity&source%5Bcontroller%5D=account_lookup&source%5Buuid%5D=0162154301XXXXXXXXXXXXXX8210d41;  (X-rows inserted to break link)
  weak yellow alerted CSP settings. 

See for malcode detected at domains on that particular IP: https://www.virustotal.com/gui/ip-address/23.227.38.65/relations

Wait for a final verdict from avast team members (the only ones to come and eventually unblock).
But be assured with this settings in shopify your webshop is far from opening within secure settings yet  :P

polonus (volunteer 3rd party cold reconnaissance website security analyst and website error-hunter)

   
« Last Edit: March 21, 2020, 12:41:36 AM by polonus »
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Offline jefferson sant

  • Starting Graphoman
  • *
  • Posts: 6829
  • volunteer
Re: How to remove my website from your blacklist?
« Reply #665 on: March 27, 2020, 12:06:29 AM »
Hello,

My website appears to be getting blocked by avast for "URL:Phishing"

Can anybody advise me on how to stop my website from being blocked?

My website is an unfinished shopify store and can be found at - wxw.cjactive.com

Any help is very much appreciated, as this is obviously very annoying.

Thankyou.

Detection was removed in 26.03.2020 at 09:54 AM.

There were delays and therefore the much requests and nothing was reduced.Avast Threat Labs remains the same before covid-19.

Quote from: Avast
Our virus specialists have now cleared its reputation in our database.

With URLs this change should be instant, but it might take up to 24 hours with files.

Offline Kuhlmann

  • Newbie
  • *
  • Posts: 4
Re: How to remove my website from your blacklist?
« Reply #666 on: June 16, 2020, 06:56:45 PM »
Hello
My website is blocked by Avast, appears in the blaclist

https://www.sismac.info/
How do I solve it?

my page is totally clean

https://www.urlvoid.com/scan/sismac.info/

Thank you in advance for your help

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 83750
  • No support PMs thanks
Re: How to remove my website from your blacklist?
« Reply #667 on: June 16, 2020, 09:06:08 PM »
Hello
My website is blocked by Avast, appears in the blaclist

hXXps://www.sismac.info/
How do I solve it?

my page is totally clean

https://www.urlvoid.com/scan/sismac.info/

Thank you in advance for your help

Please read the topic (or at least the last 4 posts that give instructions on what to do before posting.

Break active links hXXps://www.sismac.info/ and report directly to avast
<snip>
First  break active links(modify your post) to suspect sites, just put in the domain name, e.g. hXXps://www.sismac.info/ to avoid accidental exposure.

Second report this directly to Avast using the link posted previously:
You can report a suspected FP (File/Website) here: https://www.avast.com/false-positive-file-form.php

There are other issues that you need to address. The site is considered a Medium Security Risk https://sitecheck.sucuri.net/results/sismac.info
And also https://webhint.io/scanner/a01f39cc-cc06-44f4-9884-0d5ad29cf487

WinXP ProSP3/ Core2Duo E8300/ 4GB Ram/ avast! free 18.5.2342/ Firefox ESR, uBlock Origin, uMatrix/ MailWasher Pro7.11.0/ DropMyRights/ WinPatrol+/ Drive Image 7.1/ SnagIt 10.0/ avast! mobile security
Windows 10 Home 2004 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 20.7.2425 (build 20.7.5568.595) UI-1.0.558/ WinPatrol+/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro

Offline Kuhlmann

  • Newbie
  • *
  • Posts: 4
Re: How to remove my website from your blacklist?
« Reply #668 on: June 16, 2020, 10:34:42 PM »
Hello
My website is blocked by Avast, appears in the blaclist

hXXps://www.sismac.info/
How do I solve it?

my page is totally clean

https://www.urlvoid.com/scan/sismac.info/

Thank you in advance for your help

Please read the topic (or at least the last 4 posts that give instructions on what to do before posting.

Break active links hXXps://www.sismac.info/ and report directly to avast
<snip>
First  break active links(modify your post) to suspect sites, just put in the domain name, e.g. hXXps://www.sismac.info/ to avoid accidental exposure.

Second report this directly to Avast using the link posted previously:
You can report a suspected FP (File/Website) here: https://www.avast.com/false-positive-file-form.php

There are other issues that you need to address. The site is considered a Medium Security Risk https://sitecheck.sucuri.net/results/sismac.info
And also https://webhint.io/scanner/a01f39cc-cc06-44f4-9884-0d5ad29cf487


here  hxxps://sitecheck.sucuri.net/results/sismac.info say  my website only is Outdated, my website is blocked because  outdated php version?.

Its totally clean, no have malware, virus and is using SSL

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 83750
  • No support PMs thanks
Re: How to remove my website from your blacklist?
« Reply #669 on: June 16, 2020, 10:53:14 PM »
We/I'm not concerned with links to sucuri, etc. but the the link that is causing the alert sismac.info url.

It isn't or I'm not saying that, sucuri.net is saying that A) your domain isn't blacklisted against the blacklists it checks. 

The fact that php is outdated (isn't why avast is alerting), just that outdated php (reported on the sucuri scan) makes you more likely to be exploited.

