185.48.116.166 xara-online.com user pages

[magix_xara]

Hello,

we (www.magix.com/us/company/magix-portals/) are hosting tens of thousands of websites using the single IP 185.48.116.166 for our partner Xara (www.xara-online.com/us/). We are now getting reports of innocent websites being blocked.
We take reports seriously and remove content but unfortunately some of our users seemed to have triggered a block.

Websites are accessible either using a custom domain or a subdomain of xara.hosting. After some tests it seems, only *.xara.hosting is blocked. Using a custom domain still works.
Some examples:
gwpriester.xara.hosting/buttons/index.htm (Malwarebytes more.png)
testfirma.xara.hosting (malwareBytes_testFirma.jpg)
kbvuhk.xara.hosting (malwareBytes_kbvuhk.jpg)
xaraxone.xara.hosting/pro365/website-design.html
nacooke.xara.hosting/meltonoakhamww/

not blocked: www.taksiplot.com
 

Could you please increase the blocking domain level and block specific subdomains of xara.hosting instead of the whole domain.

 

Thank you.
If you have any further questions send me an email, please.

-David Schmidt
Magix Software GmbH
Berlin, Germany

Edited January 19, 2017 by magix_xara

[MysteryFCM]

We're not blocking *.xara.hosting, nor the IP. Please have them check the databases are up to date.

[magix_xara]

The last two screenshots are from today. I will have him send me logs and his versions.

[MysteryFCM]

Much appreciated, thank you.

[magix_xara]

Hi again,

I've attached the log.

I hope this helps resolving this issue.

MBAMSERVICE.LOG

[MysteryFCM]

Unfortunately, I can't reproduce this. We're not blocking the IP, hostname or parent (the only one we were blocking was verizimbramail.xara.hosting, due to its housing an Apple phish). I'll ask the QA team to take a look at this.

[MysteryFCM]

The QA guys have asked if you can have the user update then restart the machine and see if the issue persists please.

[magix_xara]

I got multiple reports of it working again.

I'd mark this solved for now.

[MysteryFCM]

Thanks for letting me know.