{"id":71699,"date":"2020-02-27T20:53:59","date_gmt":"2020-02-27T17:53:59","guid":{"rendered":"https:\/\/prohoster.info\/blog\/kak-konkurenty-mogut-legko-zablokirovat-vash-sajt"},"modified":"2020-03-03T16:14:14","modified_gmt":"2020-03-03T13:14:14","slug":"kak-konkurenty-mogut-legko-zablokirovat-vash-sajt","status":"publish","type":"post","link":"https:\/\/prohoster.info\/en\/blog\/administrirovanie\/kak-konkurenty-mogut-legko-zablokirovat-vash-sajt","title":{"rendered":"How competitors can easily block your website","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Recently, we encountered a situation where several antivirus programs (Kaspersky, Quttera, McAfee, Norton Safe Web, Bitdefender, and a few lesser-known ones) began blocking our website. Investigating the situation led me to realize that getting on a blacklist is quite easy; it only takes a few complaints (even without justification). I will describe the problem in more detail later.<\/p>\n

The issue is quite serious, as almost every user now has an antivirus or firewall installed. A website being blocked by a major antivirus like Kaspersky can make it inaccessible to a large number of users. I would like to draw the community's attention to this problem, as it opens up vast opportunities for unscrupulous methods of competition.
\n\"How
\n<\/a><\/noindex>
\nI will not provide a link to the website or mention the company so that it is not perceived as some form of PR. I will only state that the website operates legally, the company is commercially registered, and all data is available on the site. <\/p>\n

Recently, we received complaints from customers that our website is being blocked by Kaspersky antivirus as a phishing site. Multiple checks on our end revealed no issues on the website. I submitted a request through the form on Kaspersky's website regarding the false positive of the antivirus. As a result, we received the following response:<\/p>\n

We have checked the link you provided.
\nThe information from the link poses a risk of user data loss; the false positive was not confirmed.<\/p><\/blockquote>\n

\nThere was no confirmation that the site poses a threat. In further inquiries, we received the following response:<\/p>\n

We have checked the link you provided.
\nThis domain<\/a> was added to the database due to user complaints. The link will be excluded from phishing databases, but monitoring will remain in place in case of repeat complaints. <\/p><\/blockquote>\n

\nIt becomes clear that a sufficient reason for blocking is merely the existence of any complaints. Presumably, the site is blocked if there are more than a certain number of complaints, and no confirmation of the complaint is required.<\/p>\n

In our case, malicious actors submitted a series of complaints. To our data center, several antivirus programs, and services like phishtank. The complaints on phishtank only included the link to the site and indicated that the site was phishing. And that was it; no confirmations were provided. <\/p>\n

It is possible to block unwanted sites simply by spamming complaints. There might even be services that provide such options. If there aren't, they will clearly emerge soon, considering how easy it is to blacklist a site in the databases of some antivirus programs. <\/p>\n

I would like to hear comments from Kaspersky representatives. Also, I would like to hear from those who have faced this problem themselves and how quickly it was resolved. Perhaps someone can recommend legal methods of influence in such situations. For us, this situation has led to reputational and financial losses, not to mention the time wasted on resolving the issue. <\/p>\n

I would like to draw as much attention to this situation as possible, as any site is at risk.<\/p>\n

Addition.
\nIn the comments, a link was shared to an interesting post by HerrDirektor. habr.com\/ru\/post\/440240\/#comment_19826422<\/a><\/noindex> on this issue. I will quote him. <\/p>\n

I'll tell you more \u2014 do you want to create problems for almost any site in just 10 minutes (except for large, fat, and very well-known ones)?
\nWelcome to phishtank.
\nWe register 8-10 accounts (only an email is needed for confirmation), choose a site we like, and add it to the phishing database from one account (to complicate the owner\u2019s life, you can stuff the submission form with some email advertising gay porn with dwarfs).
\nWith the remaining accounts, we vote for phishing until we get a message saying, \"This is a phishing site!\"
\nDone. We sit and wait. Although to solidify the success, you can add both http:\/\/ and https:\/\/, with a slash at the end and without, or with two slashes. If you have plenty of time, you can also add links on the site. Why? Here\u2019s why:<\/p>\n

In 6-12 hours, Avast pulls the data from there. Within 24-48 hours, the data spreads to various \"antivirus types\" \u2014 Comodo, Bit Defender, Clean MX, CRDF, CyRadar\u2026 From where the darn VirusTotal sucks the data later.
\nOf course, NO ONE verifies the accuracy of the data; everyone is deeply indifferent.<\/p>\n

As a result, most \"antivirus\" extensions for browsers, free antivirus programs, and other software start flagging the specified site in various ways, from red warning banners to full pages claiming that the site is extremely dangerous and visiting it is akin to death.<\/p>\n

To clear out these Augean stables, each of these 'antivirus' programs requires you to contact support. For EVERY link! Avast responds fairly quickly, while the others simply archive the known entity.
\nBut even if the stars align and you manage to remove the site from antivirus databases, the \"mega-resource\" virustotal doesn\u2019t care at all. Not listed in phishtank? Who cares, you were there at some point, we\u2019ll show what exists. Not listed in bit defender? No problem, we\u2019ll still show that you were.
\nConsequently, any software or service relying on virustotal will forever show that the site is in poor standing. You can struggle with this pathetic resource for ages, and maybe you'll get lucky and get out. But then again, you might not.<\/p><\/blockquote>\n

