Ransomware block working.

[nukecad]

First time I've had one of these (Came across it whilst moderating at another forum).

I does show that the extension is doing it's job as expected.

[rakka]

whitelisted

[nukecad]

It's still getting blocked as hosting ransomware here, but only the 'katalog' not the main site.

TBH I'm not bothered myself, the link came from a spammer on a forum I moderate.
I was originaly posting just to say that I'd not seen a ransomware block from the add-on before.

[rakka]

I don't see a block on http://katalog.pl/

[Porthos]

1 hour ago, rakka said:

I don't see a block on http://katalog.pl/

But the main program blocks it.

Malwarebytes
www.malwarebytes.com

-Log Details-
Protection Event Date: 5/20/19
Protection Event Time: 3:42 PM
Log File: d2795d07-7b3f-11e9-91a4-001a7dda7102.json

-Software Information-
Version: 3.7.1.2839
Components Version: 1.0.586
Update Package Version: 1.0.10682
License: Premium

-System Information-
OS: Windows 10 (Build 18362.116)
CPU: x64
File System: NTFS
User: System

-Blocked Website Details-
Malicious Website: 1
, , Blocked, [-1], [-1],0.0.0

-Website Data-
Category: Phishing
Domain: katalog.pl
IP Address: 185.253.212.22
Port: [58031]
Type: Outbound
File: C:\Program Files\Mozilla Firefox\firefox.exe

 

(end)

[exile360]

You may need to post about this in the Website Blocking FP area so that the Research team can investigate and whitelist the site assuming it's safe.

[nukecad]

7 hours ago, rakka said:

I don't see a block on http://katalog.pl/

No, but my original report was:

http://www.katalog.grajewo.pl

Which is still blocked by the add on (v1.0.44) "due to ransomware" on my machine.