Remove Site From Blacklist

[info2464]

Hello,

I have had several potential clients inform me that they are getting a warning from Avast that my company website is not safe. I have conducted all necessary virus and malware scans and do not see an issue.

Can my site please be removed from the blacklist?

The domain is hxxps://jamssquad.com

Please see the virus scan results here:
https://www.virustotal.com/gui/url/f1f58e002f39786c01217fd27dd37c4a4889656b92ae8258b304c5097dc00db2/detection

Thanks!

[DavidR]

Please 'modify' your post change the URL from http to hXXp or www to wXw, to break the link and avoid accidental exposure to suspect sites, thanks.

Virus total doesn't actually scan the site (and avast isn't in that check), it just looks for blacklisted status as such.  But it is currently blacklisted by avast.

Nothing found here https://sitecheck.sucuri.net/results/jamssquad.com
You might want to consider some of the points raised here https://webhint.io/scanner/72ee303a-d9e0-4eb0-b3e4-accfec4b3407

Reporting Possible False Positive File or Website - https://www.avast.com/false-positive-file-form.php.

[polonus]

Hi info2464,

Just wait for the final verdict by an avast team member, as they are the only ones to come and unblock.
But I do not see that website blocked at the moment by avast's.

In addition to what DavidR has verified for your website in the realm of security improvements (hunts),
you also have to consider that there is an issue with your Word Press CMS,
e.g. an outdated word press plug-in:    elementor 2.9.12   Warning   latest release (2.9.13)
https://elementor.com/ see line 171 of the code here: https://aw-snap.info/file-viewer/?protocol=secure&ref_sel=GSP2&ua_sel=ff&chk-cache=&fs=1&tgt=anxtc3NxdXwjLl5dbWA%3D~enc

JavaScript resources were not found to be blacklisted.

Threat Intel - verdict = clean:
DShield    CLEAN
AlienVault OTX      CLEAN
Cisco Talos    CLEAN
abuse.ch (Feodo)    CLEAN
URLhaus    CLEAN
Spamhaus (Drop / eDrop)    CLEAN

jQuery library to be retired:

jquery   1.12.4   Found in -https://jamssquad.com/wp-includes/js/jquery/jquery.js?ver=1.12.4-wp<br>Vulnerability info:
Medium   2432 3rd party CORS request may execute CVE-2015-9251   
Medium   CVE-2015-9251 11974 parseHTML() executes scripts in event handlers   
Low   CVE-2019-11358 jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution   123
Medium   Regex in its jQuery.htmlPrefilter sometimes may introduce XSS

Tested as SSL-B-grade here: https://www.ssllabs.com/ssltest/analyze.html?&hideResults=on&d=jamssquad.com

XSS-DOM alerts found in results from scanning URL: -https://jamssquad.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=1.4.1
Number of sources found: 41
Number of sinks found: 17

polonus (volunteer 3rd party cold reconnaissance website security analyst and website error-hunter)

[info2464]

Thanks - I will wait for Avast to get back to me. I submitted the false positive ticket.

I also updated all plugins/themes on WordPress

[DavidR]

You're welcome.