Avast have blacklisted our website which is now clean

Viruses and worms
1

Our website is www.studiomontanaro.com
Probably the malware was present on the previous version of the site (old site not made by us).
Can the blacklist be removed? this is having a serious effect to our visitors…
Thank you

2

There is a enormus amount of domains on same IP and many are blacklisted
actually it seems to be two phishing sites ( pedrotticalzature.it / spillamania.it/js) that is blocked

Click more button under list(s) for more info >> https://virustotal.com/en/ip-address/46.252.157.123/information/

Reported to avast so you may see a reply here later …

3

The problem indeed seems to be the shared hosting.

But there is this that need attention/fixed :
http://retire.insecurity.today/#!/scan/fbb501713e3878d22e41fae90cfcef8da7a6bc99b70232834eae8361a75b0652

4

Right what Eddy says, but there is more insecurity to mend: Certificate Authority for further verification.
You have 1 error
Wrong certificate installed.
The domain name does not match the certificate common name or SAN.
Warnings
BEAST
The BEAST attack is not mitigated on this server.
RC4
This server uses the RC4 cipher algorithm which is not secure. Disable the RC4 cipher suite and update the server software to support the Advanced Encryption Standard (AES) cipher algorithm. Contact your web server vendor for assistance.
Certificate information
This server uses a Domain Validated (DV) certificate. No information about the site owner has been validated. Data is protected, but exchanging personal or financial information is not recommended.
Common name:
-ofmtoscana.org
SAN:
-ofmtoscana.org, -radicidibetlemme.ofmtoscana.org, -vienievedi.net, -www.ofmtoscana.org, -www.radicidibetlemme.ofmtoscana.org, -www.vienievedi.net
Valid from:
2016-Mar-07 15:41:00 GMT
Valid to:
2016-Jun-05 15:41:00 GMT
Certificate status:
Valid
Revocation check method:
OCSP
Organization:

Organizational unit:

City/locality:

State/province:

Country:

Certificate Transparency:
Not Enabled
Serial number:
17837b453e29c7b3d030aeaae8436e2b7db
Algorithm type:
SHA256withRSA
Key size:
2048
Certificate chainShow details
Let’s Encrypt Authority X1Intermediate certificate
-ofmtoscana.orgTested certificate
Server configuration

Whenever abuse there is SuperNova CloudFlare abuse.

You have four Stylesheet SRI hashes missing for -http://www.studiomontanaro.com/
See: https://sritest.io/#report/2b5ee5a6-36ec-433a-971e-e75722e82199

Server hostname and server is vulnerable to DROWn: https://test.drownattack.com/?site=srv-hf3-123.netsons.net
F-Status: https://securityheaders.io/?q=http%3A%2F%2Fsrv-hf3-123.netsons.net
BEAST vulnerable and RC4
This server uses the RC4 cipher algorithm which is not secure. Disable the RC4 cipher suite and update the server software to support the Advanced Encryption Standard (AES) cipher algorithm. Contact your web server vendor for assistance.

The website apart from the blacklisting is not malicious per se, but insecurities lined out should be mitigated asap.

polonus (volunteer website analyst and website error-hunter)

5

I removed studiomontanaro.com from our blacklist :wink:

6

Thanks Eddy, thanks Polonus, I will further check that.
Thank you too HonzaZ for your prompt support.