Possible False Positive - Passwordsafe.sourceforge.net

[PaladinKnight]

Malware is reporting http://passwordsafe.sourceforge.net/ and IP address 66.33.223.179 as malicious. I am not sure what triggers this but it is a software site for

the software PasswordSafe that I have used for years. Sourceforge also hosts other legitimate software. Is this a false positive or is there something wrong with their site? I know the Bruce

Schneier's PasswordSafe software is good.

[MysteryFCM]

It's not the site itself that's being blocked (neither sourceforge.net nor any of it's subdomains live at 66.33.223.*), it's likely one of the adverts, and it's not an F/P I'm afraid.

[PaladinKnight]

It's not the site itself that's being blocked (neither sourceforge.net nor any of it's subdomains live at 66.33.223.*), it's likely one of the adverts, and it's not an F/P I'm afraid.

Is there a procedure to follow-up with the site? Should I report it directly to the site webmaster?

[MysteryFCM]

You can report it to sourceforge.net, but without the trail (showing which advert is responsible), there's likely nothing they can do.

[PaladinKnight]

You can report it to sourceforge.net, but without the trail (showing which advert is responsible), there's likely nothing they can do.

Is there a way to capture the trail when it occurs either in Explorer, Firefox or using Malwarebytes?

[MysteryFCM]

You can use Fiddler or Wireshark for that

www.fiddlertool.com

www.wireshark.org

[PaladinKnight]

You can use Fiddler or Wireshark for that

www.fiddlertool.com

www.wireshark.org

Thanks!