False positive reported for salisburysymphony.org

[BillBucher]

Support:  Malwarebytes reports a possible trojan when accessing the website salisburysymphony.org.  My provider/host asserts that he has tested it and finds no evidence of a trojan or any other malware.  Meanwhile, MWB won't let me access.  How can we get this website whitelisted?

 

Thank you,

Bill Bucher

[Porthos]

It is not the site but the IP it is hosted on. I have moved your post to the correct section so the web protection team and see if it still warrants blocking.

-Website Data-
Category: Trojan
Domain:
IP Address: 137.184.223.165
Port: 80
Type: Outbound
File: C:\Program Files\Mozilla Firefox\firefox.exe

 

 

[TeMerc]

26 minutes ago, Porthos said:

It is not the site but the IP it is hosted on. I have moved your post to the correct section so the web protection team and see if it still warrants blocking.

-Website Data-
Category: Trojan
Domain:
IP Address: 137.184.223.165
Port: 80
Type: Outbound
File: C:\Program Files\Mozilla Firefox\firefox.exe

 

 

Yes, this is a valid block, Cobalt Strike threat: VirusTotal - IP address - 137.184.223.165