Hello.

Can you advise me on what actions to take if multiple domains have been blacklisted by AV and Spamhouse due to hacking and spamming through feedback forms?

What is the fastest way to remove them in large quantities?

There are over 100 domains to deal with manually.

They have been persistently hitting. It is an issue.

Are you using email campaigns to promote and earn money? If not, then it is not a problem.

The removal process of a sanctioned domain name or IP address from blacklists can take days or even weeks. The quickest way to remove a website from Google blacklists typically takes a day, as long as manual sanctions have not been applied. The slowest process is removing websites from antivirus blacklists, especially for lesser-known or new ones, where they may be listed by mistake, such as false positives. In some cases, sending an application is required, and it may take several weeks to review.

To remove a site from search engine blacklists, there are three steps to follow, which include identifying and eliminating the source of the problem, adding the site to Yandex Webmaster or Google Webmaster Console, and sending a request to lift the sanctions. If the issue causing the blacklisting is resolved, automatic verification will exclude the site from malicious lists within a few days. However, if sanctions are manual, it may take weeks to restore reputation.

To remove a site from antivirus blacklists, use the application form on their website, usually in English. Include a brief description of the appeal and note that the site's domain name was mistakenly included in the malicious database. In the form, select "False Positive" if possible.

To start, you'll need to identify the root cause of the problem. It's likely that your feedback forms were compromised, allowing spammers to exploit them and get your domains blacklisted. Take responsibility, own up to the mistake, and make sure to plug those security holes ASAP. You might need to update your CMS, plugins, or even switch to a more secure form solution.

Now, onto the blacklist removal process. You'll need to submit a request to each blacklist authority, providing proof that you've taken steps to rectify the situation. Here's where things can get tedious, as each authority has its own procedures and requirements.

For AV (Antivirus) blacklists, you'll typically need to:

Identify the specific AV vendor that's flagging your domains (e.g., Norton, McAfee, etc.).
Submit a false positive report or a request for removal, usually through their website or support channels.
Provide detailed documentation, such as proof of domain ownership, explanations of the hacking/spamming incident, and evidence of the measures you've taken to prevent future occurrences.
For Spamhaus, the process is a bit more involved:

Check the Spamhaus Block List (SBL) to confirm which of your domains are listed.
Submit a removal request through their website, providing the required information, such as domain ownership verification and a detailed explanation of the incident.
Be prepared to provide additional documentation or evidence, as Spamhaus may request further information to support your removal request.
Given the sheer number of domains you're dealing with, it's essential to prioritize and batch your requests. Focus on the most critical domains first, and then work your way down the list. You may want to consider enlisting the help of a team or hiring a professional service to assist with the process.

To expedite the removal process, make sure you:

Act quickly, as the longer you wait, the more difficult it may become to get your domains removed.
Provide thorough, accurate documentation to avoid delays or rejections.
Follow up with each authority to ensure your requests are being processed and to address any additional concerns they may have.
Removing over 100 domains from blacklists is a daunting task, but with persistence, attention to detail, and a solid understanding of the process, you can get your domains cleared.