Skip to main content
wrmiles's profile
wrmiles

New Contributor

 • 

10 Messages

Thursday, February 13th, 2020 1:49 AM

Closed

Malwarebytes blocking Cox website

I have been getting repeated warnings of Malwarebytes blocking an outbound connection to cox.rs.oxcs.net fpr phishing

I have not attempted to go to this website.

I am on Windows 10, browser is MSN Explorer, with daily scans by Malwarebytes and Windows Defender

Any idea of what may be going on?

Discussions

 • 

Updated 

6 years ago

3.8K

6

0

0

ChrisL

Former Moderator

 • 

7.1K Messages

6 years ago

Based on the host you've indicated it sounds like access to our email service is being attempted. If you're not initiating this activity or don't have an email client setup it's possible you have malware attempting to send spam via our email platform.

-Chris

7

0

wrmiles

New Contributor

 • 

10 Messages

OP here:

Thank you for the responses, but I am still quite confused.

If the offending website is Cox -mail, I have never configured any browsers to use it and my Cox e-mail is now inactive for lack of use. I cannot find any record of attempted contacts in browser history.So why would my browser be attempting to contact it?

I suppose it could be a malware problem, but neither Malwarebytes nor Windows defender can find anything. In addition, it would appear that the contacting of the Cox website would have to built into the malware, since the website is not stored in my computer that I can tell.

Any other thoughts? I may try asking about this on the Malwarebytes forum.

Like

Reply

6 years ago

0

Bruce

Honored Contributor III

 • 

5.7K Messages

What are you using for Cox mail?  Do you use an email notification tool?

Like

Reply

6 years ago

0

wrmiles

New Contributor

 • 

10 Messages

I am not using copx e-mail at all. Your site says it is inactive for lack of use. I cannot find anything on my computer related to cox e-mail.

Like

Reply

6 years ago

0

KevinM2

Former Moderator

 • 

1.5K Messages

@Wrmiles2, do you have McAfee for your devices? Cox offers McAfee free for up to five devices in the home:

www.cox.com/.../installing-cox-security-suite-plus-powered-by-mcafee.html

I would recommend using McAfee to scan for viruses or malware. I would also suggest clearing the cookies/cache from all web browsers and rebooting your computer. Here's some more information about spam, phishing, and viruses:

www.cox.com/.../reporting-spam-phishing-and-virus-abuse.html
www.cox.com/.../about-fake-cox-emails.html
www.cox.com/.../about-malware-and-viruses.html

-Kevin M. Cox Support Forum Moderator

Like

Reply

6 years ago

0

wrmiles

New Contributor

 • 

10 Messages

OP back again. I think maybe I found the problem:

I set Malwarebytes to allow the connection to get rid of the multiple warnings.

I then did some searching on my computer and found an old Cox Secure Online Backup.exe file in my document folder.

Deleted the .exe file.

Deleted the Malwarebytes allow connection to the website.

Problem has not recurred, but then maybe I can't tell if there is an attempted connection if Malwarebytes has corrected the flagging of the site. I have not found anyway to tell this using existing resources. Do you know anyway to determine if contact is being attempoted?

As far as I can tell, secure online backup is no longer available on a normal residential account. Is this correct?

Like

Reply

6 years ago

0

biscuits

New Contributor

 • 

1 Message

6 years ago

I'm getting the same warning every time I try to access my Cox email. How to I connect with my email?

1

0

ChrisL

Former Moderator

 • 

7.1K Messages

It seems that MalwareBytes has listed our mail server hosts as potential phishing sites. We're engaging with their support to see what can be done to get this corrected.

-Chris

Like

Reply

6 years ago

0

polarman

New Contributor

 • 

2 Messages

6 years ago

I can't get into email either...getting Error code: SSL_ERROR_RX_RECORD_TOO_LONG    also, Malwarebytes blocking due to possible phishing. Anyone having any luck with this?

0

0

JFoosh5652

New Contributor

 • 

2 Messages

6 years ago

I'll add to this discussion. Trying to access email on account and getting this "

Can’t connect securely to this page

This might be because the site uses outdated or unsafe TLS security settings. If this keeps happening, try contacting the website’s owner.?  

1

0

Bruce

Honored Contributor III

 • 

5.7K Messages

What OS, browser or client are you using?

Like

Reply

6 years ago

0

Bruce

Honored Contributor III

 • 

5.7K Messages

6 years ago

Is MSN Explorer different from Microsoft Edge?  MSN products have always been very intrusive.  If you configured the Win10 email notification app with Cox, I'd presume the app is sharing data with MSN Explorer to harvest data.

I'd either use a different browser...not use the Win10 app (I use Esumsoft's POPPeeper)...or edit your host file for cox.rs.oxcs.net.

3

0

polarman

New Contributor

 • 

2 Messages

I had a chat with a Cox rep. and he said the email server is under maintenance ......I never saw an alert to this fact. I have tried multiple  browsers with the same error message. This is getting old real fast!

Like

Reply

6 years ago

0

Bruce

Honored Contributor III

 • 

5.7K Messages

Any properly scheduled and executed maintenance would have gone completely unnoticed to us.  If a rep says maintenance...during peak hours across all time-zones...it means something else.  They're probably troubleshooting a problem.

Like

Reply

6 years ago

0

JonathanJ

Former Moderator

 • 

1.9K Messages

Bruce is correct it isn't maintenance being done and I apologize for the misinformation… Cox email customers are experiencing multiple known issues affecting email access. Some Cox email

customers are experiencing intermittent connection issues with third-party clients such as Outlook and mobile phone apps. We have a team working towards a resolution with no ETR.

We apologize and thanks for your patience.


Jonathan J
Cox Moderator

Like

Reply

6 years ago

0

Bruce

Honored Contributor III

 • 

5.7K Messages

6 years ago

It could be 3 things affecting you.

First, from a gist of the replies to your post, it could be 1 of 2 things.  Either Cox (outsourced Cox) has an issue with certificates (authentication)...or MalwareBytes flagged a False-Positive with cox.rs.oxcs.net (looks bad but is harmless).  Troubleshooting certificate errors could be quite involved but removing a False-Positive is quite easy.  Either way, MalwareBytes was blocking your connection.

Second, although you're not using Cox email, something on your computer is instructing cox.rs.oxcs.net.  This could be just an effect of your traffic originating from the Cox domain (DNS, routing, stored cookies).  However, this instruction has always been happening on your computer but you only became aware of it via MalwareBytes.  As Kevin recommended, you should clear your cookies.  Furthermore, you should clear your cookies every time you close your browser.  This is how and follow any step "...to clear automatically..."

http://www.clearallhistory.com/help/Using/Clear-MSN-Explorer-History.html#cookies

Third, inactive for lack of use.  Cox has a new policy to reduce email accounts:  "As of August 15, 2019, Cox no longer offers the ability for new and existing Cox Internet customers to create new Cox Email accounts."  If you had an account but never used it, Cox may have just deleted it.

www.cox.com/.../cox-email-creation-policy.html

0

Related Content

Loading...

Recent Discussions

View More

Loading...