upset2 Posted April 8, 2015 ID:954082 Share Posted April 8, 2015 I own the domain marxsalon.com, which has no website or DNS server or hosting service associated with it and never has, but somehow Malwarebytes is blocking it. In other words, the website doesn't even exist. So now you're blocking domains that have no web presence at all? How did my domain that has never existed as a website end up on your blacklist? Link to post Share on other sites More sharing options...
gonzo Posted April 8, 2015 ID:954089 Share Posted April 8, 2015 I just pinged that domain and got a response. There are also whois records existing for it. Please post the IP address so our researchers can investigate. Without that information, they will wait until you provide it. Link to post Share on other sites More sharing options...
upset2 Posted April 8, 2015 Author ID:954090 Share Posted April 8, 2015 209.105.246.212 I don't understand how my domain has an IP address? Link to post Share on other sites More sharing options...
gonzo Posted April 8, 2015 ID:954100 Share Posted April 8, 2015 Let the researchers look into it. They are great sources of wisdom. Link to post Share on other sites More sharing options...
upset2 Posted April 8, 2015 Author ID:954125 Share Posted April 8, 2015 Okay, so I've contacted namecheap and was told my domain resolves to 192.64.119.156 not 209.105.246.212. They are now changing it to a local IP so it doesn't resolve anywhere.So please explain to me how Malwarebytes ends up with my domain resolving to 209.105.246.212 and then decides to block it when there is no site to block? Does anyone at Malwarebytes check to see if the "websites" they are blocking actually exist? Link to post Share on other sites More sharing options...
gonzo Posted April 8, 2015 ID:954128 Share Posted April 8, 2015 You need to wait for researchers to get back to you. You are thinking strictly about websites. There are a maximum of 65000 ports on any IP address, and any one of those ports can put you out of business if it is malicious. The researchers can tell you more, but you need to give them a chance to look into it. Link to post Share on other sites More sharing options...
Staff Spud Posted April 8, 2015 Staff ID:954132 Share Posted April 8, 2015 marxsalon.com is not blacklisted (blocked) nor does it resolve. You mistook an IP block as being a domain block too. Until very recently we only blocked in IP's. As such, any domain that was using an IP which was blocked, showed up on the alerts. This has now changed where we can block on both IP and domain. I hope this explains things more. Link to post Share on other sites More sharing options...
upset2 Posted April 8, 2015 Author ID:954137 Share Posted April 8, 2015 I just had namecheap change the IP to a local IP so it doesn't resolve any longer, as I already stated above. However, before that change, Malwarebytes was blocking my domain at 209.105.246.212. Please read my response #5 above. Link to post Share on other sites More sharing options...
Staff Spud Posted April 8, 2015 Staff ID:954141 Share Posted April 8, 2015 I have already explained that in post #7. Link to post Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now