Search the Community

That CleanTalk didn't let me in. So just read the title.

One of our customer who is MalwareBytes user reported to us that our website is blocked by MalwareByters in their windows PC. Our website has no history of hack. We did migrate it from one hosting to other recently but that should not flag site as malicious. Here is Sucuri check: https://sitecheck.sucuri.net/results/unlimitedwp.com We do have paid Sucuri on website where website gets monitored for malware routinely. Google safe browsing: https://transparencyreport.google.com/safe-browsing/search?url=https:%2F%2Fwww.unlimitedwp.com Virustotal: https://www.virustotal.com/gui/url/286504b59b6b086a1b7d5370afeeed85d0fb62392c12381dc055497c636a7f14/detection Can you help us whitelist our website?

Hi there, Our new website is blocked by MalewareBytes. We changed our domain (from www.remediasolutions.com to www.remedia.tech) 2-3 weeks ago. I understand the authority is garbarge for the moment, I'd just like to know if we can resolve this (we were planning to launch today). Could this block be remove or could our website be whitelisted somewhere? Thanks!

Since version 4.x when a site get blocked in the browser I don't get the reason why it blocked the site. It just saying that the site can't be loaded. I have seen other people get a nice interface on the website. The Webbrowser I use: Firefox 70.0.1 x64. The OS I use is: Windows 10 x64 - Version: 1909 (18363.476)

Hello! I just received an alert by my Malwarebytes 4.0 that it blocked an outbound connection to a Steam website. I just wanted to know if this is a false positive, or a legitimate threat. I've attached my log and screenshots below. If I could get a fast response by a staff member/expert, that would be greatly appreciated as this occurred on my work computer. Thanks, and I hope to hear from you soon! steam report.txt

Hi, For some weird reason our website is being blocked by malwarebytes. The site was attacked by hackers but that's a long time ago and we fixed and took proper actions to keep it secure. Screenshot and report attached. Please take necessary steps to unblock this. Thank You mbm_log.txt

Greetings, I think this is a false positive, as I've never seen any sort of phishing activity on the PQ website. Just a silly game to play. You can see more info by pulling up Progress Quest on Wikipedia as well. Malwarebytes www.malwarebytes.com -Log Details- Protection Event Date: 8/27/18 Protection Event Time: 4:26 PM Log File: ab7bb2aa-aa50-11e8-8042-005056c00001.json -Software Information- Version: 3.5.1.2522 Components Version: 1.0.421 Update Package Version: 1.0.6529 License: Premium -System Information- OS: Windows 10 (Build 17134.228) CPU: x64 File System: NTFS User: System -Blocked Website Details- Malicious Website: 1 , , Blocked, [-1], [-1],0.0.0 -Website Data- Category: Phishing Domain: progressquest.com IP Address: 173.230.140.86 Port: [65402] Type: Outbound File: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (end) Best, Zzyzx

Greetings, For some reason, the news site, Salon.com is blocked, and I'm not sure why, since it's a legitimate news site. You can see more info about it on Wikipedia: hxxps://en.wikipedia.org/wiki/Salon_(website) Here is the protection log: Malwarebytes www.malwarebytes.com -Log Details- Protection Event Date: 6/18/18 Protection Event Time: 2:01 PM Log File: cc50677a-733a-11e8-99a1-005056c00001.json Administrator: Yes -Software Information- Version: 3.5.1.2522 Components Version: 1.0.374 Update Package Version: 1.0.5530 License: Premium -System Information- OS: Windows 10 (Build 17134.112) CPU: x64 File System: NTFS User: System -Blocked Website Details- Malicious Website: 1 , , Blocked, [-1], [-1],0.0.0 -Website Data- Category: RiskWare Domain: www.salon.com IP Address: 151.101.1.167 Port: [61616] Type: Outbound File: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (end) Best, Zzyzx

Hello! We are an advertising network: https://mixadvert.com On this site http://hronika.info/ there are many ad networks. Why our site got into PUP? Other ad networks did not hit?

Hi, My website (legentilphotographe.com) have been hacked last february and all the damage has been wiped and securised but some antivirus are still blocking its access to my customers. You will find "Malwarebytes HpHosts" in the attached screenshot of Virustotal scan... Please, update your database because I am loosing all my customers because of this... Help ! Denis

I am getting this website URL as Suspicious in Virus total, This website URL is Safe and Secure. Kindly White-list it ASAP. https://www.virustotal.com/#/url/19155c33cccb3afb71ddc70ec1e5258143fa367616e0b174cca32b22cf219eac/detection

We have received complaints from some users that they can not log into their accounts at https://platform.jsecoin.com due to a block placed on the site by malware bytes. The platform does not contain malware and I believe it was flagged because we do web based cryptocurrency mining. Users have signed up for an account and want to access the platform to check their balances and run the mining script. The web mining platform is javascript based and does not include any downloadable content which could be considered malware. If you get a chance to test the platform you will see it is quite different to most peoples preconceptions about cryptocurrency mining. Main domain: https://jsecoin.com Sub domains: https://platform.jsecoin.com, https://api.jsecoin.com, https://load.jsecoin.com IP address: 35.190.24.124 If you require any further information please do not hesitate to contact me on here or via email.

