Domain `notebook.link` (and its subdomains) is blocked by WatchGuard firewalls' default configuration

[PierreRaybaut]

For your information, the notebook.link domains (and its subdomains) is currently considered as a potential risk by WatchGuard firewalls (as implemented on Fireboxes).

It is classified under the following category:

Elevated Exposure: Sites that camouflage their true nature or that include elements suggesting latent malicious intent.

Although it is possible to add an exception (which we have done, so we're good), the site is blocked by default.

(Our IT service will contact WatchGuard support to determine whether a category change can be requested.)

[Paul2708]

The same issue is raised by Trellix Endpoint Security. It reports that notebook.link is a phishing site

[SylvainCorlay]

Hello @PierreRaybaut @Paul2708, many thanks for reporting these issues.

We would really like for these services to not block notebook.link. Do you think it would be possible for you to escalate this issue to WatchGuard and Trillix Endpoint Security? I feel that they would be much more likely to provide help you than us as you are paying clients.

If you do so, it may be useful to point out that adding a local exception is not an appropriate workaround since WatchGuard would block other users from accessing the content.

[PierreRaybaut]

Hello @SylvainCorlay, thanks for your message.

I’ve just followed up again with our infrastructure team to make sure they take the necessary actions on their side, namely reporting this as a false positive to WatchGuard.
The objective is clearly to have the domain no longer blacklisted by default, rather than relying on local exceptions.

I’ll try to keep you posted as soon as we get feedback from WatchGuard.