Jump to content


Photo

ZeroHour Intent catches

zerohour intent zero hour brts

  • Please log in to reply
743 replies to this topic

#41 SPPS

SPPS
  • Members
  • 1 posts

Posted 10 February 2014 - 04:51 AM

Hi,

 

Could you please check / remove ?

pple.fr

 

Thanks

 

F. Seue



#42 David Soucek

David Soucek
  • Members
  • 1 posts

Posted 10 February 2014 - 06:21 AM

Our institute has problems with e-mails containing link to

 

kyivpost.com

 

Could you please remove it from the database too? If it's not possible, is there please any possibility to whitelist the domain only on our firewall? (Barracuda S&VF 300)

 

Many thanks in advance,

David S.



#43 mheller

mheller

    Nobody

  • Moderators
  • 1,299 posts
  • LocationSan Jose, CA

Posted 10 February 2014 - 10:13 AM

Please contact support and submit any sample you have of pple.fr being filtered so we may inspect them.



Matthew Willson-Heller
Support Escalation Manager, US

Barracuda Networks Inc.
Phone: +1 408.342.5300 x5346
Fax: +1 408.342.1061
Web: www.barracudanetworks.com



#44 mheller

mheller

    Nobody

  • Moderators
  • 1,299 posts
  • LocationSan Jose, CA

Posted 10 February 2014 - 10:14 AM

kyivpost.com has been removed 



Matthew Willson-Heller
Support Escalation Manager, US

Barracuda Networks Inc.
Phone: +1 408.342.5300 x5346
Fax: +1 408.342.1061
Web: www.barracudanetworks.com



#45 Fred Janssen

Fred Janssen
  • Members
  • 1 posts

Posted 10 February 2014 - 11:00 AM

Can you please check and remove: firebrandtraining.nl

 

Thanks,

Fred



#46 mheller

mheller

    Nobody

  • Moderators
  • 1,299 posts
  • LocationSan Jose, CA

Posted 10 February 2014 - 11:09 AM

We would need to see some evidence of legitimate email for http://www.firebrandtraining.nl/ as the current evidence we have shows their emails to be close to spam like material.



Matthew Willson-Heller
Support Escalation Manager, US

Barracuda Networks Inc.
Phone: +1 408.342.5300 x5346
Fax: +1 408.342.1061
Web: www.barracudanetworks.com



#47 Tommy Yu

Tommy Yu
  • Members
  • 2 posts

Posted 11 February 2014 - 06:49 PM

We are getting: ZeroHour Intent (firemutualaid.com)

 

Can you please check and remove firemutualaid.com

 

Thank you,

 

Tommy



#48 mheller

mheller

    Nobody

  • Moderators
  • 1,299 posts
  • LocationSan Jose, CA

Posted 12 February 2014 - 10:45 AM

Hello tommy,

 

We have collected phishing evidence sent from this domain, please contact support to submit some legitimate samples so we may re review their reputation.



Matthew Willson-Heller
Support Escalation Manager, US

Barracuda Networks Inc.
Phone: +1 408.342.5300 x5346
Fax: +1 408.342.1061
Web: www.barracudanetworks.com



#49 Adam Lion

Adam Lion
  • Members
  • 1 posts

Posted 18 February 2014 - 08:05 PM

Hello all, I just noticed that we are having similar issues sending email to ING.  According to the message log, the ZeroHour Intent domain triggering it is nmgingmail.com - any chance of getting this cleared?  Thanks all.

 

-Adam



#50 mheller

mheller

    Nobody

  • Moderators
  • 1,299 posts
  • LocationSan Jose, CA

Posted 19 February 2014 - 10:44 AM

Hi adam,

 

please contact support so we can collect some samples of false positives for this domain as it appears to previously been involved in campaign marketing



Matthew Willson-Heller
Support Escalation Manager, US

Barracuda Networks Inc.
Phone: +1 408.342.5300 x5346
Fax: +1 408.342.1061
Web: www.barracudanetworks.com



#51 RICOTOU

RICOTOU
  • Members
  • 1 posts

Posted 24 February 2014 - 04:22 AM

Hi,

 

It seems we have the same problem with cdiscount.com / cdsicountpro.com. Could you check and remove these domains ?

