Jump to content

Website blocked due to trojan - False Positive


Marian-O

Recommended Posts

Hey guys,

Can you please review thehostbroker.com and unblock it? The website is clean and secure but Browser Guard is still blocking it:

MWB01.thumb.png.a54e74d488672f6f4ea9462eb7a15f34.png

The logs say that it matches the mbgc.db.trojan.2:

{"@timestamp": "2021-12-07T19:08:36.196Z", "message": "ANY: Just matched 'thehostbroker.com' in database: mbgc.db.trojan.2", "level": "INFO"}
{"@timestamp": "2021-12-07T19:08:36.196Z", "message": "BTW: (URL_BLOCK) malware (trojan) match found on https://www.thehostbroker.com/  for https://www.thehostbroker.com/", "level": "INFO"}
{"@timestamp": "2021-12-07T19:08:36.208Z", "message": "OM: (URL_BLOCK) Malware (malware) detection on https://www.thehostbroker.com/. Redirecting to block page.", "level": "INFO"}

Thanks,

Marian

Link to post
Share on other sites

  • Staff
27 minutes ago, Marian-O said:

Hey guys,

Can you please review thehostbroker.com and unblock it? The website is clean and secure but Browser Guard is still blocking it:

MWB01.thumb.png.a54e74d488672f6f4ea9462eb7a15f34.png

The logs say that it matches the mbgc.db.trojan.2:

{"@timestamp": "2021-12-07T19:08:36.196Z", "message": "ANY: Just matched 'thehostbroker.com' in database: mbgc.db.trojan.2", "level": "INFO"}
{"@timestamp": "2021-12-07T19:08:36.196Z", "message": "BTW: (URL_BLOCK) malware (trojan) match found on https://www.thehostbroker.com/  for https://www.thehostbroker.com/", "level": "INFO"}
{"@timestamp": "2021-12-07T19:08:36.208Z", "message": "OM: (URL_BLOCK) Malware (malware) detection on https://www.thehostbroker.com/. Redirecting to block page.", "level": "INFO"}

Thanks,

Marian

Hello- Please see detection results from VirusTotal:

VirusTotal - URL - 005e17a4b9a8e97c02ee174ae4170d025542e3cad144e1908f4718163bd6cc06

Link to post
Share on other sites

Hey TeMerc,

I appreciate the answer. The links in question don't exist anymore. I've requested a review from CRDF but I can't find a way to ask Kasperksy and Eset for a review/delist. I can confirm that the site is clean and secure but I have no idea how to ask them to re-scan the site and remove it from their list.

Thanks,

Marian

Link to post
Share on other sites

Hey guys,

The URLs referred in the previous message don't exist and I've requested every vendor in that list a removal but it takes time. Moreover, it shows as clean when searching just the naked domain:

https://www.virustotal.com/gui/url/85acc49b7d49dca3dafa2a59c19fb64793ce116c8644953dc7f69e3bbabf0be5?nocache=1

Is there any chance that you can remove it from your list or if it shows something on VirusTotal it cannot be removed?

Thanks,

Marian

Link to post
Share on other sites

Guest
This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.