Greetings, For some reason, this IP (217.23.187.143) used by the game War Thunder launcher/updater, a Gaijin Entertainment game distributed by Steam is being blocked as a malicious website. Please see the log below: Malwarebytes www.malwarebytes.com -Log Details- Protection Event Date: 2/8/18 Protection Event Time: 2:25 AM Log File: fd0cdce4-0cb1-11e8-87d1-005056c00001.json Administrator: Yes -Software Information- Version: 3.3.1.2183 Components Version: 1.0.262 Update Package Version: 1.0.3897 License: Premium -System Information- OS: Windows 10 (Build 16299.192) CPU: x64 File System: NTFS User: System -Blocked Website Details- Malicious Website: 1 , , Blocked, [-1], [-1],0.0.0 -Website Data- Category: Unspecified Domain: IP Address: 217.23.187.143 Port: [54041] Type: Outbound File: C:\Program Files (x86)\Steam\steamapps\common\War Thunder\launcher.exe (end) Thanks for your help, Zzyzx

Hello, This site is blocked by MalwareByte Premium (free trail version). This is not malicious website. Please check and remove it from blacklist. Thanks!

Our website fourpair.com (74.124.202.201) is being blocked by malwarebytes. We have run a shell scan and picked up nothing as well as no other issues brought to our attention. Please advise what we can do to have this removed. Thank you!

Can you please unblock the websites http://eapply.amex-corporate-card.se and https://eapply.amex-corporate-card.se According to virustotal.com you are blocking the websites for phishing. However, the American Express website itself is providing a link to that website. You can find it on https://business.americanexpress.com/se/foretagskort/corporate-gold-card (expand "Ansökningshandlingar och vilkor" to find the link at "Kortansökan"). Therefore it is not a phishing site.

My website at www.aadharcard.ind.in (35,224,159,141) has been blocked by Malwarebytes.I am not sure what may have caused it.

Greetings, I have noticed over the last few days that both NE-1 and NE-2 on AWS are blocked for some reason, specifically: s3-ap-northeast-1.amazonaws.com s3-ap-northeast-2.amazonaws.com NE-1 was from something in Chrome, while NE-2 was actually while Samsung Magician was trying to download an update. Here are the logs for both: Northeast-1: Malwarebytes www.malwarebytes.com -Log Details- Protection Event Date: 12/5/17 Protection Event Time: 6:46 PM Log File: 4df8b71c-da27-11e7-ad9c-005056c00001.json Administrator: Yes -Software Information- Version: 3.2.2.2029 Components Version: 1.0.212 Update Package Version: 1.0.3419 License: Premium -System Information- OS: Windows 10 (Build 16299.64) CPU: x64 File System: NTFS User: System -Blocked Website Details- Malicious Website: 1 , , Blocked, [-1], [-1],0.0.0 -Website Data- Domain: s3-ap-northeast-1.amazonaws.com IP Address: 52.219.0.88 Port: [50666] Type: Outbound File: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (end) Northeast-2: Malwarebytes www.malwarebytes.com -Log Details- Protection Event Date: 12/9/17 Protection Event Time: 2:07 AM Log File: 55dff026-dcc0-11e7-ab36-005056c00001.json Administrator: Yes -Software Information- Version: 3.2.2.2029 Components Version: 1.0.212 Update Package Version: 1.0.3450 License: Premium -System Information- OS: Windows 10 (Build 16299.64) CPU: x64 File System: NTFS User: System -Blocked Website Details- Malicious Website: 1 , , Blocked, [-1], [-1],0.0.0 -Website Data- Domain: s3.ap-northeast-2.amazonaws.com IP Address: 52.219.58.4 Port: [58889] Type: Outbound File: C:\Program Files (x86)\Samsung\Samsung Magician\SamsungMagician.exe (end) Thanks for your help, Zzyzx

Three day ago i decided to change my main browser from Chrome to Firefox Quantum and since yesterday i started to have this issue with Malwarebytes. Everytime i use firefox it pop this alert that a site www.radiospick.net with this ip adress 104.24.121.221 is trying to connect, i searched in google about this site and it seems that is a false website with fake offerts. How do i get rid from it? it is a virus or a malware? I´m a newbie in this things. Thanks. This is the report from malwarebyte. Malwarebytes www.malwarebytes.com -Detalles del registro- Fecha del evento de protección: 20/11/17 Hora del evento de protección: 11:35 Archivo de registro: 05550df2-ce2a-11e7-b994-3497f694f361.json Administrador: Sí -Información del software- Versión: 3.3.1.2183 Versión de los componentes: 1.0.236 Versión del paquete de actualización: 1.0.3298 Licencia: Premium -Información del sistema- SO: Windows 10 (Build 16299.64) CPU: x64 Sistema de archivos: NTFS Usuario: System -Detalles del sitio web bloqueado- Sitio web malicioso: 1 , , Bloqueado, [-1], [-1],0.0.0 -Datos de sitio web- Dominio: www.radiospick.net Dirección IP: 104.24.121.221 Puerto: [50425] Tipo: Saliente Archivo: C:\Program Files\Mozilla Firefox\firefox.exe (end)

Hi Have just noticed blocking on www[dot] dorsetlocks [dot]uk. I.P 185.176.43.58 Like most this has been hacked in the past but we cleaned it and that was years ago. There are lost of other site that we have on the same server (I think) and they were hacked and fixed at the same time. They are still working fine. Please help.