 

Thanks

 

BĂ©ranger



#52 Geoff Grimm

Geoff Grimm
  • Members
  • 1 posts

Posted 24 February 2014 - 08:44 AM

Hi Matt - Could you please take a look at central-bank.org.tt?

 

Yes, I know it's suspicious, but we do have legitimate business there.

 

Thanks very much

 

Geoff



#53 mheller

mheller

    Nobody

  • Moderators
  • 1,299 posts
  • LocationSan Jose, CA

Posted 24 February 2014 - 10:11 AM

Hi geoff,

 

This domain has historical evidence of phishing emails going out. As such as we cannot remove this domain at this time and would recommend you contact support to submit some samples for us to review.

 

thank you!



Matthew Willson-Heller
Support Escalation Manager, US

Barracuda Networks Inc.
Phone: +1 408.342.5300 x5346
Fax: +1 408.342.1061
Web: www.barracudanetworks.com



#54 mheller

mheller

    Nobody

  • Moderators
  • 1,299 posts
  • LocationSan Jose, CA

Posted 24 February 2014 - 10:11 AM

Hello ricotu,

 

none of those domains are in our system classified as malicious currently. 



Matthew Willson-Heller
Support Escalation Manager, US

Barracuda Networks Inc.
Phone: +1 408.342.5300 x5346
Fax: +1 408.342.1061
Web: www.barracudanetworks.com



#55 Matthew Craig

Matthew Craig
  • Members
  • 1 posts

Posted 25 February 2014 - 12:35 AM

Hi support,

 

Are we able to have mindarc.com.au white-listed? apparently we have been marked as malicious but we are not aware of any activity we could have done that would have resulted in this blacklist? Any feedback or advice for this would be great as well for us to prevent this in the future.

 

Thanks.

Matt



#56 mheller

mheller

    Nobody

  • Moderators
  • 1,299 posts
  • LocationSan Jose, CA

Posted 25 February 2014 - 09:23 AM

Hi matthew,

 

While it is not possible for us to white list you, we have neutralized the current classification since it has been quite some time since we saw any spam evidence. If new evidence should be obtained it will be put back on the system. 
 



Matthew Willson-Heller
Support Escalation Manager, US

Barracuda Networks Inc.
Phone: +1 408.342.5300 x5346
Fax: +1 408.342.1061
Web: www.barracudanetworks.com



#57 Manuel

Manuel
  • Members
  • 1 posts

Posted 07 March 2014 - 02:29 PM

Can you please check / remove brinks.cl

Thanks



#58 mheller

mheller

    Nobody

  • Moderators
  • 1,299 posts
  • LocationSan Jose, CA

Posted 07 March 2014 - 03:00 PM

Hi manuel, this has been cleared. 



Matthew Willson-Heller
Support Escalation Manager, US

Barracuda Networks Inc.
Phone: +1 408.342.5300 x5346
Fax: +1 408.342.1061
Web: www.barracudanetworks.com



#59 Dan

Dan
  • Members
  • 1 posts

Posted 10 March 2014 - 07:12 PM

Hi Matthew,

 

Emails from our domain electorate.me are being blocked by a recipient's ZeroHour Intent malware filters.  Can you please check and remove electorate.me from this list? Thanks.

 

-Regards

Dan

 



#60 mheller

mheller

    Nobody

  • Moderators
  • 1,299 posts
  • LocationSan Jose, CA

Posted 11 March 2014 - 10:50 AM

Hi dan,

 

electorate.me has been neutralized as of 8:50am PST



Matthew Willson-Heller
Support Escalation Manager, US

Barracuda Networks Inc.
Phone: +1 408.342.5300 x5346
Fax: +1 408.342.1061
Web: www.barracudanetworks.com