* Among those blocking the site is even the Fortinet provider. We still haven't managed to remove the site from several phishing site lists.
\n* This is my first post on Habrahabr. Unfortunately, I was just a reader before, but the current situation motivated me to write a post.
\n
Source: habr.com<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041d\u0435\u0434\u0430\u0432\u043d\u043e \u043c\u044b \u0441\u0442\u043e\u043b\u043a\u043d\u0443\u043b\u0438\u0441\u044c \u0441 \u0441\u0438\u0442\u0443\u0430\u0446\u0438\u0435\u0439, \u043a\u043e\u0433\u0434\u0430 \u0440\u044f\u0434 \u0430\u043d\u0442\u0438\u0432\u0438\u0440\u0443\u0441\u043e\u0432 (\u041a\u0430\u0441\u043f\u0435\u0440\u0441\u043a\u0438\u0439, Quttera, McAfee, Norton Safe Web, Bitdefender \u0438 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043c\u0435\u043d\u0435\u0435 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0445) \u043d\u0430\u0447\u0430\u043b\u0438 \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043d\u0430\u0448 \u0441\u0430\u0439\u0442. \u0418\u0437\u0443\u0447\u0435\u043d\u0438\u0435 \u0441\u0438\u0442\u0443\u0430\u0446\u0438\u0438 \u043f\u0440\u0438\u0432\u0435\u043b\u043e \u043c\u0435\u043d\u044f \u043a \u043f\u043e\u043d\u0438\u043c\u0430\u043d\u0438\u044e, \u0447\u0442\u043e \u043f\u043e\u043f\u0430\u0441\u0442\u044c \u0432 \u0441\u043f\u0438\u0441\u043e\u043a \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0438 \u043a\u0440\u0430\u0439\u043d\u0435 \u043f\u0440\u043e\u0441\u0442\u043e, \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u0436\u0430\u043b\u043e\u0431 (\u0434\u0430\u0436\u0435 \u0431\u0435\u0437 \u043e\u0431\u043e\u0441\u043d\u043e\u0432\u0430\u043d\u0438\u044f). \u0414\u0435\u0442\u0430\u043b\u044c\u043d\u0435\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u044f \u043e\u043f\u0438\u0448\u0443 \u0434\u0430\u043b\u044c\u0448\u0435. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0434\u043e\u0432\u043e\u043b\u044c\u043d\u043e \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u0430\u044f, \u0442\u0430\u043a \u043a\u0430\u043a \u0441\u0435\u0439\u0447\u0430\u0441 \u043f\u043e\u0447\u0442\u0438 \u0443 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":71700,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-71699","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47How competitors can easily block your site | ProHoster","description":"Recently, we encountered a situation where several antivirus programs (Kaspersky, Quttera, McAfee, Norton Safe Web, Bitdefender, and a few lesser-known ones) started blocking our website.","canonical_url":"https:\/\/prohoster.info\/en\/blog\/administrirovanie\/kak-konkurenty-mogut-legko-zablokirovat-vash-sajt","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"en_US","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041a\u0430\u043a \u043a\u043e\u043d\u043a\u0443\u0440\u0435\u043d\u0442\u044b \u043c\u043e\u0433\u0443\u0442 \u043b\u0435\u0433\u043a\u043e \u0437\u0430\u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0432\u0430\u0448 \u0441\u0430\u0439\u0442 | ProHoster","og:description":"\u041d\u0435\u0434\u0430\u0432\u043d\u043e \u043c\u044b \u0441\u0442\u043e\u043b\u043a\u043d\u0443\u043b\u0438\u0441\u044c \u0441 \u0441\u0438\u0442\u0443\u0430\u0446\u0438\u0435\u0439, \u043a\u043e\u0433\u0434\u0430 \u0440\u044f\u0434 \u0430\u043d\u0442\u0438\u0432\u0438\u0440\u0443\u0441\u043e\u0432 (\u041a\u0430\u0441\u043f\u0435\u0440\u0441\u043a\u0438\u0439, Quttera, McAfee, Norton Safe Web, Bitdefender \u0438 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043c\u0435\u043d\u0435\u0435 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0445) \u043d\u0430\u0447\u0430\u043b\u0438 \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043d\u0430\u0448 \u0441\u0430\u0439\u0442.","og:url":"https:\/\/prohoster.info\/en\/blog\/administrirovanie\/kak-konkurenty-mogut-legko-zablokirovat-vash-sajt","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-02-27T17:53:59+00:00","article:modified_time":"2020-03-03T13:14:14+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"71699","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 18:57:37","updated":"2026-03-05 11:10:49","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/posts\/71699","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/comments?post=71699"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/posts\/71699\/revisions"}],"predecessor-version":[{"id":163189,"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/posts\/71699\/revisions\/163189"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/media\/71700"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/media?parent=71699"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/categories?post=71699"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/tags?post=71699"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}