apanowicz

Hello, Malwarebytess reporting to some users as a "suspicious top level domain" domaincost.club Site has been scanned and checked. No issues found. I would guess the .club Thanks, Paul

MysteryFCM, WRT viejobueno.com, our Abuse department did find something on a 2nd look: It's likely the IFRAME on http://viejobueno.com/Hogar . There are discrepancies between what the IFRAME is displaying and the company's actual website. We'll suspend the user and tell him to take it down on the grounds of potential phishing. They are handling now, so we should be all set for now after the block is lifted. Thanks much for your excellent info and prompt assistance. Our sysadmins are looking into Squid and Snort to see about putting in place, great suggestions. Please let me know if anything further required from my end. Paul

MysteryFCM, Thanks for the reply! Please bare with me as I am not very familiar with this type of thing but have been working with our Abuse department on this. We absolutely want to handle these issues as they arise so we do not get into this situation again. We believe we've taken proper action on all domains listed except for: trustbid.ws viejobueno.com warewz.ws e-service.ws alssayer.ws xsex.ws We were unable to find anything currently wrong with the domains. Also, some domains reported are not even registered now. Since new to this, I did look at many posts in your forums as well as http://hosts-file.net forum, but still have the following questions: 1. Is there someplace we can monitor our IPs and immediately take necessary actions so we don't keep getting blocked? 2. Does Malwarebytes IP blocking basically coincide with what http://hosts-file.net/ offers as far as a list of bad IPs to avoid? 3. Do you recommend any proactive actions we could begin taking in order to prevent this? Since we are a hosting company, it's difficult to monitor what users have on their sites. I know how forums work, so don't hesitate to tell me to do the research(just won't be as timely ). We just want to take care of this ASAP, so any direction would be much appreciated. Thanks, Paul

Hi, I work for WebSite.ws and was informed when using your product our IPs/sites are being blocked. I am hoping this is a False Positive and the IPs can be whitelisted. But if there is an issue, we would like to fix it. I've attached a log of blocked IPs generated by attempting to reach the following sites: www.website.ws www.freedom.ws www.email.ws www.dvd.ws www.samoa.ws Please let me know what needs to be done to correct this. BTW - you guys have a GREAT product!!!!!! Thanks, Paul protection_log_2009_10_27.txt