FSCInteractive Posted October 19, 2021 ID:1484523 Share Posted October 19, 2021 A client tried visiting hotelmonteleone.com and was not able to visit the site to a Malwarebytes blocking. Our website host ran scans and said that everything was clean. Is there a way to get this site removed from any blacklist? Link to post Share on other sites More sharing options...
Staff Zynthesist Posted October 20, 2021 Staff ID:1484634 Share Posted October 20, 2021 Hello, This file was reported as communicating with the domain: https://www.virustotal.com/gui/file/df25322be14f617652607a150c806b4ecb3a3317564755518b8100063b58a50e/relations Link to post Share on other sites More sharing options...
FSCInteractive Posted December 20, 2021 Author ID:1493878 Share Posted December 20, 2021 Hello, We are seeing more files now that are being said to communicate with our domain. Can you tell me what they are? Link to post Share on other sites More sharing options...
Staff Zynthesist Posted December 21, 2021 Staff ID:1493890 Share Posted December 21, 2021 Hello, I would contact the server admin or hosting and have them scan the server, ensure all updates are applied, etc. Link to post Share on other sites More sharing options...
thisisu Posted December 21, 2021 ID:1493908 Share Posted December 21, 2021 6 hours ago, FSCInteractive said: Hello, We are seeing more files now that are being said to communicate with our domain. Can you tell me what they are? Hello, Here are the ones I was able to find: https://www.virustotal.com/gui/file/806fd8a11c15880b247b88b5146e7c2ae787fbf8678d5b0ec594b433e3b7da20 https://www.virustotal.com/gui/file/d06f14a2cdea45607323e97621db7bc79607bd158afde1223aa4ab9727f54752 https://www.virustotal.com/gui/file/a80d4625145eb2ef5d81cc258d9d7a2b620fce21277ad97a8c5b93c3002a87d9 https://www.virustotal.com/gui/file/e54f08a5a7c8b3a7396d93d666de0450011053dda3b71d1ed933a37c2d6e2c17 https://www.virustotal.com/gui/file/05d2a38294d8f6ce3841ac055e1b30575c9fea8daa20d91d681b0b800a354ac9 https://www.virustotal.com/gui/file/df25322be14f617652607a150c806b4ecb3a3317564755518b8100063b58a50e https://www.virustotal.com/gui/file/f178c067af7cb5f6d7f8793da8ffe2ce87eb8586912b2c564ada75d1bdecc4fb https://www.virustotal.com/gui/file/57b1478167911e633c9480852e6e8e87691c9f8a31201fbd25a70ab42c07808c Regards Link to post Share on other sites More sharing options...
FSCInteractive Posted December 21, 2021 Author ID:1494006 Share Posted December 21, 2021 We had our developer check and below is what the message they sent over to us: As you can see here: https://www.virustotal.com/gui/url/ba74fc5a91da220365e33fbdd5290aeda799bd387d94323cb2b736de4d38cf4e, you are the only vendor flagging our site. Please note that there's a malicious campaign going on that's making use of legit websites as fake C&C to hide malicious activities. Our website is answering with a 404 code to all those files. Can you please check then delist it? Link to post Share on other sites More sharing options...
thisisu Posted December 22, 2021 ID:1494092 Share Posted December 22, 2021 6 hours ago, FSCInteractive said: We had our developer check and below is what the message they sent over to us: As you can see here: https://www.virustotal.com/gui/url/ba74fc5a91da220365e33fbdd5290aeda799bd387d94323cb2b736de4d38cf4e, you are the only vendor flagging our site. Please note that there's a malicious campaign going on that's making use of legit websites as fake C&C to hide malicious activities. Our website is answering with a 404 code to all those files. Can you please check then delist it? Hello, We will unblock the domain in the next database update. Best regards Link to post Share on other sites More sharing options...
Recommended Posts