Jump to content
Sign in to follow this  
CueFox

ANSWERED False Positive - 2 websites

Recommended Posts

Hi,

I am a web developer and 2 of our sites that we host have recently been blacklisted by MalwareBytes.
https://miss-hits.co.uk/
https://miss-hits.club/

Both sites were switched from a VPS server in Norway to one in Canada in August, meaning brand new IP addresses, and it was after the switch that users of MalwareBytes started getting "Hijack" errors when trying to access the sites.

 

Your support advised me that:

"From our Research Team.
217.78.1.6/32
217.78.1.6
Blocked for Hijack.Browlock, Fraud.Fake.TechSupport on 2018-07-29"

Please note that we took these IP addresses AFTER 29 July 2018.

Thank you.

Edited by Zynthesist
remove links

Share this post


Link to post
Share on other sites

Hello,

Please do not post live links. 

The domains you listed are not blacklisted by us.  We do have an IP block on 217.78.1.6, which is a shared IP. 

Share this post


Link to post
Share on other sites

Support told me that they were and to post it here.

Can someone please help me help your customers please.

Share this post


Link to post
Share on other sites

The IP I listed above is blocked (Hijack .Browlock,  Fraud.Fake.TechSupport). The IP is a shared IP so it hosts many domains not just the two you listed above. Again, the block is not domain specific, it is an IP block.

Share this post


Link to post
Share on other sites

You're not telling me how to move forward. There is no advice whatsoever.

Again, the IP you are referring to was blocked on 29 July, according to the support guys, and we took that IP after that date as I have already said.

The IP does not host "many" domains, just 3 and they are all related to each other.

I was referred here from your support ticket guys for help. Can you please offer advice on how to help your customers accessing these sites please. Not all of them are able to add the sites as Exclusions.

Thank you.

Share this post


Link to post
Share on other sites

The first 2 I listed and:

https://coach.miss-hits.co.uk/

To re-iterate, since we changed servers (as detailed in my 1st post), MalwareBytes flags these sites as hijacked. The IP addresses your support provided me became ours AFTER the dates you scanned them.

Share this post


Link to post
Share on other sites
Guest
This topic is now closed to further replies.
Sign in to follow this  

  • Recently Browsing   0 members

    No registered users viewing this page.

×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.