How to remove http://webventure.ro from your black-list?

system · 2017-01-31T11:43:14.000Z

Hi,

Avast has blocked our site http://webventure.ro but we are a software, web and mobile development company. We ask your help for unblock our site and let us know why is the exact reason for block.
Thanks a lot.

Ciprian

TrueIndian · 2017-01-31T12:02:12.000Z

Although some js files have been marked suspicious here:
http://zulu.zscaler.com/submission/show/71e0e98ae807fb86d86407cf9268cff4-1485863580

Avast is detecting the HTML as well here:
https://www.virustotal.com/en/file/1dd3e026d6cee8e127616705d5a37205c72540c02bdcae3b7f4c2eee09828c59/analysis/1485863888/

https://sitecheck.sucuri.net/results/webventure.ro

You might want to check the files that have been marked as suspicious by zulu

Eddy · 2017-01-31T12:03:09.000Z

At least suspicious :
http://zulu.zscaler.com/submission/show/71e0e98ae807fb86d86407cf9268cff4-1485863580

Blacklistings on that ASN :
http://urlquery.net/report.php?id=1485862986765

Wordpress issues :
contact-form-7 4.6 latest release (4.6.1) Update required

Warning User Enumeration is possible
The first two user ID’s were tested to determine if user enumeration is possible.
ID User Login
1 webventurer webventurer
2 None

2 vulnerable libraries detected :
http://retire.insecurity.today/#!/scan/0563ed8991a94b4b947a8726598e3148295a6e0c829a1699a20445058c03e415

https://www.avast.com/report-a-url.php

polonus · 2017-01-31T12:24:03.000Z

Hi TI199,

Some issues on your site, but als with DNS: FAIL: While quering domain’s records, some of your name servers didn’t responded. Name servers which didn’t responded:
udp6:2a03:b0c0:3:d0::d8:a001
udp6:2604:a880:1:20::135:b001

WARNING: Couldn’t connect using TCP protocol:
tcp6:2604:a880:1:20::135:b001
tcp6:2a03:b0c0:3:d0::d8:a001
Check your name server’s configurations and firewall rules. When response to a DNS query exceeds 512 bytes, TCP is negotiated and used, all name servers should allow TCP connections (port 53).

Name Servers Versions
WARNING: Name servers software versions are exposed:
107.170.207.168: “Served by PowerDNS - https://www.powerdns.com/”
193.33.200.230: “Served by PowerDNS - https://www.powerdns.com/”
2604:a880:1:20::135:b001: “unknown”
2a03:b0c0:3:d0::d8:a001: “unknown”
46.101.251.192: “PowerDNS Authoritative Server 3.4.10 (jenkins@autotest.powerdns.com built 20160901103336 root@autotest.powerdns.com)”
Exposing name server’s versions may be risky, when a new vulnerability is found your name servers may be automatically exploited by script kiddies until you patch the system. Learn not to speak out too loud!

Take such issues up with appnor dot com!

IP became bulk spam blacklisted 6 times in 2015: https://cleantalk.org/blacklists?record=193.33.200.230

polonus

HonzaZ · 2017-01-31T12:44:17.000Z

This was blocked a long time ago, so I am unblocking it now

system · 2017-01-31T14:50:33.000Z

Thank you!

Ciprian

Announcements