Remove from blacklist

General Topics
1

Hi,

Please remove the URL newtonlifechurch[.]org and newtonlifechurch[.]sg from black list. The site has since been clean of malware and virus.

My contact : peterlim@[domain_name_above].sg

Thanks.

2

You can report a URL here: https://www.avast.com/report-a-url.php

3

→ https://sitecheck.sucuri.net/results/www.newtonlifechurch.org/
→ https://sitecheck.sucuri.net/results/www.newtonlifechurch.sg/

4

→ http://zulu.zscaler.com/submission/show/cf6d71cbee1878ccc96fc7aacca84812-1499351999
→ http://zulu.zscaler.com/submission/show/1d107fc77ac26f9f1f548f86251568ad-1499352026

5

It is really a stupid thing to post your email on a public webboard unless you want the “bad guys” to (ab)use it.

6

Blacklisted :
https://sitecheck.sucuri.net/results/www.newtonlifechurch.org

Blacklisted and malicious :
http://urlquery.net/report.php?id=1499351734934

Malicious :
http://zulu.zscaler.com/submission/show/cf6d71cbee1878ccc96fc7aacca84812-1499353825
https://www.virustotal.com/en/url/aba05b749a86d7eda73196047ecdcaa4911d6c991620d9d5596cefe813e5347e/analysis/1499353851/

Huge amount of blacklistings on that IP :
https://www.virustotal.com/en/ip-address/119.31.235.60/information/

Vulnerable libray used :
http://retire.insecurity.today/#!/scan/9ab172f6c95b38417ea65c9d97ce621ffb602e86f9bbfd46a99dc306c5088401

My advise :

  • Remove the vulnerable libray
  • Get dedicated hosting
  • Hire someone who does know how to properly manage a website (programming, security etc)
7

Even more security advice: https://observatory.mozilla.org/analyze.html?host=www.newtonlifechurch.org F-Status and recommendations.

Issue here: http://www.dnsinspect.com/newtonlifechurch.org/10147201
Stealth name server, Wrong certificate installed.
The domain name does not match the certificate common name or SAN, RapidSSL SHA256 CA intermediate cert.

See load time issues: https://performance.sucuri.net/domain/newtonlifechurch.org

polonus

8

I have made the links non-clickable, made the email more difficult to be farmed for bots, and unblocked newtonlifechurch.org. This site was infected with Locky.