Wechat IP addresses wrongly classified as phishing?

[junwei]

Hi, received a few complaints from users reporting that they could not use their Wechat messaging services (web / desktop versions). Upon inspection, noticed a few logged calls to unknown IP addresses.

An example is: http://14.17.42.45/cgi-bin/micromsg-bin/newreportkvcomm

Visiting http://14.17.42.45 shows the Wechat website (though Chrome marks it as phishing as well).

Some IPs I've noticed:

[ol]

101.226.211.44

101.226.211.101

101.227.162.149

180.163.25.[139-140]

101.227.162.140

183.3.224.144

14.215.158.[100-101][/ol]

Not sure what Fortinet engineers can help to check on this? Otherwise its maintenance hell having to check and update this list. I'm currently setting a bypass for these IPs.

Setting WebFilter -> Overwrite Rating for these IPs didn't work for me.