fastmail Posted March 11, 2021 ID:1443898 Share Posted March 11, 2021 Website: user.fm This domain is used in our webmail platform to host files attached to emails, and/or files users upload to their hosting space which may then be attached to their emails. This was recently abused by a trial account hosting a html file redirecting to a malicious site. That user has been removed, and we are taking steps to make that form of abuse harder to achieve. If you believe there is a current live threat on that domain please let me know the URL and our abuse team will deal with it, alternatively if this was a previous threat that has already been dealt with please de-list the domain. Thanks. Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted March 11, 2021 Root Admin ID:1443906 Share Posted March 11, 2021 I will submit to have one of our Research Engineers review. Please note the following from my own look up. 1/86 on VThttps://www.virustotal.com/gui/url/050ac68b0c5dddbfdb86f22d97c873c759edf49a4ec954649216fd92afb164b9/detection Visiting the link https://sitecheck.sucuri.net/results/user.fm Unable to locate 404 error page - alerted on it and the Yandex block 0 blacklist detections on MXToolbox https://mxtoolbox.com/SuperTool.aspx?action=blacklist%3auser.fm&run=toolpage SSL Check looks good as well Thank you Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted March 11, 2021 Root Admin ID:1443912 Share Posted March 11, 2021 @fastmail Research says the site has been cleaned up and the block will be removed. Please allow about an hour or so for the update to be applied. Cheers Link to post Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now