Jump to content
PIES

False phishing reports result in websites being blocked

Recommended Posts

Posted (edited)

Hello! I work for aa small company that helps political candidates launch their websites. We use Netlify for hosting. We've had several reports recently that our clients' website was blocked when visitors tried to visit it. In each case they were using Malware Bytes. 

Below are the websites affected so far and a corresponding screenshot of the message the visitor received.

hxxps://www.candychristophe4congress.com/

image002.jpg.3a311520fc5eb7cb9ee89510c1a60fd2.jpg

 

hxxps://www.marcyfornc.com/

IMG_7203.thumb.jpg.161283f130518d11d9dc4cce2534bfa1.jpg

 

hxxps://www.kaylaforiowa.com/

malwareimage.thumb.png.cc9598536bf1a7d09149d6eab602a310.png

hxxps://www.voteannemarie.com/

image.png.5c7bf7d79440a14cb4f28ab966d74383.png

 

hxxps://www.voteforaj.com/ was also affected, but they did not provide a screenshot. 

Is it possible for you to do something on your end that would permanently unblock our IP address so that we don't run into this issue going forward?

 

Any insight you can offer would be appreciated!

- Amanda from Campaign PIES Tools

 

Edited by TeMerc
disabled live links

Share this post


Link to post
Share on other sites
38 minutes ago, PIES said:

Hello! I work for aa small company that helps political candidates launch their websites. We use Netlify for hosting. We've had several reports recently that our clients' website was blocked when visitors tried to visit it. In each case they were using Malware Bytes. 

Below are the websites affected so far and a corresponding screenshot of the message the visitor received.

hxxps://www.candychristophe4congress.com/

image002.jpg.3a311520fc5eb7cb9ee89510c1a60fd2.jpg

 

hxxps://www.marcyfornc.com/

IMG_7203.thumb.jpg.161283f130518d11d9dc4cce2534bfa1.jpg

 

hxxps://www.kaylaforiowa.com/

malwareimage.thumb.png.cc9598536bf1a7d09149d6eab602a310.png

hxxps://www.voteannemarie.com/

image.png.5c7bf7d79440a14cb4f28ab966d74383.png

 

hxxps://www.voteforaj.com/ was also affected, but they did not provide a screenshot. 

Is it possible for you to do something on your end that would permanently unblock our IP address so that we don't run into this issue going forward?

 

Any insight you can offer would be appreciated!

- Amanda from Campaign PIES Tools

 

Hello-

The only domain we can find in our database is bitballoon[.]com, none of the others appear, we'd need to see the logs for each blocked instance to fully investigate.

Share this post


Link to post
Share on other sites

Hello! Unfortunately, I can't share the logs due to the GDPR and CCPA laws, but would it be possible to unblock these hostnames?

 
candychristophe-website.bitballoon.com
 
marcywofford-website.bitballoon.com
 
zen-cori-81888f.bitballoon.com
 
annemariegrahamhudak-website.bitballoon.com
 
ajlankurdoglu-website.bitballoon.com

 

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now

  • Recently Browsing   0 members

    No registered users viewing this page.

×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.