Website False positive

[proxyg33k]

Hello,

 

Website local589.com is being blocked by malwarebytes.

We cleaned website & everything appear to be good, can you please remove it from blacklist.

We already submitted tickets to other vendors too for the same.

 

Thanks

[TeMerc]

11 minutes ago, proxyg33k said:

Hello,

 

Website local589.com is being blocked by malwarebytes.

We cleaned website & everything appear to be good, can you please remove it from blacklist.

We already submitted tickets to other vendors too for the same.

 

Thanks

Hi, this is live: VirusTotal - URL - dfe05c27ed86d0974ea4acb08cd3360431b090636a861a1e3ef424ecda9c1032

File detection: https://www.virustotal.com/gui/file/cfadcbb9dc433774cca345a35fbe446e87aad8e8e75a4794762ee3138074edb3

[proxyg33k]

TeMerc,

 

This is a genuine file
https://local589.com/wp-content/plugins/bbpowerpack/assets/js/tablesaw.js

This is a paid plugin javascript file which has nothing malicious in it, you can check for your self.

 

2 Vendors on virus total list it as malicious as our domain local589.com is in their blacklist.

 

Thanks

[proxyg33k]

Additionally

Sha-256 for our file is:

9d080c43df17c19225fea4459811415ea7894baec4d163e3c20325d088504393

Which is completely different than malware file ( As per virus total having similar name as of this file ).

 

Thanks

[thisisu]

Hi,

There was something else on here, Backdoor.QBot according to comments on some of these paths:

However, 404 now. Therefore, the site will be unblocked in the next update.

Regards

[proxyg33k]

Hello,

 

We are again same this similar issue which occur due to another occurance.

We resolved the primary cause which was causing malware to take place on website including taking all appropriate measures to prevent this happening again.

 

Can you please remove website from blocklist.

 

Thanks

[BjelakovicL]

Hi,

Thanks for reporting. The block has been removed.