Website on blacklist

[Tampa]

Some blacklists show the revolt.chat domain as distributor of riskware/malware. Have seen entries with Sophos and Malwarebytes and there is likely more. Unfortunately most maintainers of these lists don't care for unaffiliated individuals requesting removals from them so someone from the org has to shoot them an email and request to know what's going on.

[IAmTomahawkx]

I'll look into this

[IAmTomahawkx]

@Tampa do you have any screenshots of this happening? I can't reproduce with either Sophos or Malwarebytes

[Tampa]

I sent a report about false flag to both, so they may have already removed it from their blacklists by now. Malwarebytes no longer lists it as blocked far as I can tell.

[insertish]

The worst thing about this is that they don't seem to care about what they're blocking, or contacting people behind websites, or even bother to note down where they've previously unblocked people. I'm not sure why these systems don't just block individual URLs and send like an automated email or something at least...

[Tampa]

Between gTLDs and other stuff that would require sending out millions of emails. Let alone. To who? The contact information on most domains are redacted for privacy, because everyone threw such a fit icann allowed that nonsense. The only option you have are the abuse or webmaster contacts, good luck that ever reaching an actual human responsible for a given domain. Let's Encrypt recently stopped their expiration notices because it was a massive burden to send thousands of emails each day. Keeping a good reputation for a mailserver with that volume is not easy. Scammers register hundreds of cheap domains and thousands of subdomains are created, you could conceivably cause a denial of service attack having such systems block a new domain and sending emails out.

Also. Frankly. It is up to an individual or company running the site to provide good stewardship that doesn't lend them on such lists in the first place. Checking these lists is usually not made hard either as they are either public or can be queried.

Symantec used to offer a system for domain owners to check and work out why exactly they were blocked. Unfortunately that is the only good thing about them. Many others in the space don't offer such service. They usually respond through their support forums though. I do agree that it would be nice if you could sign up to be alerted about this, if reports are received or something, but then again these companies make money from security so they probably offer that already if you are willing to pay them for it or something.