Author Topic: Why is my site blacklisted?  (Read 12563 times)

0 Members and 1 Guest are viewing this topic.

Offline freetvhelpdesk

  • Newbie
  • *
  • Posts: 17
Why is my site blacklisted?
« on: February 06, 2016, 12:01:47 PM »
Hi, my site keeps getting blacklisted by Avast, although its clean by all major virus scanners.
This is causing me serious issues with my visitors, because avast is very popular in my country.
Please, fix this.
« Last Edit: May 03, 2020, 02:22:33 AM by freetvhelpdesk »

Offline Eddy

  • Avast Evangelist
  • Maybe Bot
  • ***
  • Posts: 31079
  • Watching (over?) you
    • Malware removal, Biljart and other things.
Re: Why is my site blacklisted?
« Reply #1 on: February 06, 2016, 01:17:56 PM »
As has been explained a lot of times already...
URL:Mal = IP and/or Domain is blacklisted

Redirection, suspicious IFrame, suspicious scripts :
http://www.web-malware-removal.com/website-malware-virus-scanner/?url=www.sportvdireto.online

Parked domain:
http://zulu.zscaler.com/submission/show/2b301e59387393ae476e016aafcca151-1454761260
« Last Edit: February 06, 2016, 01:31:23 PM by Eddy »

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33900
  • malware fighter
Re: Why is my site blacklisted?
« Reply #2 on: February 06, 2016, 01:58:05 PM »
Quttera detects: http://quttera.com/detailed_report/sporttvdirecto.org  (redirections)
Probably IP related: https://www.virustotal.com/en/ip-address/104.27.156.254/information/
Furthermore 1 error and 3 warnings detected: https://mxtoolbox.com/domain/desportonline.com/
Adware and tracking related scripts on your site come blocked for me by a script blocker!
This is blocked for me at your site: -http://s10.histats.com/js15.js & -http://dsms0mj1bbhn4.cloudfront.net/v2/c583ee95b4cd4d90f006e909aa60e15f526c7f3c/apps/sharebuttons/app.js
as ad- and tracking.  Script blockers block: -https://partner.shareaholic.com/partners.js?location=http%3A%2F%2Fwww.desportonline.com%2F&canonical=http%3A%2F%2Fwww.desportonline.com%2F&site=f0346e9849b4811d01c594949b56c96e & -http://px.owneriq.net/stas/s/sholic.js & -http://px.owneriq.net/eexelate.js?pc=sholic&eid=0&uid=Q5080488672114184924J & -http://api.viglink.com/api/domains

polonus (volunteer website security analyst and website error-hunter)
« Last Edit: February 06, 2016, 02:15:33 PM by polonus »
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Offline freetvhelpdesk

  • Newbie
  • *
  • Posts: 17
Re: Why is my site blacklisted?
« Reply #3 on: February 06, 2016, 02:11:17 PM »
I see...but you realize that Cloudflare, Shareaholic, and Histats, are idoneous companies, and those scripts are being blocked by mistake, right?

Offline Eddy

  • Avast Evangelist
  • Maybe Bot
  • ***
  • Posts: 31079
  • Watching (over?) you
    • Malware removal, Biljart and other things.
Re: Why is my site blacklisted?
« Reply #4 on: February 06, 2016, 02:17:19 PM »
No, they are not blocked by mistake.
A script blocker that doesn't block (certain) scripts would not make any sense.

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33900
  • malware fighter
Re: Why is my site blacklisted?
« Reply #5 on: February 06, 2016, 02:36:13 PM »
As Eddy says here, there is always something to it,when and why it is being blocked, for instance read here: http://www.pamelahazelton.com/social-media-tips-for-small-businesses/wordpress-shareaholic-viglink/

A lot of users use ad- and scriptblocking also to be protected against certain kinds of threats (fraudulent clicks, adware, malicious adverts etc.). At least some of these bulkhosters have some dubious reputation, not malicious per se. But for Cloudflare read here:
http://www.crimeflare.com/cfssl.html
(About the nature of the site and contents that is open to some discussion, but general conclusions seem convincing.)
More information:
- http://www.unrest.ca/cloudflare-keyless-ssl-and-the-selling-of-secure
- https://blog.cloudflare.com/keyless-ssl-the-nitty-gritty-technical-details/
- https://scotthelme.co.uk/cloudflares-great-new-features-and-why-i-wont-use-them/
- https://scotthelme.co.uk/tls-conundrum-and-leaving-cloudflare/
- https://www.reddit.com/r/programming/comments/2grd1d/cloudflare_annouces_keyless_ssl/
- http://arstechnica.com/information-technology/2014/09/in-depth-how-cloudflares-new-web-service-promises-security-without-the-key/

As you asked about it, I think you deserve a reply like this.

polonus
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Offline freetvhelpdesk

  • Newbie
  • *
  • Posts: 17
Re: Why is my site blacklisted?
« Reply #6 on: February 06, 2016, 03:26:48 PM »
I will remove Shareaholic and see what happens, i highly doubt cloudflare has anything to do with that...even so, Avast is the only one complainting about my website...  :-X

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33900
  • malware fighter
Re: Why is my site blacklisted?
« Reply #7 on: February 06, 2016, 03:40:55 PM »
Hi  freetvhelpdesk,

It would be interesting to know why Avast blocks your website, let us wait for an Avast Team Member to respond.
We here are volunteers with relevant knowledge. I too certainly doubt that Cloudflare has been flagged, as we do not see Avast flag invalid SSL signatures recently. So wait for an Avast Team Member to reply, he has been informed, but this may be after the weekend.

polonus
« Last Edit: February 07, 2016, 01:25:42 AM by polonus »
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Offline freetvhelpdesk

  • Newbie
  • *
  • Posts: 17
Re: Why is my site blacklisted?
« Reply #8 on: February 07, 2016, 12:08:28 AM »
I removed Shareaholic and no effect until now, let´s wait for a Tech then...i too am curious about the reason for this.


Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33900
  • malware fighter
Re: Why is my site blacklisted?
« Reply #10 on: February 07, 2016, 12:34:49 AM »
Hi Eddy,

A very likely candidate for a block, as DrWeb has it blacklisted:
Quote
htxp://s10.histats.com/js15.js is in Dr.Web malicious sites list!
But let's wait for the final word from Avast Team  ;)

Damian

Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Offline HonzaZ

  • Avast team
  • Advanced Poster
  • *
  • Posts: 1038
Re: Why is my site blacklisted?
« Reply #11 on: February 07, 2016, 07:02:15 AM »
I do not see any malicious activity on the domain now, so I unblocked it ;)

Offline freetvhelpdesk

  • Newbie
  • *
  • Posts: 17
Re: Why is my site blacklisted?
« Reply #12 on: February 07, 2016, 08:31:44 PM »
Hi HonzaZ, first of all thank you, but it is still blocked here.


Offline HonzaZ

  • Avast team
  • Advanced Poster
  • *
  • Posts: 1038
Re: Why is my site blacklisted?
« Reply #13 on: February 07, 2016, 08:37:41 PM »
Can you try turning off your shields, then turning them back on, then accessing your website again?

Offline Eddy

  • Avast Evangelist
  • Maybe Bot
  • ***
  • Posts: 31079
  • Watching (over?) you
    • Malware removal, Biljart and other things.
Re: Why is my site blacklisted?
« Reply #14 on: February 07, 2016, 10:16:49 PM »
Perhaps the OP doesn't have the latest vps/stream-updates.