Author Topic: How to remove my website from your blacklist?  (Read 2598 times)

0 Members and 1 Guest are viewing this topic.

REDACTED

  • Guest
How to remove my website from your blacklist?
« on: November 14, 2017, 04:42:11 PM »
Hello i'm developper and my website is blacklist when your Antivirus running

Url of my website :
https://www.renovation-dieppe-amenagement-normandie-cuisiniste-76.com/

and my virustotal analysis
https://www.virustotal.com/#/url/91b5058e526bf4505c1182b692eb5a3a740a80b928e8e3aeb6bb46609d3e8806/detection

Thank you for your help ;)

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33900
  • malware fighter
Re: How to remove my website from your blacklist?
« Reply #1 on: November 14, 2017, 05:41:49 PM »
You use an outdated WordPress version, 4.6.1, you want to update to 4.8.3.

Configuration issue: Warning User Enumeration is possible
The first two user ID's were tested to determine if user enumeration is possible.

ID   User   Login
1   None   adminimpakt
2   None   tinho
It is recommended to rename the admin user account to reduce the chance of brute force attacks occurring. As this will reduce the chance of automated password attackers gaining access. However it is important to understand that if the author archives are enabled it is usually possible to enumerate all users within a WordPress installation.

2 vulnerable libraries detected: http://retire.insecurity.today/#!/scan/08a0c6e13eb1019e621f086f2c5ff854fdf935bdb144d87141ebbcdc107605bc

F-grade status and recommendations: https://observatory.mozilla.org/analyze.html?host=www.renovation-dieppe-amenagement-normandie-cuisiniste-76.com

Wait for an avast team member to come and give the final verdict on your website, as we are just volunteers with relevant knowledge and cannot come and unblock,

polonus (volunteer website security analyst and website error-hunter)
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

REDACTED

  • Guest
Re: How to remove my website from your blacklist?
« Reply #2 on: November 14, 2017, 05:54:19 PM »
Thank you for your intervention, i'm going to backup my website and upgrade to 4.8.3, then i going to block the user enumeration

but about librairies why jQuery and bootstrap was vulnerable ?


Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33900
  • malware fighter
Re: How to remove my website from your blacklist?
« Reply #3 on: November 14, 2017, 10:09:55 PM »
All jQuery libraries taht are acquired should at a certain moment also be retired.
Vulnerability for one of these scripts, read: https://github.com/twbs/bootstrap/issues/20184
the other one, read here: https://github.com/jquery/jquery/issues/2432
line:8: Bootstrap's JavaScript requires jQuery
[error] info: [decodingLevel=0] found JavaScript
     error: line:43: SyntaxError: invalid label:
          error: line:43: ;{"@context":"http:\/\/schema.org","@type":"WebSite","@id":"#website","url":"-https:\/\/wXw.renovation-dieppe-amenagement-normandie-cuisiniste-76.com\/","name":"Tinho SA","potentialAction":{"@type":"SearchAction","target":"https:\/\/wXw.renovation-dieppe-a
          error: line:43: ..^
     error: line:3: SyntaxError: missing = in XML attribute:
          error: line:3: <!DOCTYPE html>
          error: line:3: ..............^
[/error](block in error code by me pol.)

polonus (volunteer website security analyst and website error-hunter)
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

REDACTED

  • Guest
Re: How to remove my website from your blacklist?
« Reply #4 on: November 15, 2017, 03:51:37 PM »
Hello,

About my Wordpress :
I update my wordpress to 4.8.3
block the user enumeration with my .htaccess file

update the jQuery "wp-include/js/jquery/jquery.js" because he was in 1.12.4, now it is in jQuery 3.2.1

But for bootstrap i read this https://github.com/twbs/bootstrap/issues/20184, and Mdo ( Mark Otto, creator of Bootstrap) says : "All work has moved onto our next major release, v4. As such, this issue or pull request is being closed as a "won't fix." " and i need to use v3 of bootstrap, so .. Can you help me to fix this ? http://retire.insecurity.today/#!/scan/67d3c190157922fbbfb7700b041d9a1c7c7f655989930d57c388c9f763285946

Can you unlock my website on your blacklist .. Thank you

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33900
  • malware fighter
Re: How to remove my website from your blacklist?
« Reply #5 on: November 15, 2017, 06:36:43 PM »
Hi Hota2,

I have alerted an Avast Team Member about your topic, so wait until office hours to-morrow,
and he may come to react here.

Well you cannot break iron with your bare hands, as the Dutch proverb says.
 You did the best you could.
With same origin rule there properly handled, you are certainly out of harm's way.

I just pointed out the jQuery library issues so you could fix what could be fixed.
The rest is up to bootstrap's development. Out of our hands, really  ;)

I also think it does not matter much where  avast giving your site the all green is concerned,
as there're other issues for them as av that come into the bargain to block a site or not.

I think you are just a good sitting between the bad and ugly, those bad apples that  you share that same IP with your domain.
So you could qualify for an IP block exclusion. At least in my option.

I wish other website developers would be that eager to get their websites more secure as you do.

you set an example I hope others will follow.

Well done and we are proud to have been of aasistence.

Let us wait for avast to react.

polonus
« Last Edit: November 15, 2017, 06:39:14 PM by polonus »
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Offline LukasJ

  • Avast team
  • Jr. Member
  • *
  • Posts: 86
Re: How to remove my website from your blacklist?
« Reply #6 on: November 19, 2017, 07:36:29 PM »
Hi Guys,
URL was removed from blacklist.

Have a nice day
Lukáš