-
Posts
4,622 -
Joined
Content Type
Events
Profiles
Forums
Posts posted by Zynthesist
-
-
Block will be changed to hostname block. Parent domain is and has been used and abused by locky ransomware.
-
Not seeing that domain in our DBs, checked some of the more recent IPs it has been using but not seeing those either in our DBs.
I also tried to but was not able to re-play the block while running MBAM.
-
*go.ro is being used to distribute Locky ransomware, we are blocking it.
-
Blocked for distributing Locky ransomware, we are blocking *jazztel.es .
-
Can you please post your protection log.
-
Hello,
We are blocking this for Fake.Flash and Fake.Java.
-
I will be making a change to the block, which was related to Phishing.
-
-
Blocked for phishing.
-
Block is currently on hostname only so ensure you have updated MBAM to current DB version.
-
The recent Locky ransomware campaigns have been using *.talktalk.net to distribute Locky ransomware.
-
Can you please post the protection log.
-
Block will be removed.
-
Hello,
Ensure you have the latest update, as we are not blocking the domain or IP you are inquiring about.
-
Blocked for Fake Tech Support.
-
IP will be unblocked.
-
Ah ok. Actually I see you listed two different IPs, one in the title and the one in your original post and the web protection block. We are not blocking any of the IPs, we are blocking the domain.
Should be able to add it to exclusion:
https://www.malwarebytes.com/support/guides/mbam/WebExclusions.html
-
Hello Teresa,
We are not blocking that domain or IP. We are blocking a very similar domain universiteenligne[.]icp.fr for phishing.
-
IP was blocked for adware.
-
Block will be removed.
-
We have a block on this parent domain for malvertizing activities.
-
There was an identified phishing threat related to the altervista.org domain. I will be removing the block.
-
Hello,
An identified phishing threat caused the block. I will now remove the block.
-
Hello,
There was an identified phishing threat on dev-freemobile-abonne-fr[.]pantheonsite.io, which has been cleaned up. I will be removing the block now.
108.179.193.42 - hxxp://www.drogapato.com.br
in Website Blocking
Posted
Block will be removed.