This morning MWB on Windows has started presenting 'toast' pop ups warning me about a malicious website via ports 60074 and 52938 at: 239.255.255.250 The related executable is chrome.exe and spotify.exe. I've never had any warning about this address from either executable. The warning are coming in quite regularly (see log attached). Below is the whois lookup and I have attached a screenshot of the toast. Can anybody give any more information on why I am getting this warning? # # ARIN WHOIS data and services are subject to the Terms of Use # available at: https://www.arin.net/whois_tou.html # # If you see inaccuracies in the results, please report at # https://www.arin.net/public/whoisinaccuracy/index.xhtml # # # The following results may also be obtained via: # https://whois.arin.net/rest/nets;q=239.255.255.250?showDetails=true&showARIN=false&showNonArinTopLevelNet=false&ext=netref2 # NetRange: 224.0.0.0 - 239.255.255.255 CIDR: 224.0.0.0/4 NetName: MCAST-NET NetHandle: NET-224-0-0-0-1 Parent: () NetType: IANA Special Use OriginAS: Organization: Internet Assigned Numbers Authority (IANA) RegDate: 1991-05-22 Updated: 2013-08-30 Comment: Addresses starting with a number between 224 and 239 are used for IP multicast. IP multicast is a technology for efficiently sending the same content to multiple destinations. It is commonly used for distributing financial information and video streams, among other things. Comment: Comment: A full list of IPv4 multicast assignments can be found at: Comment: Comment: http://www.iana.org/assignments/multicast-addresses Comment: Comment: A document describing the policies for assigning multicast addresses can be found at: Comment: http://datatracker.ietf.org/doc/rfc5771 Ref: https://whois.arin.net/rest/net/NET-224-0-0-0-1 OrgName: Internet Assigned Numbers Authority OrgId: IANA Address: 12025 Waterfront Drive Address: Suite 300 City: Los Angeles StateProv: CA PostalCode: 90292 Country: US RegDate: Updated: 2012-08-31 Ref: https://whois.arin.net/rest/org/IANA OrgTechHandle: IANA-IP-ARIN OrgTechName: ICANN OrgTechPhone: +1-310-301-5820 OrgTechEmail: email@iana.org OrgTechRef: https://whois.arin.net/rest/poc/IANA-IP-ARIN OrgAbuseHandle: IANA-IP-ARIN OrgAbuseName: ICANN OrgAbusePhone: +1-310-301-5820 OrgAbuseEmail: email@iana.org OrgAbuseRef: https://whois.arin.net/rest/poc/IANA-IP-ARIN # # ARIN WHOIS data and services are subject to the Terms of Use # available at: https://www.arin.net/whois_tou.html # # If you see inaccuracies in the results, please report at # https://www.arin.net/public/whoisinaccuracy/index.xhtml # MWB Log.txt

Hey guys, I am new to this forum and I have 2 questions. One regarding website blocking and another regarding malwarebytes scanning. I visited a website, which I thought seemed harmless, but malwarebytes premium came up and said that it blocked it. The website was . I apologize for posting the link here, I'm not sure how to disguise it. I was looking for information about sol files and it was the first google result. Anyways, after malwarebytes blocked it I got a little nervous about what happened, as one probably would, and so decided to run a scan. But malwarebytes was unable to run a complete scan. It continually cancelled it after 1 second. After I restarted my computer however it was able to scan just fine, and it found nothing. Neither did hitmanpro or windows defender (I know windows defender is pretty basic). So my question 1: Once a website is blocked during real-time protection, can a website manage to sneak in drive-by downloads or anything of the sorts? Or does malwarebytes manage to stop the website completely from loading anything? Question 2: What happened that my scanning refused to work until I restarted? In the log it says that it was canceled, but it did it on its own.

My website www.globaltechsquad.com is detecting your malwarebytes as malicious and blocking by mistake. Its clean from any type of infections . Pls unblock my website its creating lots of problems for me

I just bought the domain thetruckersgroup.com I set up page and was blocked when I tried to access the site. I need to have this block removed. Thank you.

When i open this website with Malwarebytes Pro enabled, its always blocked me to Malicious Website Blocked page. Actually, this is a school website. And we don't want this to be blocked by Malwarebytes (this website is clean) Domain : www.smpn14bdg.majalah.top IP : 192.254.236.35 Port : 50160 Type : Outbond Process : C:\Program Files (x86)\Mozilla Firefox\firefox.exe Thanks