Quicken triggered a PUP block to website ip-api.com

[Houstee]

 

 

Malwarebytes
www.malwarebytes.com

-Log Details-
Protection Event Date: 2/14/23
Protection Event Time: 5:23 PM
Log File: 5c503dbe-accf-11ed-be34-28d0eaffdd2b.json

-Software Information-
Version: 4.5.21.231
Components Version: 1.0.1890
Update Package Version: 1.0.65722
License: Premium

-System Information-
OS: Windows 11 (Build 22621.1194)
CPU: x64
File System: NTFS
User: System

-Blocked Website Details-
Malicious Website: 1
, C:\Program Files (x86)\Quicken\qw.exe, Blocked, -1, -1, 0.0.0, , 

-Website Data-
Category: PUP
Domain: ip-api.com
IP Address: 208.95.112.1
Port: 80
Type: Outbound
File: C:\Program Files (x86)\Quicken\qw.exe

(end)

 

Is this a false positive?  Quicken is trying to contact this website and it was blocked.

[Houstee]

Virustotal says ip-api.com is clean.

[thisisu]

Thanks for reporting. It will be unblocked in the next update

 

[SingularThey]

Would it be a coincidence that mwb just started blocking constant calls to ip-api.com on my machine, even though I don't have quicken? Is there some more general issue happening?

[MarjoryM]

Glad it seems to be resolved.  I had it happening over & over for Chrome.  

It would be nice to know which webpage/app in Chrome is making the call. 

[Houstee]

Did not get any Malwarebytes warnings about Quicken/ip-api.com today.