False Positive Trojan "RTP" for Siblingsday.org

[SiblingsDay]

MalwareBytes Browser Guard is reporting  a trojan, RTP, when accessing Siblingsday.org. I presume this means that Malwarebytes thinks that a trojan is maliciously using the RTP UDP port. There is a good reason for this port to be accessed on this computer as the Siblings Day Foundation uses Microsoft 365. Siblingsday.org is the domain controller. Documents are on the OneDrive Cloud for this account, so there is a legitimate reason for MS Word to access the Website and ensure that the clock is synchronized.

 

I checked SiblingsDay.org to see if it has Malware and there is no indication of this from WordPress or on sites that check domains:

https://sitecheck.sucuri.net/results/siblingsday.org

https://www.virustotal.com/gui/url/4b1735eaf9eda98468fa0463ad496256349c78a3225cc20fdf12181c138f4bc5

 

 

Here is the erroneous information:

Malwarebytes
www.malwarebytes.com

-Log Details-
Protection Event Date: 3/10/23
Protection Event Time: 2:42 PM
Log File: b77eb0ee-bf7b-11ed-bb61-60f262a1fb1b.json

-Software Information-
Version: 4.5.24.248
Components Version: 1.0.1944
Update Package Version: 1.0.66541
License: Trial

-System Information-
OS: Windows 10 (Build 19044.2604)
CPU: x64
File System: NTFS
User: System

-Blocked Website Details-
Malicious Website: 1
, C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE, Blocked, -1, -1, 0.0.0, , 

-Website Data-
Category: Trojan
Domain: siblingsday.org
IP Address: 141.193.213.11
Port: 443
Type: Outbound
File: C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE

(end)

 

MB False Positive SDF.txt

[thisisu]

Thanks for reporting this to us. This will be fixed in the next database update.

Here's the path was that was flagged: https://www.virustotal.com/gui/url/c4fdafa94b8da2feb45ad24cc3224cb35b7fb6c3508531a83d12039fe8ce8a99

Regards