Help! The website Cake-Store.ru in the black list!

system · 2017-01-12T13:05:42.000Z

A year ago I registered the domain Cake-Store.ru and made it a new website. Unfortunately up to this time apparently it had viruses, and I didn’t think to check when buying a domain. Cake-Store.ru even before my website is included in the black list of some anti virus including Avast, which in Russia is a lot of people. Support not answering me, the site itself I downloaded and checked as Avast and other antiviruses, viruses were found. Tell me what I need to do to Avast updated blacklist and deleted my website from it. Sorry for my bad English.

Eddy · 2017-01-12T13:59:34.000Z

Blacklisted :
http://www.urlvoid.com/scan/cake-store.ru/
https://sitecheck.sucuri.net/results/cake-store.ru
https://www.virustotal.com/en/url/c94fde2b17b15d70d7158472ff30664e683d587e9d8577028ce51739066bd1f9/analysis/1484228364/

Suspicious 404 and javascript :
https://www.websicherheit.at/website-malware-viren-scanner/?url=Cake-Store.ru

Reported as spammer :
https://cleantalk.org/blacklists/185.26.122.58

100/100 (!) malicious :
http://zulu.zscaler.com/submission/show/4a56c27f81fdc63874570fddbc1c1c0e-1484228378

Outdated software used :
https://sitecheck.sucuri.net/results/cake-store.ru

Obfuscated code used :
https://quttera.com/detailed_report/Cake-Store.ru

Drive-by downloads :
https://safeweb.norton.com/report/show?url=cake-store.ru

Link to blacklisted site :
https://virustotal.com/en/url/bd18dc75c60f9516858d70a3fb41f77f06d062102ddd5586b6756ee1fe534829/analysis/1484228683/

Huge amount of blacklistings and malious files/activities on that IP :
https://www.virustotal.com/en/ip-address/185.26.122.58/information/

Vulnerable libraries used :
http://retire.insecurity.today/#!/scan/2032932e62c94ad997c5917efddbcca2075eccf6942c8498727f836737de9440

Insecure headers :
https://securityheaders.io/?q=cake-store.ru&followRedirects=on

Huge amount of domains on that IP and most are blacklisted :
http://viewdns.info/reverseip/?host=185.26.122.58&t=1

system · 2017-01-12T14:33:03.000Z

I fully agree with you that IP is really a lot of malicious actions as well as my scripts are not the most recent version, but will object! Firstly in one of my inspections indicated that the site was blacklisted back in 2013, I bought the domain and made a website already in 2016. Most of the data that you cite are based on the fact that the domain is already in the black sheet, and therefore see his low rating and threat data. But the website itself, which is made only in 2016 your data checks are not related, except that scripts are used not the latest version, but it’s not forbidden! I downloaded the website on the computer and checked it 7 well-known anti-virus software and have not seen a single virus!

Pondus · 2017-01-12T14:34:17.000Z

Contain redirect to blacklisted URL
https://virustotal.com/nb/file/4d6353cbf46c99e205672aecbdcd4b8e4366669a69c34a39e246b780a28644b2/analysis/1484231537/

possible this
https://virustotal.com/nb/url/cb1ce0994b9f61010eb874d50fb24069c29ccb1b3a3808497931c384936724c5/analysis/1484232029/

Norton safe web > https://safeweb.norton.com/report/show?url=cake-store.ru

Eddy · 2017-01-12T14:43:40.000Z

A quick look showed me already two links to blacklisted sites.

Advise :

Update all software to the most recent version (CMS, JQuery, Plugins etc)
Get (dedicated) hosting at a decent host
Remove all links/redirects to blacklisted domains/IP’s

polonus · 2017-01-12T14:59:54.000Z

Hi Pondus, Eddy & leoniduwka,

But that particular hoster isn’t free of spreading malcode all sorts either:
http://www.malwareurl.com/ns_listing.php?as=AS62082

That is a nice collection for fishing, injectingh and trojaning ;D (baba jaga & baba jitka collection)

polonus

system · 2017-01-12T15:37:19.000Z

Thank you guys that responded to my problem. Pondus wrote: “Contain the URL to redirect blacklisted!!!” I was running a scan now on their own and you won’t believe Avast is blocking for one line of code “” this is a link to a malicious website! My malicious website! Line where the site refers to itself is malicious. If it is removed from the blacklist problem will disappear as such! Thanks also to Eddy for the tips, really on my IP neighbors create chaos and urgent need to change hoster

Eddy · 2017-01-12T15:49:19.000Z

You’re welcome and good luck solving the things.

polonus · 2017-01-16T00:48:26.000Z

Update:

Here the blacklisting was being removed: https://safeweb.norton.com/report/show?url=cake-store.ru
But all has not stopped flagging as suspicious: https://www.virustotal.com/nl/url/c94fde2b17b15d70d7158472ff30664e683d587e9d8577028ce51739066bd1f9/analysis/1484527421/

polonus

Announcements