malware bytes blocking legitimate websites

[tpag]

malwares is blocking several of our onit.com subdomains. one example is support.onit.com. I also noticed fellow.app getting blocked as well. They both seem to resolve to the same cloudflare IP 104.16.202.239. We have reproduced this issue on other PCs in different locations with malware bytes installed. 

This is blocking legitimate business traffic so help is needed asap

[BjelakovicL]

Hi,

onit.com block will be removed. I'm not seeing a block on fellow.app. Please post a screenshot or a log of the block.

Thank you!

[tpag]

Thanks for the help. Any idea how this happened? 

Also, here is the log from the blocked fellow.app: 

 

Malwarebytes
www.malwarebytes.com

-Log Details-
Protection Event Date: 9/22/23
Protection Event Time: 9:06 AM
Log File: 35158d9c-5951-11ee-93f8-6c02e05f0ee5.json

-Software Information-
Version: 4.6.2.281
Components Version: 1.0.2131
Update Package Version: 1.0.75555
License: Premium

-System Information-
OS: Windows 11 (Build 22621.2283)
CPU: x64
File System: NTFS
User: System

-Blocked Website Details-
Malicious Website: 1
, C:\Users\localadmin\AppData\Local\Fellow\app-1.4.23\Fellow.exe, Blocked, -1, -1, 0.0.0, , 

-Website Data-
Category: Malware
Domain: 
IP Address: 104.16.202.239
Port: 443
Type: Outbound
File: C:\Users\localadmin\AppData\Local\Fellow\app-1.4.23\Fellow.exe
 

[BjelakovicL]

11 minutes ago, tpag said:

Thanks for the help. Any idea how this happened? 

It was a false positive. https://urlscan.io/result/26d15c37-8482-428c-a26b-a85e817dc15e/

12 minutes ago, tpag said:

Also, here is the log from the blocked fellow.app:

The IP is not in our database. Fellow.exe was probably just blocking onit.com. The issue should be resolved in the next database update.