False Positives, Intelix Labs is using an old IP

Hi Christoph,

Thank you for reaching out to Sophos Community. For false positive, you may refer to the following link for URL Re-assessment: https://soph.so/I0LYSa

I am sorry Erick but this is exactly what we have done and it still uses the old host IP, that is the reason why I am posting it here. 

Hi Erick, any update on this ??

Hello,

Can you clarify what the issue is here? Is your website being misclassified as malware, or is the IP incorrect? 

Regards,

1st: It is misclassified as Malware.

2nd: The IP is (also) incorrect.

Hi Christoph,

Thank you for the information. Can I inquire when you filed the case?

As you could have seen by yourself, following the link: First time was at 2024-06-25T11:48:50Z
Since then we tried to reinitiate it several times unsuccessfully.

Hello,

Thank you. A Domain can not be hosted in an IP starting with 169; since that is a nonroutable IP, it is an APIPA address.

You will need to know the Public IP where your Domain is hosted, but most likely it is not a static one.

We have completed the resubmission on your behalf. If the site still shows as Malware in the next three business days, let me know.

Regards,

Today this domain has 159.100.14.179 and seems to be hosted at all-inkl.com.

If using a webinstance there, this should have permanent IP. If pointing to a local server, then who knows? Should use DDNS, then.

Hi, the site is hosted at a VPS at Ultahost.com and its IP is the one you mentioned. All-Inkl was the previous host which was changed a couple of weeks ago. Still no hint/idea why this was flagged as highly suspicious by Sophos.