False positive, please de-list 54.213.49.58

[devopsguy]

Hi, I'm a technical admin for the IPs

54.213.49.58
35.161.76.122
52.36.80.160

This site currently passes all my security scans, has solid SSL certs. Can you please delist these IP and tell me why it was listed in the first place? It redirects to other domains, so if one of them is hosting malware I can track it down.

[Zynthesist]

Can you please post the protection log, shows details about the block.

[devopsguy]

My users are complaining. One customer submitted a screenshot. I don't run malwarebytes on my machine.

[devopsguy]

Only people running MWB are having this issue, the links work fine in all browsers on win and mac. Contacting customers to see if they have the logs. In the mean time, can you look up our IPs?

[Zynthesist]

We are not blocking the IPs you listed but we are blocking the domain in your screenshot, cntrck[.]com for spam and fraud.  

[devopsguy]

To the best of my knowledge, this is an above-board organization that complies with can-spam and other regulatory requirements. What kind of compliance information do you need to de-list this domain?

Edited April 25, 2017 by devopsguy

[devopsguy]

I further checked this domain and these IPs against every major RBL, and I don't see any evidence of fraud or non-compliant advertising. Obviously traffic can come from anywhere, so a site linking to this domain could be engaging in shenanigans with the owners knowing, but I don't think there is any evidence that this domain is being used for fraud or illegal mailing. In the mean time, customers intending to visit this site are being blocked. 

I think this is a mistake. Please de-list.

Edited April 25, 2017 by devopsguy

[Zynthesist]

The block will be re-evaluated.

[devopsguy]

Thank you. Please keep me up to date so I can respond to these customer tickets.

[devopsguy]

Hi, any update on this? I'm really hoping to close this ticket!

[devopsguy]

Hey there, do you have an update for me? Sorry to bug you, but I now have half a dozen customer tickets. My client want me to tell customers to uninstall malwarebytes but I think that's a terrible idea. If you delist the site, it will fix the problem for every customer, including those who are not reporting a ticket, and it won't expose their customers to malware.

 

Any progress on getting this domain site re-evaluated?

Edited April 26, 2017 by devopsguy

[Zynthesist]

The block is being removed.