Author Topic: Remove My URL From Avast Blacklist  (Read 2736 times)

0 Members and 1 Guest are viewing this topic.

Offline Muhammad Arafath

  • Newbie
  • *
  • Posts: 1
Remove My URL From Avast Blacklist
« on: August 12, 2017, 02:50:02 PM »
hello sir,
 my name is muhammad arafath and iam started my web site on 14-11-2009 and i am using domain name netbabies.in hosted at wapak.mobi now is changed to another hosting provider.
but still avast shows my site url as a spam or malware site please check out my site and please remove from your blacklist, sincerely Arafath. Thank you.

Scan Report.
https://www.virustotal.com/#/url/e64fd0184d8b114670964685ee613ccef6719bc3e2246b410be5a5ef478dd947/detection

Offline Asyn

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 59502
    • >>>  Avast Forum - Deutschsprachiger Bereich  <<<
Re: Remove My URL From Avast Blacklist
« Reply #1 on: August 12, 2017, 03:45:08 PM »
You can report a URL here: https://www.avast.com/report-a-url.php
Win 8.1 [x64] - Avast Premier 19.6.2382.Beta#4 - CC 5.58 - MCS - EEK - FF ESR 60.7 [NS/AOS/uBO] - TB 60.7.1 [EM] - ACP/ASB/ASL.BC
Deutschsprachiger Bereich -> Avast Wissenswertes (Downloads, Anleitungen & Infos): https://forum.avast.com/index.php?topic=60523.0

Offline polonus

  • Avast Überevangelist
  • Maybe Bot
  • *****
  • Posts: 31438
  • malware fighter
Re: Remove My URL From Avast Blacklist
« Reply #2 on: August 12, 2017, 09:00:53 PM »
Hi Muhammad Arafath,

IP was being reported as being a squatting domain: https://www.abuseipdb.com/check/204.11.58.194
on a website with risk rating grade 7: http://toolbar.netcraft.com/site_report?url=http://bh-cp-21.webhostbox.net

This inside the source: -https://malayalamsong.000webhostapp.com/  Does it not conflict with any DRM?  Free MP3 download?
linked IP also reported for scam & PHISHING abuse - carding etc.: https://www.abuseipdb.com/check/145.14.144.86

See suspicous content after the HTML tag line 46 to and including 69-> https://aw-snap.info/file-viewer/?protocol=not-secure&tgt=malayalamsong.000webhostapp.com&ref_sel=GSP2&ua_sel=ff&fs=1
CDN seems OK: http://toolbar.netcraft.com/site_report?url=https://cloud.githubusercontent.com

We here are just volunteers with relevant knowledge, but Avast Team Members can unblock,
wait for one to appear here and give a final verdict.

polonus (volunteer website security analyst and website error-hunter)
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Offline LukasJ

  • Avast team
  • Jr. Member
  • *
  • Posts: 71
Re: Remove My URL From Avast Blacklist
« Reply #3 on: August 14, 2017, 09:17:03 AM »
Hi guys,
Thanks for additional information.
URL has been removed from blacklist.

Lukáš

Offline marfstar

  • Newbie
  • *
  • Posts: 1
Re: Remove My URL From Avast Blacklist
« Reply #4 on: February 21, 2019, 02:42:28 PM »
Can you remove https://housesigma.com/web/en
from URL blacklist?

I keep getting we've safely aborted connection on images.fangintel.com because it was infected with URL:Blacklist
when I go to the above site....
Thanks,
Eric

Offline polonus

  • Avast Überevangelist
  • Maybe Bot
  • *****
  • Posts: 31438
  • malware fighter
Re: Remove My URL From Avast Blacklist
« Reply #5 on: February 21, 2019, 02:53:18 PM »
Flagged for android malcode: https://www.virustotal.com/#/domain/housesigma.com
Redirecting: System info
IP addresses159.203.51.250
ServerNginx 1.12.2
Redirects
Redirects to -https://housesigma.com/
Redirects to -https://housesigma.com/web/en
Ads/analytics
Google AnalyticsUA-117117273-1

Re: Results from scanning URL there: -https://cdn.klokantech.com/mapbox-gl-js/v0.43.0/mapbox-gl.js
Number of sources found: 105 ; number of sinks found: 40

Wait for an avast team member to give a final verdict,

polonus (volunteer website security analyst and website error-hunter)
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Offline elad4

  • Newbie
  • *
  • Posts: 1
Re: Remove My URL From Avast Blacklist
« Reply #6 on: May 30, 2019, 12:47:20 PM »
Hi guys,
Thanks for additional information.
URL has been removed from blacklist.

Lukáš

Hi Lukas,
I have the same problem with my website https://www.top10antivirussoft.com/
Can you please take it off from the blacklist?

Best regards
Elad
elad@toprated10.com

Offline Asyn

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 59502
    • >>>  Avast Forum - Deutschsprachiger Bereich  <<<
Win 8.1 [x64] - Avast Premier 19.6.2382.Beta#4 - CC 5.58 - MCS - EEK - FF ESR 60.7 [NS/AOS/uBO] - TB 60.7.1 [EM] - ACP/ASB/ASL.BC
Deutschsprachiger Bereich -> Avast Wissenswertes (Downloads, Anleitungen & Infos): https://forum.avast.com/index.php?topic=60523.0

Offline polonus

  • Avast Überevangelist
  • Maybe Bot
  • *****
  • Posts: 31438
  • malware fighter
Re: Remove My URL From Avast Blacklist
« Reply #8 on: May 30, 2019, 06:57:21 PM »
Blacklisted because of -https://static.hotjar.com/c/hotjar-1142600.js?sv=6  malcode

Issues in Word Press CMS config: User Enumeration
  The first two user ID's were tested to determine if user enumeration is possible.

