pjsemmer Posted October 6, 2021 ID:1482878 Share Posted October 6, 2021 Hello, suddenly today Malwarebytes is blocking one of the domains which is owned by my company. The domain is healthsuiteadvantage.com and the registrar is Network Solutions. We believe this could have been blacklisted due to a possible issue with the configuration of our firewall/VPN. Users are getting the popup messages, similar to these: Why we believe it is the VPN device is because when they are connected and open up their browser, they are getting detections in the History, even by not going to the healthsuiteadvantage.com domain. They do not get the detections if they are disconnected. We are working to determine why something in our VPN connection is causing the browsers to try to connect to that domain, however we need the healthsuiteadvantage.com domain removed from the blacklist. Thank you. Regards, Paul Semmer Link to post Share on other sites More sharing options...
Staff TeMerc Posted October 6, 2021 Staff ID:1482882 Share Posted October 6, 2021 17 minutes ago, pjsemmer said: Hello, suddenly today Malwarebytes is blocking one of the domains which is owned by my company. The domain is healthsuiteadvantage.com and the registrar is Network Solutions. We believe this could have been blacklisted due to a possible issue with the configuration of our firewall/VPN. Users are getting the popup messages, similar to these: Why we believe it is the VPN device is because when they are connected and open up their browser, they are getting detections in the History, even by not going to the healthsuiteadvantage.com domain. They do not get the detections if they are disconnected. We are working to determine why something in our VPN connection is causing the browsers to try to connect to that domain, however we need the healthsuiteadvantage.com domain removed from the blacklist. Thank you. Regards, Paul Semmer Hello- the block is on the IP based on this data: https://www.netsurion.com/catches/man-in-the-middle-disrupted-at-multi-national Also VT has an enormous list of detected domains: VirusTotal - Ip address - 208.91.197.27 Link to post Share on other sites More sharing options...
pjsemmer Posted October 6, 2021 Author ID:1482883 Share Posted October 6, 2021 Thank you for the response, however being neither a network nor a security expert, I'm not sure what I need to do to mitigate this. Is this a Network Solutions issue since it's their IP address? Link to post Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now