Hacker News new | ask | show | jobs
by _8j50 1401 days ago
Do you allow user generated content at all that is internet accessible? Have you looked up your domain and IPS in virustotal and other similar services? Can users host any type of file that can be accessed without authentication?

Yes/no/yes to the above questions means that is where you should look.
1 comments
captain_dfx 1401 days ago
We’re a web analytics product. We don’t show any user generated content. All pages (except login/signup/etc..) are behind an authwall.
link
_8j50 1401 days ago
I recommend two things as a minimum then:

1) Check your DNS registrar and make sure there are no new subdomains. dnsdumpster can also help a bit.

2) Check for any new files in the directory tree of public facing sites.

If you're sure all is good you just have to keep escalating with microsoft and creating new requests to remove your domain multiple times a day from different IPs and emails so you can land in the right queue eventually. Squeaky wheel and all (don't forget social media noise).

link