Hello,
It's been a while since this started, but I figured reporting it as a FP could help.
My university's website and all its subdomains / IP addresses are detected by malwarebytes, this becomes particularly frustrating since adding "uanl.mx" as an exclusion does not stop "medicina.uanl.mx" from being blocked, and adding "medicina.uanl.mx" does not stop "www.medicina.uanl.mx" from blockage, which makes it very difficult to interact with the university's online platform without disabling web blocking at all. Hopefully it is a false positive and there are no shady things going on.
(BTW, I've attached several detection logs, but basically all subdomains of uanl.mx are detected)
Thank you for your time.
J
20180209.txt
20180121-3.txt
20180121-4.txt
20180107.txt
20180121.txt
20180121-2.txt