Using SSL doesn't make your site invulnerable to exploit. It ensures that the traffic between the site and user is encrypted (but that too can be broken).  There is nothing to stop malware being transferred on an HTTPS/SSL/TLS connection, why do you think avast scans all traffic including https (as do some other antiviruses).
WinXP ProSP3/ Core2Duo E8300/ 4GB Ram/ avast! free 18.5.2342/ Firefox ESR, uBlock Origin, uMatrix/ MailWasher Pro7.11.0/ DropMyRights/ WinPatrol+/ Drive Image 7.1/ SnagIt 10.0/ avast! mobile security
Windows 10 Home 2004 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 20.7.2425 (build 20.7.5568.595) UI-1.0.558/ WinPatrol+/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro

Offline Kuhlmann

  • Newbie
  • *
  • Posts: 4
Re: How to remove my website from your blacklist?
« Reply #670 on: June 16, 2020, 11:33:12 PM »
We/I'm not concerned with links to sucuri, etc. but the the link that is causing the alert sismac.info url.

It isn't or I'm not saying that, sucuri.net is saying that A) your domain isn't blacklisted against the blacklists it checks. 

The fact that php is outdated (isn't why avast is alerting), just that outdated php (reported on the sucuri scan) makes you more likely to be exploited.

Using SSL doesn't make your site invulnerable to exploit. It ensures that the traffic between the site and user is encrypted (but that too can be broken).  There is nothing to stop malware being transferred on an HTTPS/SSL/TLS connection, why do you think avast scans all traffic including https (as do some other antiviruses).


ok, can you say me, how to remove my website from AVAST blacklist?

Offline bob3160

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 44082
  • 60 Years of Happiness
    • bob3160 Protecting Yourself, Your Computer and, Your Identity
Re: How to remove my website from your blacklist?
« Reply #671 on: June 16, 2020, 11:36:37 PM »
We/I'm not concerned with links to sucuri, etc. but the the link that is causing the alert sismac.info url.

It isn't or I'm not saying that, sucuri.net is saying that A) your domain isn't blacklisted against the blacklists it checks. 

The fact that php is outdated (isn't why avast is alerting), just that outdated php (reported on the sucuri scan) makes you more likely to be exploited.

Using SSL doesn't make your site invulnerable to exploit. It ensures that the traffic between the site and user is encrypted (but that too can be broken).  There is nothing to stop malware being transferred on an HTTPS/SSL/TLS connection, why do you think avast scans all traffic including https (as do some other antiviruses).


ok, can you say me, how to remove my website from AVAST blacklist?
That's up to Avast. Have you reported it to Avast?

Report a false positive (select file or website)
https://www.avast.com/false-positive-file-form.php
Free avast! Security Seminar: http://bit.ly/2N1eaR2  -  Important: http://www.organdonor.gov/ -- My Web Site: http://bob3160.strikingly.com/ - Win 10 Pro v1909 64bit, 24 Gig Ram, 1TB SSD, AvastOmni 20.7.xxx, How to Successfully Install Avast http://goo.gl/VLXdeRepair & Clean Install https://goo.gl/t7aJGq

Offline Kuhlmann

  • Newbie
  • *
  • Posts: 4
Re: How to remove my website from your blacklist?
« Reply #672 on: June 17, 2020, 12:53:36 AM »
We/I'm not concerned with links to sucuri, etc. but the the link that is causing the alert sismac.info url.

It isn't or I'm not saying that, sucuri.net is saying that A) your domain isn't blacklisted against the blacklists it checks. 

The fact that php is outdated (isn't why avast is alerting), just that outdated php (reported on the sucuri scan) makes you more likely to be exploited.

Using SSL doesn't make your site invulnerable to exploit. It ensures that the traffic between the site and user is encrypted (but that too can be broken).  There is nothing to stop malware being transferred on an HTTPS/SSL/TLS connection, why do you think avast scans all traffic including https (as do some other antiviruses).


ok, can you say me, how to remove my website from AVAST blacklist?
That's up to Avast. Have you reported it to Avast?

Report a false positive (select file or website)
https://www.avast.com/false-positive-file-form.php


Thanks, i will do

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 32687
  • malware fighter
Re: How to remove my website from your blacklist?
« Reply #673 on: June 17, 2020, 11:08:35 AM »
Hola Kuhlmann,

Two other engines detect website here: https://www.virustotal.com/gui/url/61ff57548d73df2952a1ca05f890fc8fa21bbeb5738b56d5d6dd67f85d13a357/detection

No detections given here: https://www.virustotal.com/gui/ip-address/34.214.95.50/relations

Avast does not only block access to that main site, but also to -http://52.37.227.122/ayudasismac/configurar2014.html
as with malicious code. Just wait for an avast team member to come and unblock, as they are the only ones to do so.
So wait for a final verdict from avast's. Benign results here:
https://zulu.zscaler.com/submission/cfa70f1c-452f-4c0e-9d81-7aca2abfab2e


DOM-XSS scan results: Results from scanning URL: -https://www.sismac.info/
Number of sources found: 1
Number of sinks found: 34

Results from scanning URL: -https://www.googletagmanager.com/gtag/js?id=UA-165396073-1
Number of sources found: 40
Number of sinks found: 17

Results from scanning URL: -http://52.37.227.122/ayudasismac/js/jquery-1.10.1.min.js
Number of sources found: 40
Number of sinks found: 17

Con Dios,

polonus (volunteer 3rd party cold recon website security analyst and website error-hunter)
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Offline tehnomobi

  • Newbie
  • *
  • Posts: 1
Re: How to remove my website from your blacklist?
« Reply #674 on: July 07, 2020, 05:27:37 PM »
Hi, our website is in avast blacklist:
http://westroad.bg/
No malware in site. Pls remove from black list.