Date: Friday 15th July 2016 1:13pm (UTC)
Impact: Due to incorrect malware classifications, OpenDNS blocked domains from FastLy. FastLy operates a CDN and uses CNAME’s to provide access to popular domains such as; CNN, BBC, and Spotify.
Cause: The false positive was triggered by a piece of malicious code caught by our sandbox infrastructure that had a similar behavior pattern to that of another piece of malware. This inadvertently caused a domain belonging to fastly to be blocked. This has been resolved and preventative measures have been put in place. Additionally we received similar IOC’s (Indicator of Compromise) from some of our third party intelligence feeds, leading us to believe they saw the same indicators.
Actions: The categorization data has been corrected and these sites will no longer be blocked. However, customers may need to clear their DNS cache in order to restore access to these domains immediately.
We apologize for the issues this may have caused and are investigating this incident with extreme diligence.