Possible False Positive/More information needed Hnmasonry.com

[DigiratiNetworks]

I have reports from a customer about their website being blocked this week (Hnmasonry.com) and Malwarebytes is even blocking outlook attempts to connect to their Auto discovery (office 365 direct with Microsoft). Reason given is: Riskware: 2.0.202309221350. 

Has their website been hacked in someway or is this a false positive?

[Porthos]

Log for staff review.

 

-Website Data-
Category: Malware
Domain:
IP Address: 34.123.66.98
Port: 80
Type: Outbound
File: C:\Program Files\Mozilla Firefox\firefox.exe

 

 

[TeMerc]

42 minutes ago, DigiratiNetworks said:

I have reports from a customer about their website being blocked this week (Hnmasonry.com) and Malwarebytes is even blocking outlook attempts to connect to their Auto discovery (office 365 direct with Microsoft). Reason given is: Riskware: 2.0.202309221350. 

Has their website been hacked in someway or is this a false positive?

Hello, thanks for bringing this to our attention. We've reviewed the data from the site again and have determined it no longer warrants being blocked(it was cleaned, not an FP) so we've disabled the block in our database. 

Removal should be reflected in the next database update going out in a few hours or so.