URGENT: The domain tally.so is wrongfully blocked (false positive report)

[#1]

Our website tally.so is currently inaccessible on BT’s network (ASN: AS2856), which also affects EE and Plusnet subscribers. Traffic to https://tally.so is being blocked or filtered, preventing customers from accessing our service.

About Tally

Tally is a secure, trusted form-building platform with over 1M users worldwide and 12M+ submissions each month. We do not host or distribute malicious content and take security extremely seriously.

What we’ve tried

• We have called BT phone support ourselves but were told they cannot assist since we’re not a BT customer.

• Many of our customers who are BT subscribers have also contacted phone support, but have not been able to get the issue resolved.

• We have emailed the following addresses without receiving any reply: 

  abuse@bt.com, saferbrowsing@bt.com, network@bt.com, categorisation@bt.com, security@bt.com

Request

We kindly ask BT’s technical/network security team to:

• Investigate why tally.so is being blocked or flagged

• Remove our domain from any blocklists or filters

• Share details of the reason for the block so we can prevent recurrence

We are happy to provide security reports, logs, or any verification required. This matter is critical for our UK customers who rely on Tally daily, and we’d greatly appreciate urgent attention.

Thank you for your help.

[#2]

Website loads ok for me

BrianG

[#3]

@beeceegee are you using the Plusnet DNS servers ?

From what I can see, the PN(BT) DNS servers wont resolve tally.so, if I use OpenDNS it will.

[#4]

---

@filip_tally wrote:

Our website tally.so is currently inaccessible on BT’s network (ASN: AS2856), which also affects EE and Plusnet subscribers. Traffic to https://tally.so is being blocked or filtered

Just to confirm, not seen from here (PN connection).

... the above .jpg illustrates what's seen (may not display on this forum till someone okays it) but it says tally.so server IP address not found.

.

[#5]

@beeceegee @MisterW indeed, I don't think the issue is resolved yet.

Checking the status via blocked.org.uk shows "No response received" from BT and Plusnet:  https://www.blocked.org.uk/site/http://tally.so%3F4

[#6]

@MisterW good point,  I forgot I'm using Google dns servers

[#7]

@Penny Yes, this is a DNS block on BT and Plusnet's end.

I've been trying to contact someone from the team, but I haven't had any luck. There is no place to report false positives afaik.

[#8]

@filip_tally I don't believe its being 'blocked' as such, it's just that the BT DNS servers can't resolve tally.so so don't get an IP address. I've checked with both the normal and Safeguard DNS servers with the same results so it doesnt appear to be a content block.

Using a third party DNS service such as OpenDNS or Google enables it to be resolved and the website works fine.

@Penny I'm assuming you're using the standard Plusnet DNS servers , is that correct ? 

[#9]

---

@MisterW wrote:

@Penny I'm assuming you're using the standard Plusnet DNS servers , is that correct ? 

---

lol

I have no idea

It's a Plusnet router, and it's Plusnet broadband (of some type).  More than that, I really couldn't say.

.

[#10]

@MisterW I'm confident our domain was flagged and blocked by their system. The website loaded fine until around noon yesterday.

[#11]

@Penny if you weren't using the standard ones, you'd know because you would have had to set them manually on the router.

I'd be pretty sure you're using the standard.

[#12]

@filip_tally 

The website loaded fine until around noon yesterday.

Does that correspond with any changes to the DNS on your domain ?

[#13]

@MisterW No, we haven’t made any changes to our DNS.

It’s possible that a malicious form created through our service bypassed our abuse detection and was reported by an end user, which may have flagged our domain and caused the block.

We believe the block list is likely managed by a security vendor used by BT, rather than BT directly. Unfortunately, we haven’t been able to find public information or contact anyone who can help on this.

Would it be possible for you to escalate this issue to the appropriate abuse, networking, or security team within BT?

[#14]

I believe the issue might be resolved now: https://www.blocked.org.uk/site/http://tally.so%3F6

Could you confirm on your end: @MisterW @Penny @beeceegee ? 🙏

[#15]

@filip_tally I don't have direct access to those teams BUT I can escalate it to try and get better staff visibilty of the issue.

However, staff presence on the forums seems limited today, so it may be some time before its picked up

edit: our posts crossed.

Yes, I can confirm that tally.so now resolves using both the standard Plusnet and Safeguard DNS servers.