robshep Posted September 30, 2015 ID:993032 Share Posted September 30, 2015 website: aitch tee tee pee colon slash slash snowdon.webcam snowdon.webcam is hosted by amazon cloudfront and so has a bunch of IP Addresses in use. A website tester reported malwarebytes blocking the site to me, but I don't know exactly which IP he connected to.Here is the result of looking up the IP for snowdon.webcam, it could have been any of these.... snowdon.webcam. 56 IN A 216.137.63.139snowdon.webcam. 56 IN A 216.137.63.129snowdon.webcam. 56 IN A 216.137.63.52snowdon.webcam. 56 IN A 54.230.11.54snowdon.webcam. 56 IN A 216.137.63.207snowdon.webcam. 56 IN A 216.137.63.8snowdon.webcam. 56 IN A 216.137.63.19snowdon.webcam. 56 IN A 216.137.63.242 Thank you Rob Link to post Share on other sites More sharing options...
robshep Posted September 30, 2015 Author ID:993038 Share Posted September 30, 2015 The client sent me the log. Looks like it's a domain block <record severity="debug" process="C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" LoggingEventType="0" datetime="2015-09-30T20:08:50.746345+01:00" source="Protection" type="Detection" username="SYSTEM" systemname="ALUMINIUM" last_modified_tag="f6a36452-bfb4-43fe-a7b3-e2fd5a9c183d" subtype="Malicious Website Protection" direction="Outbound" domain="snowdon.webcam" ip="54.230.11.54" malwaretype="Domain" port="59755"></record> Please can you whitelist me! I'm a nice guy, honest (I bet they all say that) Link to post Share on other sites More sharing options...
MysteryFCM Posted October 1, 2015 ID:993112 Share Posted October 1, 2015 This is a gTLD level block (we're blocking .webcam due to so far, only seeing malicious domains using it (this is the first non-malicious domain I've seen using it)). I'll get it adjusted, thank you. Link to post Share on other sites More sharing options...
Recommended Posts