Our company communication tool is blocked

[bsm2603]

Hello,

SAE is a worldwide media education provider and we have lately released a new tool “Connector” for students to have an overview over their studies, to connect and chat. This tool has reported to be blocked as a false positive by Malwarebytes. Naturally as a chat tool it initiates web hooks and sends data back to the server.

Our tool uses two domains. connect.sae.edu as the primary entry (for https and ajax) and connect-ws.sae.edu (for websockets).

If there is a best practice that we can follow to avoid these false positives, please give us a hint.

Thanx for your support
Burkhart Salzmann

[Porthos]

Logs for staff review

 

-Website Data-
Category: Trojan
Domain: connect.sae.edu
IP Address: 162.55.45.222
Port: 80
Type: Outbound
File: C:\Program Files\Mozilla Firefox\firefox.exe

 

-Website Data-
Category: Trojan
Domain: connect-ws.sae.edu
IP Address: 162.55.45.222
Port: 80
Type: Outbound
File: C:\Program Files\Mozilla Firefox\firefox.exe

 

 

 

[TeMerc]

35 minutes ago, bsm2603 said:

Hello,

SAE is a worldwide media education provider and we have lately released a new tool “Connector” for students to have an overview over their studies, to connect and chat. This tool has reported to be blocked as a false positive by Malwarebytes. Naturally as a chat tool it initiates web hooks and sends data back to the server.

Our tool uses two domains. connect.sae.edu as the primary entry (for https and ajax) and connect-ws.sae.edu (for websockets).

If there is a best practice that we can follow to avoid these false positives, please give us a hint.

Thanx for your support
Burkhart Salzmann

Hello, thanks for bringing this to our attention. We've reviewed the data from the IP(was not a domain block)again and have determined it no longer warrants being blocked(was cleaned) so we've disabled the block in our database. 

Removal should be reflected in the next database update going out in a few hours or so.