False Positive

[LERCOnline]

Hi,

We've had a customer report that our website https://my.lerc.online is being blocked by MalwareBytes. Can you please check and whitelist it?

Thanks

[Porthos]

This is a Browser Guard Block. I will Alert the proper team to investigate. There is no need for any further action from you at this time.

 

While we wait for staff. A note on Website blocked due to a suspicious top level domain (TLD)

Non-standard TLD's (biz/cc/info/xyz/online and so on) are commonly used for malicious purposes.  Malwarebytes err on the side of caution to assure that we are protecting our users. If our users encounter a block, they report it (as you did), it gets tested, and if it is determined to be safe, it gets whitelisted.

@gonzo

[TeMerc]

2 hours ago, LERCOnline said:

Hi,

We've had a customer report that our website https://my.lerc.online is being blocked by MalwareBytes. Can you please check and whitelist it?

Thanks

Hello-

We do not have that domain nor the IP range in our database, is this perhaps a BrowserGuard block?

[LERCOnline]

OK, yes, it appears that this is a BrowserGuard issue. The message is "Website blocked due to a suspicious top level domain (TLD)". Is there any way of centrally whitelisting the domain for use by BrowserGuard, or is this message unavoidable for any website which uses the 'online' TLD? This is clearly a massive problem for any business which uses this TLD.

[gonzo]

The site has been whitelisted. Please allow 15-30 minutes for changes to take effect.