PKI Solutions / 23.235.215.187 is being blocked

[MarkCooper]

Hello, our own website is being blocked by MalWareBytes. It was scanned and verified to be trojan free, but the tool continues to show it is blocked. History file is attached. This is also a dedicated IP address as just verified by our ISP.

 

Malwarebytes
www.malwarebytes.com

-Log Details-
Protection Event Date: 2/22/21
Protection Event Time: 5:18 PM
Log File: 07f8786e-7575-11eb-95ae-f875a4a95ef2.json

-Software Information-
Version: 4.3.0.98
Components Version: 1.0.1173
Update Package Version: 1.0.37407
License: Premium

-System Information-
OS: Windows 10 (Build 19041.804)
CPU: x64
File System: NTFS
User: System

-Blocked Website Details-
Malicious Website: 1
, C:\Program Files (x86)\Google\Chrome\Application\chrome.exe, Blocked, -1, -1, 0.0.0, , 

-Website Data-
Category: Trojan
Domain: www.pkisolutions.com
IP Address: 23.235.215.187
Port: 443
Type: Outbound
File: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(end)

 

 

Detection.txt

[JPopovic]

Hello,

There is a potentially malicious file related to this domain:

 https://www.pkisolutions.com/downloads/courses/PKI%20In-depth/Certificate%20Jailbreak.zip 

VT file detection:

https://www.virustotal.com/gui/file/009fa44877a816e5f1710d8667933b2093e55af183a13f9f456bb6b4038b3f71/detection

 

Unfortunately, we wouldn't be able to remove the block before this file is removed/deleted.

Thank you for your understanding!

[MarkCooper]

We have removed that file. It's not a trojan, but contains an open source tool to demonstrate how certificate private keys can be extracted from a windows system - https://github.com/iSECPartners/jailbreak-Windows. We have removed the file out of an abundance of caution. Please review and update your database accordingly.

[JPopovic]

The block will now be removed.

Thank you!

[MarkCooper]

Thank you. Can you tell me when the block was first put into place? Wondering how long this had been occuring. Thanks