URL Filtering malware alert ciscobinary.openh264.org false positive?

[kenanuenal]

Hi, everyone,

Today since 4:44 p.m. we have these malware entries in the URL Filtering Monitor.

The strange thing is, when I look for the ZIP file in the Data Filtering Monitor, this ZIP file has been logged there for weeks.

Is that a false positive message?

[kenanuenal · Accepted solution]

It looks like it was a false positive because the reports stopped since 9:32 this morning and the URL on the Palo Alto URL check page is no longer classified as a malware url.