Author Topic: Remove my site from blacklist (Read 2842 times)

ohad4 · « **on:** April 04, 2019, 12:05:26 PM »

Hi,

My site has been added recently to Avast blacklist. Can you please remove it? it's 100% clean.

The URL is TheTop10sites dot com.

Thanks!

polonus · « **Reply #1 on:** April 04, 2019, 01:20:31 PM »

Take it up with your host at 99.84.104.2 -> server-99-84-104-2.iad79.r.cloudfront.net errors being produced.
as I get this

Quote

Content that was returned by your request for the URL: -https://thetop10sites.com/
Note: Content displayed is from the redirect location, the URL -https://www.thetop10sites.com

1: < html>
2: < head> < title> 301 Moved Permanently< /title> < /head>
3: < body bgcolor="white">
4: < center> < h1> 301 Moved Permanently< /h1> < /center>
5: < hr> < center> nginx/1.14.1< /center>
6: < /body>
7: < /html>

&

Quote

1: < ?xml version="1.0" encoding="UTF-8"?>
2: < Error> < Code> AccessDenied< /Code> < Message> Access Denied< /Message> < RequestId> D563880AB351562E< /RequestId> < HostId> a3SmKTmY2xXAOsoQX+kmZwiubMfpapIfTgsF6Rll23kv8KXmmXQcAa1M6BoEH4+UV4mvPnKXT7I=< /HostId> < /Error>

&

Quote

content-type: application/xml
x-amz-bucket-region: us-west-2
date: Thu, 04 Apr 2019 11:17:57 GMT
server: AmazonS3
x-cache: Error from cloudfront
via: -1.1 b3e6aa6408d9b27acff39fa80612846a.cloudfront.net (CloudFront)
x-amz-cf-id: ERqEa8EpkUwjWHBdPz3NLlpFK4-p4NSCA4-_letaDjVlJfvl1jYifg==

polonus

ohad4 · « **Reply #2 on:** April 06, 2019, 12:54:54 PM »

Thanks for the answer. This is simply a 301 redirect and isn't really an error and it happens when no subdomain is entered.
We see some inconsistency when enter www.thetop10sites[.]com (or a subdomain like website-builders.thetop10sites[.]com) but it ALWAYS gets blocked (or pops a message) when users enter antivirus.thetop10sites[.]com.

HonzaZ · « **Reply #3 on:** April 08, 2019, 12:33:38 PM »

We newly classify this type of sites (comparison where you pay to be on top) to be malicious as these sites mislead users in very wrong way.

polonus · « **Reply #4 on:** April 08, 2019, 06:34:55 PM »

See also the SSL certificate results here: https://www.shodan.io/host/13.32.67.101
Amazon abuse.

polonus

j_king · « **Reply #5 on:** June 13, 2019, 07:55:28 AM »

Hi,

My site has been added recently to Avast blacklist. Can you please remove it? it's 100% clean.

My website URL is junespringmultimedia dot com.

Thanks much!

Asyn · « **Reply #6 on:** June 13, 2019, 08:09:11 AM »

-> https://sitecheck.sucuri.net/results/junespringmultimedia.com
-> https://www.virustotal.com/gui/url/010b765d5909e6f0747878e0ab8c28c8cb51502e4fb326895bbf396bcc096a2f/detection

polonus · « **Reply #7 on:** June 13, 2019, 05:24:05 PM »

Word Press version is outdated, update please.
Immediate threat risks, 17 items, see: https://app.upguard.com/#/junespringmultimedia.com
Re: https://aw-snap.info/file-viewer/?protocol=secure&ref_sel=GSP2&ua_sel=ff&chk-cache=&fs=1&tgt=anVue3NwfVtuZ211bHRbbXsjW3wuXl1tYF5dbnR8XnQtdXNgPHdoXT1TfGx7cyUyMHxuIyUyMG18fWt7dFtuZyZzdWJqe150PVB9XSN1XnQlMjB8biMlMjBze312W157JTIwW25xdVt9eQ%3D%3D~enc
Detection more than likely via IP, see: https://checkphish.ai/ip/162.241.159.183
your site seen 2 times in last 30 days
See detection: https://www.maltiverse.com/ip/162.241.159.183
Re: https://www.maltiverse.com/hostname/junespringmultimedia.com
Fortinet's detection, is it actual? https://urlquery.net/report/030f71a8-a64d-4cf6-b451-bc2c21245068

Wait for a verdict from one of avast's team members, we are volunteers with relevant knowledge,
but cannot come and unblock,

polonus (volunteer 3rd party cold reconnaissance website security analyst and website error-hunter)

P.S. 29 recommendations to come to a better and more secure website:
https://webhint.io/scanner/cf320dae-38dd-416b-972b-bb68f8736f36 (not bad at all, not bad really).

D.

LukasJ · « **Reply #8 on:** June 13, 2019, 10:05:38 PM »

Hi,
URL block has been disabled.

Lukas