Jump to content
Davebert

gallery.mailchimp.com - 54.192.52.192 and 52.84.89.77

Recommended Posts

Just today for the first time Malwarebytes is blocking:

54.240.170.148 gallery.mailchimp.com

I subscribe to homemadetools.net and once I figured out where the problem was originating from, it is in my Thunderbird mail folder with the emails that are sent from there. When I look at the image it pops the warning about blocking the above address. I can click on any of these emails in that folder and it pops the warning and the main image is missing but the rest of the mail is view-able. I guess if you go to homemadetools.net and sign up to the mailing list you can see for yourself.

DB

Edited by Dashke

Share this post


Link to post
Share on other sites

Yes, I noticed this the past 24 hours or so.. at least 4 maybe 5 emails I have received the past day have had images blocked, and then even clicking links bring up a malwarebyes message, blocking things to do with mailchimp.

The emails that are having content blocked, in my opinion are legitmate emails, ie emails from trusted people / businesses / sellers.

Share this post


Link to post
Share on other sites

I had it hit on some other IP addresses but still referencing mailchimp. Thanks for confirming the issue.

DB

Share this post


Link to post
Share on other sites

I am having the same issues.  I just click on emails and it brings up the malicious malwarebytes message.  These are legitimate sites that I am dealing with also.  I hope that someone has an answer soon.  I did 2 scans and threats came up on both. I'll attach pictures.

 

Malware.jpg

malware 3.jpg

Malware2.jpg

Share this post


Link to post
Share on other sites

I just had the same happen when I tried to send an email to State Farm through my Windows 10 mail app.

Edited by zigs16
more info

Share this post


Link to post
Share on other sites

I having same problem -- all my alerts from WPMU DEV, University of Idaho are getting blocked.  

Share this post


Link to post
Share on other sites

I have another report of a user unable to use the Mailchimp website because it was blocked by MWB.  Do we have confirmation that this is aberrant behavior an

Is the solution (until MWB updates to correct this) to whitelist sites (https://support.malwarebytes.com/customer/en/portal/articles/1835326-how-do-i-stop-malwarebytes-anti-malware-from-blocking-a-website-or-network-program-that-i-trust-?b_id=6438) and if so what are all of the Mailchimp IPs or domains that would need to be whitelisted?

Share this post


Link to post
Share on other sites

Alert popped up when viewing an email that was sent via mailchimp.

This will affect any emails sent from mailchimp that contain images.

 

Domain: gallery.mailchimp.com

 

Screenshot 2016-12-08 15.34.33 new.png

Share this post


Link to post
Share on other sites

Same problem here.  Could send photo of the malwarebytes warning but there is no point as D2J2 has already done it.  See that one is on outlook.exe, mine is on emClient.exe ..... think I need a fix for this

Share this post


Link to post
Share on other sites

The site

gallery.mailchimp.com

is currently housing several malicious files. At this time we do not advise use of said site until those files are removed.

Thank you

 

 

Share this post


Link to post
Share on other sites
2 hours ago, AdvancedSetup said:

The site


gallery.mailchimp.com

is currently housing several malicious files. At this time we do not advise use of said site until those files are removed.

Thank you

 

 

Thank you .... Its nice to have a warning about not visiting this site .... but I never asked my computer to visit it in the first place!!!!  It started trying to communicate on its own and no interference from me.  I have run a scan ..... but it has not reported anything so there is no file to delete or quarantine.

 

Share this post


Link to post
Share on other sites
3 hours ago, AdvancedSetup said:

The site


gallery.mailchimp.com

is currently housing several malicious files. At this time we do not advise use of said site until those files are removed.

Thank you

 

 

 

Share this post


Link to post
Share on other sites
3 hours ago, AdvancedSetup said:

The site


gallery.mailchimp.com

is currently housing several malicious files. At this time we do not advise use of said site until those files are removed.

Thank you

 

 

That is good to know.. good to know Malwarebytes is working tirelessly as always for us.. Thanks.

Share this post


Link to post
Share on other sites

I got the same issue today, and there's no way I can "remove" it, and it keeps showing, everytime I check my email.

Is there anyway to stop showing me that message and just block it all the time?

Share this post


Link to post
Share on other sites

I'm using Postbox, also showing with many email messages.  Presumably these messages are tied to mailchimp for marketing.

Share this post


Link to post
Share on other sites
10 hours ago, Vanilla2000 said:

Thank you .... Its nice to have a warning about not visiting this site .... but I never asked my computer to visit it in the first place!!!!  It started trying to communicate on its own and no interference from me.  I have run a scan ..... but it has not reported anything so there is no file to delete or quarantine.

 

A program you are using is attempting to contact that site.  There was another post I read on this subject, that explaination is that, is that it was a wildcard block.

Share this post


Link to post
Share on other sites

Does anyone have a "paid" MailChimp account that will allow you to contact them and alert them to this situation?  I've got a "free" account but there is no way for me contact them for support because I'm using the free service.

Website Blocked.jpg

Share this post


Link to post
Share on other sites
Guest
This topic is now closed to further replies.

  • Recently Browsing   0 members

    No registered users viewing this page.

×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.