fly.storage.tigris.dev blocked/flagged by Bitdefender

I’ve seen previous posts about tigris.dev being flagged due to a bad actor hosting malicious material there, but it seems this issue is still present.

Also, I only discovered the error today, even though it’s been around for months. I’m using Tigris storage buckets in my app, and Bitdefender on Windows 10 is flagging it (only as of today):

! image

How can this be fixed? I’ve tried adding exceptions to Bitdefender, but nothing works except disabling all protections. This is really unacceptable… What are the possible work‑arounds?

Solution

Thanks — I sent an email to Bitdefender Support under the tag of “False Positive” for the specific bucket URL and https://tigris.dev/``https://tigris.dev/ a few hours ago and now it appears to be working :crossed_fingers:. Hope it remains this way! :slight_smile: Should I send further details or not necessary?

Feedback about the issue

This is normal for companies that offer storage. They might have had a rogue customer store some malware, or maybe one of their customers accidentally infected a bucket because they had a virus, or maybe Bitdefender have some other metric on which Tigris fails. Obviously this is the fault of Bitdefender, even though Tigris employees may make some efforts to correct the record.

I’d suggest logging a ticket with Bitdefender, but in the meantime you can add this URL to your operating system’s allow‑list.

(I wonder if this error is happening in your Windows development environment, given that the error is happening in Node. If you don’t need your customers/users to interact with this bucket then you likely don’t have a problem; your Node applications in Fly will be entirely untroubled by consumer antivirus).

User Interaction

My users would indeed interact with the bucket… Also I do have node.exe``node.exe allowed through my Windows firewall. Adding node.exe``node.exe to Bitdefender appears to do nothing. I’ve also attempted adding the specific URL (in that screenshot) and wildcards to that domain name, but it is still blocked. The issue is two months old and only encountered this blocking yesterday. My Bitdefender auto‑updates frequently, so this is very disruptive if it’s an ongoing issue.

Hello

Can you please reach out to help@tigrisdata.com with the details of your bucket and object key. I am going to look into this.

Thanks!

Conclusion

Thank you for taking care of that. It would be greatly appreciated if you could forward it our way. I’m also happy to reach out to them directly to ensure we’re added to their exclusion list moving forward. Additionally, please include help@tigrisdata.com in the email thread—I’ll be able to follow up there as well.