Twimg domain blocked?

[holysaiyan1]

The pbs.twimg.* domain (Twitter's image-hosting domain) seems to be on the malicious website protection. When Malicious Website Protection is activated, all images uploaded to Twitter don't load, including asset images in Tweetdeck and websites hotlinking from pbs.twimg.*

 

When Malicious Website Protection is not active, all applications and websites behave as expected. Adding pbs.twimg.com and *.twimg.com to the Web Exclusions list does not fix the problem.

[Zynthesist]

Hello, 

 

Can you please post the protection log. 

 

Thanks.

[holysaiyan1]

 

Scan, 12/7/2015 1:44 AM, SYSTEM, LAPPY, Context, Start:12/7/2015 1:36 AM, Duration:7 min 53 sec, Threat Scan, Completed, 0 Malware Detections, 0 Non-Malware Detections,

Scan, 12/7/2015 1:59 AM, SYSTEM, LAPPY, Context, Start:12/7/2015 1:54 AM, Duration:5 min 12 sec, Threat Scan, Completed, 0 Malware Detections, 0 Non-Malware Detections,

Update, 12/7/2015 7:46 AM, SYSTEM, LAPPY, Scheduler, Malware Database, 2015.12.7.1, 2015.12.7.2,

Protection, 12/7/2015 7:46 AM, SYSTEM, LAPPY, Protection, Refresh, Starting,

Protection, 12/7/2015 7:46 AM, SYSTEM, LAPPY, Protection, Refresh, Success,

Update, 12/7/2015 10:22 AM, SYSTEM, LAPPY, Scheduler, Malware Database, 2015.12.7.2, 2015.12.7.3,

Protection, 12/7/2015 10:22 AM, SYSTEM, LAPPY, Protection, Refresh, Starting,

Protection, 12/7/2015 10:22 AM, SYSTEM, LAPPY, Protection, Refresh, Success,

Update, 12/7/2015 11:32 AM, SYSTEM, LAPPY, Scheduler, Rootkit Database, 2015.11.26.1, 2015.12.7.1,

Update, 12/7/2015 11:32 AM, SYSTEM, LAPPY, Scheduler, Domain Database, 2015.12.6.2, 2015.12.7.2,

Protection, 12/7/2015 11:32 AM, SYSTEM, LAPPY, Protection, Refresh, Starting,

Protection, 12/7/2015 11:32 AM, SYSTEM, LAPPY, Protection, Refresh, Success,

Update, 12/7/2015 12:38 PM, SYSTEM, LAPPY, Scheduler, Malware Database, 2015.12.7.3, 2015.12.7.4,

Protection, 12/7/2015 12:38 PM, SYSTEM, LAPPY, Protection, Refresh, Starting,

Protection, 12/7/2015 12:38 PM, SYSTEM, LAPPY, Protection, Refresh, Success,

Update, 12/7/2015 3:50 PM, SYSTEM, LAPPY, Scheduler, Malware Database, 2015.12.7.4, 2015.12.7.5,

Protection, 12/7/2015 3:50 PM, SYSTEM, LAPPY, Protection, Refresh, Starting,

Protection, 12/7/2015 3:50 PM, SYSTEM, LAPPY, Protection, Refresh, Success,

Update, 12/7/2015 5:28 PM, SYSTEM, LAPPY, Scheduler, Malware Database, 2015.12.7.5, 2015.12.7.6,

Protection, 12/7/2015 5:28 PM, SYSTEM, LAPPY, Protection, Refresh, Starting,

Protection, 12/7/2015 5:28 PM, SYSTEM, LAPPY, Protection, Refresh, Success,

Update, 12/7/2015 7:34 PM, SYSTEM, LAPPY, Scheduler, Domain Database, 2015.12.7.2, 2015.12.7.3,

Protection, 12/7/2015 7:34 PM, SYSTEM, LAPPY, Protection, Refresh, Starting,

Protection, 12/7/2015 7:34 PM, SYSTEM, LAPPY, Protection, Refresh, Success,

Update, 12/7/2015 7:50 PM, SYSTEM, LAPPY, Scheduler, Domain Database, 2015.12.7.3, 2015.12.8.1,

Protection, 12/7/2015 7:50 PM, SYSTEM, LAPPY, Protection, Refresh, Starting,

Protection, 12/7/2015 7:50 PM, SYSTEM, LAPPY, Protection, Refresh, Success,

Update, 12/7/2015 8:37 PM, SYSTEM, LAPPY, Scheduler, IP Database, 2015.12.4.3, 2015.12.8.1,

Update, 12/7/2015 8:38 PM, SYSTEM, LAPPY, Scheduler, Domain Database, 2015.12.8.1, 2015.12.8.2,

Protection, 12/7/2015 8:38 PM, SYSTEM, LAPPY, Protection, Refresh, Starting,

Protection, 12/7/2015 8:38 PM, SYSTEM, LAPPY, Protection, Refresh, Success,

(end)

 

[MysteryFCM]

We're not actually blocking that site, nor any of its subdomains.

[holysaiyan1]

We're not actually blocking that site, nor any of its subdomains.

Perhaps I was unclear in my description of the problem, so I've made a side-by-side comparison of what Twitter.com looks like with Malicious Website Protection on, and what it looks like with MWP off. As you can see, MWP is blocking images hosted by Twitter. (Forgive the spelling errors in the image, I put it together a bit too hastily)

 

[MysteryFCM]

Can you give me the URI for that page please?

[holysaiyan1]

www.twitter.com. Images on Twitter are served from *.twimg.com, a image-hosting site operated in-house by Twitter.

[MysteryFCM]

Cheers (I thought it was some specific page or some such).

 

I'll have to do some more testing as I can't reproduce the issue here thus far.