FP for ocsp.trust-provider.cn ?

[KevinYu0504]

Dear Malwarebytes ,

 

Few minutes ago , I saw the message from my MB , told me that had a threats was detected and blocked ,

however I discover it's was from my main AV ( Kaspersky ) .

P.S : I have added Kaspersky and Malwarebytes, each other to the exclusion list.

 

Could it be a false positive?

Here is the log :

Quote

Malwarebytes
www.malwarebytes.com

-Record details-
Protection event date: 2023/4/27
Protection Event Time: 12:56 AM
Log file: 39be2886-e453-11ed-a1b8-902b345d0096.json

-Software Information-
Version: 4.5.27.262
Component version: 1.0.1991
Update Kit Version: 1.0.68586
Authorization: Premium Edition

-System Information-
Operating System: Windows 10 (Build 19045.2846)
CPU: x64
File system: NTFS
User: System

-Blocked site details-
Malicious sites: 1
, C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 21.3\avp.exe, blocked, -1, -1, 0.0.0, ,

-Website information-
Category: Trojan horse
Domain: ocsp.trust-provider.cn
IP address: 192.169.122.211
Port: 80
Type: even out
File: C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 21.3\avp.exe

 

(end)

 

VT scan show it's clean :

https://www.virustotal.com/gui/url/11453fb0aaaf4fc5cb0aeb73e94c727e865f860d482d911ed9828bbdaa67471e?nocache=1

 

I don't know why the connection is requested by Kaspersky,
But this problem does not appear until I open the browser (Firefox).
If the official needs more information, please tell me what information is needed, and I am willing to provide it.

Edited April 26, 2023 by KevinYu0504

[TeMerc]

1 hour ago, KevinYu0504 said:

Dear Malwarebytes ,

 

Few minutes ago , I saw the message from my MB , told me that had a threats was detected and blocked ,

however I discover it's was from my main AV ( Kaspersky ) .

P.S : I have added Kaspersky and Malwarebytes, each other to the exclusion list.

 

Could it be a false positive?

Here is the log :

 

VT scan show it's clean :

https://www.virustotal.com/gui/url/11453fb0aaaf4fc5cb0aeb73e94c727e865f860d482d911ed9828bbdaa67471e?nocache=1

 

I don't know why the connection is requested by Kaspersky,
But this problem does not appear until I open the browser (Firefox).
If the official needs more information, please tell me what information is needed, and I am willing to provide it.

Hello- This block has already been disabled some time ago.