ID   User   Login
1   Elad   sadmin
2   None   None
It is recommended to rename the admin user account to reduce the chance of brute force attacks occurring. As this will reduce the chance of automated password attackers gaining access. However it is important to understand that if the author archives are enabled it is usually possible to enumerate all users within a WordPress installation.

Medium risk: TLS Recommendations
No redirect from HTTP to HTTPS found. You should redirect your website visitors to the HTTPS version to avoid the "Not Secure" browser warning.

198 improvement recommendations, also security related hints:
https://webhint.io/scanner/ef4849b0-d83f-462d-b638-ff2296c3981e

2 retirable jQuery libraries detected: https://retire.insecurity.today/#!/scan/582407fdcd5f1e41e9fda3fac12c183bc46b4f22d5abed570357b438e9ec1c93

Security threat risk: Security Checks for -www.top10antivirussoft.com
(3) Susceptible to man-in-the-middle attacks
(4) Domain at risk of being hijacked
Vulnerabilities can be uncovered more easily
Vulnerable to cross-site attacks
Emails can be fraudulently sent
(3) Unnecessary open ports
DNS is susceptible to man-in-the-middle attacks

Site is still with avast URL blacklist

polonus (volunteer 3rd party cold reconnaissance website security analyst and website error-hunter)
« Last Edit: May 30, 2019, 07:05:34 PM by polonus »
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Offline mominulislamd

  • Newbie
  • *
  • Posts: 1
Re: Remove My URL From Avast Blacklist
« Reply #9 on: June 11, 2019, 04:32:09 PM »
Hello Lukas !

I am having the same issue, I deleted my site, recreate website with fresh installation but showing same.
Please remove my website from avast black list.
My website is : http://boss-solution.com/

Thanks

Offline polonus

  • Avast Überevangelist
  • Maybe Bot
  • *****
  • Posts: 31438
  • malware fighter
Re: Remove My URL From Avast Blacklist
« Reply #10 on: June 11, 2019, 08:12:03 PM »
Hi mominulislamd,

Some improvent suggestions towards your website, use recommendations as you see fit  ;)
web server info proliferation found, let those servers not speak so loud:
Apache/2.4.39 (cPanel) OpenSSL/1.0.2r mod_bwlimited/1.4

Given an all green here: Reputation Check
PASSED
Google Safe Browse: OK
Spamhaus Check: OK
Abuse CC: OK
Dshield Blocklist: OK
Cisco Talos Blacklist: OK
Web Server:
Apache/2.4.39 (cPanel) OpenSSL/1.0.2r mod_bwlimited/1.4
X-Powered-By:
None
IP Address:
172.82.166.194
Hosting Provider:
QuickPacket 
Shared Hosting:
2007 sites found on 172.82.166.194

WordPress correctly configured  :)
Here all green: http://www.isithacked.com/check/http%3A%2F%2Fboss-solution.com%2F

Still some linting hints: https://webhint.io/scanner/7dad674b-4a9a-4e07-a573-be8b459ac3ac

1 retirable vulnerablre jQuery library detected: https://retire.insecurity.today/#!/scan/c2161aaa6ca6e65f447685740364c048a95a6fa2ae48d23a52785aedf0ca2226

Your hosters holds some security glitches on those racks:  https://www.shodan.io/host/172.82.166.194
See: https://observatory.mozilla.org/analyze/boss-solution.com

16 potential immediate threats: https://observatory.mozilla.org/analyze/boss-solution.com
TLS Recommendations
No redirect from HTTP to HTTPS found. You should redirect your website visitors to the HTTPS version to avoid the "Not Secure" browser warning.

Protection Recommendations
Directory Listing is enabled on your site. This can lead to information leakage. We recommend disabling Directory Listing.

HTTP Trace Method is allowed on your site. Allowing the TRACE method can be misused to attack your site.

Malcode relations for the IP you share: https://www.virustotal.com/gui/ip-address/172.82.166.194/relations
probably detection reason, general IP flagged.

So ask for an exclusion for your site from an avast team member,
we here are just volunteers with relevant knowledge, but cannot come and unblock.

Quite impressed with your website's simple but effective code security.

You might have listened well to that coding angel sitting on your right shoulder ;)
for from that side always comes good inspiration,

kind greetings,

polonus (volunteer website security analyst and website error-hunter)
« Last Edit: June 11, 2019, 08:36:48 PM by polonus »
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Offline jefferson sant

  • Ultra Poster
  • *****
  • Posts: 5955
  • volunteer
Re: Remove My URL From Avast Blacklist
« Reply #11 on: June 13, 2019, 12:41:09 AM »
I am having the same issue, I deleted my site, recreate website with fresh installation but showing same.
Please remove my website from avast black list.
My website is : hxxp://boss-solution[.]com/
Thanks

Detection was removed on 12.06.2019

Quote from: Avast
Our virus specialists have now cleared its reputation in our database.
With URLs this change should be instant, but it might take up to 24 hours with files