possible false positive leadzupc.com

[DocVenture]

Playing Publisher's clearing house lotto or slots, website redirects (or tries to connect) to leadzupc.com, which mbam shuts down and flags.  Not sure if false positive or what.

[daledoc1]

Hi:

Until the Research Team weighs in...

...what is the IP that is being blocked?

...and/or, please post the MBAM PROTECTION log that shows the block(s) -- instructions here.

Thanks,

 

[DocVenture]

I wish I could tell you...a ping of leadzupc.com yields 127.0.0.1 (which i know isn't right, or I don't think it's right)...and tracert yields the same.  That's a loopback addr. from the browser (I think).  I've done a little more research on this, and it turns out that leadzupc.com is bad news.  I've no idea how to get the word to PCH.com that their game servers have been hacked, and if not...that is if it's deliberate...that I'll never be back!     http://www.virusresearch.org/remove-play-leadzupc-com-redirect-chrome-firefox-ie/

[DocVenture]

Oops...didn't post my log.  It does have the full domain name there play.leadzupc.com and ip addy 217.13.124.96.  That's what you're after, I believe.

mbam.export.txt