Malwarebytes flagging Thumbsnap as a malicious site

[Funk]

FYI, Malwarebytes has started blocking all connections to Thumbsnap as malicious:

[tirolo_]

does Malwarebytes provide you with any info as of why it believes it's malware? Also, are you able to share the actual blocked urls?

[Bullett]

Came to report this.

It just says;

Trojan
thumbsnap.com
104.31.7.178
Port 59976 (but various)
Outbound connection
Chrome.exe

[Ozone]

Virus total shows that Malwarebyres says Thumbsnap URL is clean but your ip address doesn't match theirs with 104.31.7.178

https://www.virustotal.com/#/url/1c8265e24c57b794b...

Edited by Ozone on Wednesday 20th February 22:21

[tirolo_]

Ozone said:

Virus total shows that Malwarebyres says Thumbsnap URL is clean but your ip address doesn't match theirs with 104.31.7.178

https://www.virustotal.com/#/url/1c8265e24c57b794b...

Edited by Ozone on Wednesday 20th February 22:21

dns resolution happens on the client side so we would need to figure why your machine is resolving thumbsnap.com to 104.31.7.178 whereas virustotal resolves it to 104.31.6.178... I would guess it's based on load/availability zone balance? Depending on the route out to the server your request is chosen to take it would eventually hit the same ip as virustotal.... one option would be to force it through hosts file to test it out... let me know how it goes...

[TonyRPH]

The IP address thing is harmless.

104.31.7.178 and 104.31.6.178 are CloudFlare IPs.

CloudFlare provide CDN (content delivery network) services amongst other things.

This is perfectly normal.

[MrOnTheRopes]

Yeah I noticed the same. Started a few days ago. Even popped up when I hit 'reply' to this topic.

[Funk]

TonyRPH said:

The IP address thing is harmless.

104.31.7.178 and 104.31.6.178 are CloudFlare IPs.

CloudFlare provide CDN (content delivery network) services amongst other things.

This is perfectly normal.

Yep. Cloudflare's 1.1.1.1 is my default DNS.

The irony is Thumbsnap is st anyway - any site that watermarks embedded pics can fk off; the problem is that all PH pics from Thumbsnap now just show as a broken link.

[Fore Left]

Same here. I assumed thumbsnap is OK so added an exclusion to Malwarebytes.

[aeropilot]

MrOnTheRopes said:

Yeah I noticed the same. Started a few days ago. Even popped up when I hit 'reply' to this topic.

I get the same as well, as you say, started around middle of last week.

[wolfracesonic]

Fore Left said:

Same here. I assumed thumbsnap is OK so added an exclusion to Malwarebytes.

I'm having problems with Thumbsnap and Malwarebytes; what exclusion do I add, is it pistonheads.com, thumbsnap.com or something else? Help appreciated

[MrOnTheRopes]

wolfracesonic said:

Fore Left said:

Same here. I assumed thumbsnap is OK so added an exclusion to Malwarebytes.

I'm having problems with Thumbsnap and Malwarebytes; what exclusion do I add, is it pistonheads.com, thumbsnap.com or something else? Help appreciated

Just thumbsnap.com will do it

[wolfracesonic]