[URGENT] https://cdn.medicatusb.xyz

[MON5TERMATT]

Hello Malwarebytes Team!!!!!

How can I get my site whitelisted. I have no malware on my hosting site and this is making it hard for the 3000+ users that connect to it to get a file very hard!

Edited January 8, 2022 by AdvancedSetup
Corrected font issue

[Porthos]

No need for the huge text. Also it would have been fixed with the last report if you also mentioned the cdn.

[MON5TERMATT]

apologies, we just had a report of it today in our discord.

[MON5TERMATT]

 

 

its already hard to get this not to flag with calling files with powershell and we ask that users turn off av's just for that reason

but im not advanced enough to work on an actual installer yet.

 

Eventually ill get a gui working!

 

 

[Porthos]

1 minute ago, MON5TERMATT said:

its already hard to get this not to flag with calling files with powershell and we ask that users turn off av's just for that reason

People hate that or don't know how. But those are the same folks that will download anything blindly using Discord.

 

[thisisu]

Hi,

The block will be removed in the next update. Sorry for the inconvenience

Regards

[MON5TERMATT]

20 minutes ago, Porthos said:

People hate that or don't know how. But those are the same folks that will download anything blindly using Discord.

 

we had one of our admins post one of those scams for free nitro earlier, its amazing how a admin that runs a pc group can still be hacked

Ill also just drop this here

 

name: antiscam
rank: 2
event: on-message
if:
  - if-any:
     - message-matches-any: ["*steamconm*", "*stearncor*", "*steamncon*", "*steamcommi*", "*steamcomun*", "*steamcommun*", "*steamcomminut*"]
     - message-matches-any: ["*steamcommunytu*", "*steamcommunityu*", "*steancommunytiu*", "*stearncomminuty*"]
     - message-matches-any: ["*d1scord*", "*dlscord*", "*discorb*", "*discorcl*", "*discords-*", "*d1scord-*", "*discordgift*", "*d1scord-gift*", "*dlscord-gift*"]
     - message-matches-any: ["*discordgift*", "*d1scord-gifts*", "*dlscord-gifts*", "*d1scord-claim*", "*dlscord-claim*", "*d1scord-airdrop*", "*dlscord-airdrop*"]
     - message-matches-any: ["*d1scord-nitro*", "*dlscord-nitro*", "*nitrogift*", "*discord*wales*", "*givenitro*", "*free-nitro*", "*roblox-com*"]
     - message-matches-any: ["*?pantner*", "*give-nitro*", "*com/gift*", "*info/promo*", "*trade/offer*", "*giveaway/discord*", "*&token*", "*/airdrop*"]
  - if-not:
     - is-staff: true
do:
  - ban-user-and-delete: 1
  - send-mod-log: "User banned for linking a malicious URL." 
  - notify-staff:
      title: "Malicious Link"
      content: "$user_mention has sent a malicious link in $channel_mention - `$message_clean`"
      jump_to_ctx_message: true
      qa_target: $user_id # Quick action target
      qa_reason: "Phishing Link/Token Grabber" # Quick action reason, optional
      no_repeat_for: 30 seconds # Ensures that this notif. won't be sent again in the next 30 secs
      no_repeat_key: $rule_name-1 # An unique key that identifies this notif., make sure to set this too
  - send-message: [$channel_id, "Malicious Link was detected and removed (User may of been token logged)"]
  - delete-last-message-sent-after: 60 seconds

 

[MON5TERMATT]

Dear Staff. When you unblocked the CDn you REBLOCKED the main domain, Please Stop

https://medicatusb.xyz/ IS now blocked by my browser

Please Whitelist the following
31.22.3.101
https://medicatusb.xyz
https://cdn.medicatusb.xyz
https://url.medicatusb.xyz

[MON5TERMATT]

[MON5TERMATT]

I mean Christ Almighty how hard is it to get all this sorted. Do i need to sell my soul to you!

 

Sincerely, 

A Quite Pissed Off Customer

[MON5TERMATT]

Malwarebytes
www.malwarebytes.com

-Log Details-
Protection Event Date: 1/12/22
Protection Event Time: 8:38 PM
Log File: ef521c6c-7419-11ec-9253-ac1203da070e.json

-Software Information-
Version: 4.5.0.152
Components Version: 1.0.1538
Update Package Version: 1.0.49717
License: Premium

-System Information-
OS: Windows 10 (Build 19044.1415)
CPU: x64
File System: NTFS
User: System

-Blocked Website Details-
Malicious Website: 1
, C:\Program Files\Google\Chrome\Application\chrome.exe, Blocked, -1, -1, 0.0.0, , 

-Website Data-
Category: RiskWare
Domain: medicatusb.xyz
IP Address: 31.22.4.101
Port: 80
Type: Outbound
File: C:\Program Files\Google\Chrome\Application\chrome.exe

(end)

[thisisu]

It looks like this was resolved (again). Sorry for the mix up.