wixmp-cdfc384f15841aaa5eab16b1.appspot.com - Flagged

[Oleksii]

Hello,

Wix support is getting user complaints regarding their Malwarebytes antiviruses firing when they are working on their websites in Wix Editor.

The URL reported by your AV is wixmp-cdfc384f15841aaa5eab16b1.appspot.com

Screenshot of the warning is attached to this post.

We've checked this URL and believe this is a false-positive. Can you please whitelist this domain, and give us details regarding the reason this domain was blacklisted?

Thank you and please let us know if you need any more information.

 

[WolfgangLiehr]

+1:

Malwarebytes
www.malwarebytes.com

-Protokolldetails-
Datum des Schutzereignisses: 23.03.20
Uhrzeit des Schutzereignisses: 13:20
Protokolldatei: bd2505a0-6d00-11ea-b049-448a5b9af639.json

-Softwaredaten-
Version: 4.1.0.56
Komponentenversion: 1.0.848
Version des Aktualisierungspakets: 1.0.21222
Lizenz: Premium

-Systemdaten-
Betriebssystem: Windows 10 (Build 18362.720)
CPU: x64
Dateisystem: NTFS
Benutzer: System

-Einzelheiten zu blockierten Websites-
Bösartige Website: 1
, C:\Program Files (x86)\Google\Chrome\Application\chrome.exe, Blockiert, -1, -1, 0.0.0

-Website-Daten-
Kategorie: Trojaner
Domäne: wixmp-cdfc384f15841aaa5eab16b1.appspot.com
IP-Adresse: 172.217.23.180
Port: 443
Typ: Ausgehend
Datei: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(end)

[TeMerc]

1 hour ago, Oleksii said:

Hello,

Wix support is getting user complaints regarding their Malwarebytes antiviruses firing when they are working on their websites in Wix Editor.

The URL reported by your AV is wixmp-cdfc384f15841aaa5eab16b1.appspot.com

Screenshot of the warning is attached to this post.

We've checked this URL and believe this is a false-positive. Can you please whitelist this domain, and give us details regarding the reason this domain was blacklisted?

Thank you and please let us know if you need any more information.

 

Hello, thanks for bringing this to our attention. We've reviewed the site again and have determined it no longer warrants being blocked so we've removed it from our database.

Removal should be reflected in the next database update going out in a few hours or so.

[TeMerc]

2 hours ago, Oleksii said:

Hello,

Wix support is getting user complaints regarding their Malwarebytes antiviruses firing when they are working on their websites in Wix Editor.

The URL reported by your AV is wixmp-cdfc384f15841aaa5eab16b1.appspot.com

Screenshot of the warning is attached to this post.

We've checked this URL and believe this is a false-positive. Can you please whitelist this domain, and give us details regarding the reason this domain was blacklisted?

Thank you and please let us know if you need any more information.

 

Hello upon further evaluation we need to have the following file removed:

wixmp-cdfc384f15841aaa5eab16b1.appspot.com/_api/download/file?downloadToken=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiJ1cm46YXBwOmU2NjYzMGU3MTRmMDQ5MGFhZWExZjE0OWIzYjY5ZTMyIiwiaXNzIjoidXJuOmFwcDplNjY2MzBlNzE0ZjA0OTBhYWVhMWYxNDliM2I2OWUzMiIsImp0aSI6IjQwYmIwYzc1MGFkNiIsImV4cCI6MTU4NTg5OTU2OSwiaWF0IjoxNTgzMzA3NTU5LCJwYXlsb2FkIjp7InBhdGgiOiIvYXJjaGl2ZXMvMmIwN2IxX2FkMDFkMDI3YTE0NjRkODA4M2VlNWRiYzg4ZmYwMjk1LnppcCIsImF0dGFjaG1lbnQiOnsiZmlsZW5hbWUiOiJMdW1pb24xMCBQcm8gQWN0aXZlK1RvcnJlbnQuemlwIn19LCJhdWQiOlsidXJuOnNlcnZpY2U6ZmlsZS5kb3dubG9hZCJdfQ.bbEJBnjgrqtZc1z4LXEotKl9rd-CTAh4RIzLHs9khY

https://www.virustotal.com/gui/file/26723ff7533f96b2f71c95eb496f4efe57c06b9b68a38aa25bfae3ba2f96c9d6/detection