Home › Forums › Support Forum › blacklist
Tagged: s6 threat
This topic contains 4 replies, has 2 voices, and was last updated by Anti-Malware Admin 3 days, 8 hours ago.
-
AuthorPosts
-
March 26, 2025 at 8:41 am #150803
I have something on my site that https://s6.cloudcdnstatic.com – (Do Not Use This Link) I get a message that it is a URL Blacklist and somehow certain pages of my site make the message pop-up from my Norton indicating that I must have some threat on my website?
Can you tell me how to fix this – I have run your anti-malware – but it doesn’t find it.
____________________________
Details
Threat name: URL:Blacklist
Threat type: Miscellaneous – This is malicious software that could harm your data, computer, or network.
Status: Aborted
Detected by: Safe Web
____________________________Origin
Downloaded from: https://s6.cloudcdnstatic.com/
____________________________Activity
Path | Type | Status
https://s6.cloudcdnstatic.com/ | URL | Blockedmy actual website is frenchcreekdesigns.com
March 27, 2025 at 3:02 am #150861I just added this new threat to my definition updates. Please download the latest definitions and run the Complete scan again.
Please let me know if it find this threat in your database or not. If not I would like to take another look at it.
March 27, 2025 at 9:19 am #150898I re-ran the scan twice and had no change. It still is giving me the same message above.
I did find in the database – here is the results! How are they getting this in the database? What do I need to do! This is in the postmeta. Also in the posts a flamingo spam post status.
https://frenchcreekdesigns.com/?post_type=flamingo_inbound&p=45172 (Do Not Click) I am deleting all these.
42405
10554
_wp_attached_file
2022/03/DAL_GoodBones_S6_E1_037.jpg
42406
10554
_wp_attachment_metadata
a:5:{s:5:”width”;i:1000;s:6:”height”;i:667;s:4:”fi…
104943
17191
_field_g-recaptcha-response
03AIIukzhSDF2rUgxIzdqy6gbkN61p0_TuCqmQQno6XwYK9Get…
411686
41509
_field_your-message
Need money? Get it here easily! Just press this to…
417024
41717
_field_your-message
I’m in the mood for something sweet and spicy… you…
420972
41874
_from
* * * Claim Free iPhone 16: http://leversoftsol.bi…
420973
41874
_from_name
* * * Claim Free iPhone 16: http://leversoftsol.bi…
420975
41874
_field_your-name
* * * Claim Free iPhone 16: http://leversoftsol.bi…
420992
41875
_from
* * * <a href=”http://leversoftsol.biz/uploads/s6c…
420993
41875
_from_name
* * * <a href=”http://leversoftsol.biz/uploads/s6c…
420995
41875
_field_your-name
* * * <a href=”http://leversoftsol.biz/uploads/s6c…
425973
42131
_field_your-message
цена от 3 420 руб https://shop.oknagorizont.ru/cat…
426485
42167
_field_your-message
I’m in the mood for something sweet and spicy… you…
426674
42176
_field_your-message
Еще нет аккаунта? Зарегистрироваться https://werst…
443761
43525
_field_your-message
This online pharmacy features an extensive variety…
449393
44268
_field_your-message
s63jib
457776
45172
_field_your-message
Lying down and vomiting between courses: This is h…Thank you, for taking a look.
March 27, 2025 at 12:58 pm #150905I removed all I could find. Still have the issue. I also, changed the forms I was using. Not sure what to look for next. Thank you, for any help possible.
March 27, 2025 at 3:10 pm #150907Ok, I see that the offending script is still present. I have just released a new definition update that should find it this time. Please download the latest definitions version P3RF4 and if it still does not find anything can you please send me a full screenshot of the scan results page with the scan setting showing?
-
AuthorPosts
You must be logged in to reply to this topic.