Salelytics

Ok, thank you very much for your assistance and diligence. We will check back in after the next release. Have a great day.

Yes, that works. And it works on any other tab that is opened while the browser is still open as well. Unfortunately, after closing and re-opening the browser it goes back to blocking the site again. Hopefully that helps get to a resolution though, since we can't expect users to do that anytime they need to get to our site. Let us know what else you may need from us.

Sorry for the delayed response as I was traveling this weekend. I did try a factory reset on Friday, but with no changes. I just did it now again and attached is the log after the factory reset and going to the site. BG-Logs_v2.3.15_2022-02-07_82032.txt

BG-Logs_v2.3.15_2022-02-04_163922.txt

Still no luck. Regarding a question I asked earlier. Does this block only by IP or also by domain? Because I noticed that our internal sites (for example abc.salelytics.com) are also being blocked by Browser Guard and there is no way our internal IPs are in the block databases. It looks like the entire salelytics.com domain is being blocked.

Also, after I waited 20ish minutes for the database to update and unblock the site, I then closed the browser and re-opened it and the site is blocked again. Is that expected behavior? That's not very convenient to users. Does that initial database eventually get updated permanently?

Ok, that information is helpful. As far as I can tell the database should be up to date. This time I left the browser open for over 20 minutes. This is what I see in the logs regarding the site: {"@timestamp": "2022-02-04T19:27:36.999Z", "session": "1644002811331", "message": "ANY: Just matched 'salelytics.com' in database: mbgc.db.phishing.2", "level": "INFO"} {"@timestamp": "2022-02-04T19:27:36.999Z", "session": "1644002811331", "message": "OM: (PAGE_BLOCK) malware (phishing) match found on https://www.salelytics.com/ for https://www.salelytics.com/. Database: {'name':'mbgc.db.phishing.2','version':'2.0.202202041720','md5':'548bd81abcdf4306c61a19543b5d947b','sha256':'01f5428acb94f31f328ec85431dc703ca185e4b77c94813e430cb490a8e9f644','size':685012,'url':'https://cdn.mwbsys.com/packages/mbgc.db.phishing.2/5/4/8/b/548bd81abcdf4306c61a19543b5d947b/e1570878-cc62-4c91-81ec-48072ded1760.2'}", "level": "INFO"} {"@timestamp": "2022-02-04T19:27:37.004Z", "session": "1644002811331", "message": "OM: Malware (malware) detection on https://www.salelytics.com/. Redirecting to block page.", "level": "INFO"}

We've installed the extension in Edge, FireFox and Chrome and on computers within our network and outside of the network and they all show the same blocked message from the screenshot originally posted. Something is not right. Also, we still don't know the root cause, so we can't explore ways to fix or prevent this on our side, assuming it wasn't just a false positive. Any other information or suggestions are welcome.

Thank you for your assistance. We will wait to hear what Gonzo has to say. Btw, we uninstalled Malwarebytes Browser Guard in Firefox and re-installed as you suggested and the site is still getting blocked. Also, we are very curious to know why this site was blocked in the first place. That was not provided to us yesterday on the other topic we submitted.

Yes, we've done that a few times already and still no luck. Any other suggestions are welcome. Your blocks are specific to IPs, correct? Or are domains involved?

Your software is blocking our website: hxxps://www.salelytics.com/ (IP: 184.106.62.49). Could you kindly remove it from your blacklist? We thought it was fixed yesterday (see hxxps://forums.malwarebytes.com/topic/283414-1841066249/#comment-1500492), but we are still seeing the block by Malwarebytes Browser Guard: Let us know if you need anything else from us. Thank you.

Your software is blocking our website: hxxps://www.salelytics.com/ (184.106.62.49). Could you kindly remove it from your blacklist? It is a safe site. Thank you.