BattleTech - The Board Game of Armored Combat

Off Topic and Technical Support => Forum Technical Support => Topic started by: Stinger on 01 February 2016, 09:16:58

Title: Google Safe Browsing Status: Dangerous
Post by: Stinger on 01 February 2016, 09:16:58
I just thought I would mention this:

https://www.google.com/transparencyreport/safebrowsing/diagnostic/index.html?hl=en#url=http://www.catalystgamelabs.com/

Looks to be only the Catalyst Game Labs site, but it should be mentioned.

Thanks!
Title: Re: Google Safe Browsing Status: Dangerous
Post by: SeeM on 01 February 2016, 16:49:45
I just thought I would mention this:

https://www.google.com/transparencyreport/safebrowsing/diagnostic/index.html?hl=en#url=http://www.catalystgamelabs.com/

It's affecting other sites, too. Mozilla tagged battlecorps.com and doesn't load some of the images.
Title: Re: Google Safe Browsing Status: Dangerous
Post by: Knightmare on 01 February 2016, 17:27:22
Hi all,

A few days ago we ran into some server issues. Nothing has been compromised, and we're working to correct the problems. No worries.
Title: Re: Google Safe Browsing Status: Dangerous
Post by: SeeM on 02 February 2016, 02:53:53
A few days ago we ran into some server issues. Nothing has been compromised, and we're working to correct the problems. No worries.
Which is exactly what a comstar adept would say.  }:)
Title: Re: Google Safe Browsing Status: Dangerous
Post by: mikecj on 02 February 2016, 13:41:19
Where is the ComStar Clock (aka the Hand of Blake) pointing- Gibson, Terra or Tukayyid? (Shadows of Faith V6)
Title: Re: Google Safe Browsing Status: Dangerous
Post by: Knightmare on 02 February 2016, 14:07:05
Gibson
Title: Re: Google Safe Browsing Status: Dangerous
Post by: NeonKnight on 02 February 2016, 15:29:33
Hello....Forum stats for me as well:

Reported Attack Page!

This web page at bg.battletech.com has been reported as an attack page and has been blocked based on your security preferences.
Title: Re: Google Safe Browsing Status: Dangerous
Post by: Tymers Realm on 02 February 2016, 15:40:37
I just tried reloading a forum page and got the warning while using firefox.
I'd say what ever is going on w/battlecorps & battleshop is getting worse.
Title: Re: Google Safe Browsing Status: Dangerous
Post by: Knightmare on 02 February 2016, 17:01:02
Google was asked to review all sites and we were cleared this morning. We'll continue to work on things, but ask you all to maintain your patience.

Peace of Blake be with you.
Title: Re: Google Safe Browsing Status: Dangerous
Post by: Dragon Cat on 02 February 2016, 17:54:34
That's not at all creepy Knightmare

Just logged in on Chrome and its warning of malware nothing creeping up on anti-virus or anything just wanted to let you guys know.
Title: Re: Google Safe Browsing Status: Dangerous
Post by: NeonKnight on 02 February 2016, 18:36:13
Also, google/firefox is till warning of reported site attack.
Title: Re: Google Safe Browsing Status: Dangerous
Post by: The Eagle on 02 February 2016, 19:12:20
Yeah, I had an attack page warning on Firefox as of five minutes ago...
Title: Re: Google Safe Browsing Status: Dangerous
Post by: Kit deSummersville on 02 February 2016, 21:31:51
Yeah, I had an attack page warning on Firefox as of five minutes ago...
Had a warning in Safari trying to post this response.
Title: Re: Google Safe Browsing Status: Dangerous
Post by: Knightmare on 02 February 2016, 21:42:51
We continue to tirelessly work to correct the current technical issues plaguing our system. Our hard working and very skilled adepts are very close to fixing the error. As always, your safety and security are our primary concern.

Please continue to track the News and Announcement Board for more information as it becomes available.

Thank you, and Peace of Blake be with you. 
Title: Re: Google Safe Browsing Status: Dangerous
Post by: mikecj on 02 February 2016, 22:18:48
So Google was behind Gray Monday?
Title: Re: Google Safe Browsing Status: Dangerous
Post by: PurpleDragon on 03 February 2016, 00:21:32
Hello....Forum stats for me as well:

Reported Attack Page!

This web page at bg.battletech.com has been reported as an attack page and has been blocked based on your security preferences.

I am using Firefox (downloaded in December 2015); I can't find the version.  I get this as well.  Also, when I tried to ignore and load the page, it told me this site was listed as a possible phishing attack site. 

It just started this a couple of nights ago.
Title: Re: Google Safe Browsing Status: Dangerous
Post by: Arkansas Warrior on 03 February 2016, 01:46:35
Same sort of issues, I keep getting the attached screenshot while viewing the site on my iPhone.
Title: Re: Google Safe Browsing Status: Dangerous
Post by: Paladin1 on 03 February 2016, 10:16:28
Still getting the red warning page from Google Chrome about a malware infestation here.  I haven't gotten it before today, but it's been consistent today.
Title: Re: Google Safe Browsing Status: Dangerous
Post by: Tai Dai Cultist on 03 February 2016, 10:19:26
Google was asked to review all sites and we were cleared this morning. We'll continue to work on things, but ask you all to maintain your patience.


Well, either the admins are flat out lying to us or things are moving at the speed of bureaucracy outside their control.

I know which I choose to believe.
Title: Re: Google Safe Browsing Status: Dangerous
Post by: Pat Payne on 03 February 2016, 13:34:41
We continue to tirelessly work to correct the current technical issues plaguing our system. Our hard working and very skilled adepts are very close to fixing the error. As always, your safety and security are our primary concern.

We're doomed then, aren't we? :D 
Title: Re: Google Safe Browsing Status: Dangerous
Post by: MoneyLovinOgre4Hire on 03 February 2016, 14:32:12
So Google was behind Gray Monday?

Boy, does that make entirely too much sense.
Title: Re: Google Safe Browsing Status: Dangerous
Post by: garhkal on 03 February 2016, 14:57:34
Hello....Forum stats for me as well:

Reported Attack Page!

This web page at bg.battletech.com has been reported as an attack page and has been blocked based on your security preferences.

Did the same to me today, after last night updating to the latest version of firefox..

Title: Re: Google Safe Browsing Status: Dangerous
Post by: Intermittent_Coherence on 03 February 2016, 15:27:15

Well, either the admins are flat out lying to us or things are moving at the speed of bureaucracy outside their control.

I know which I choose to believe.
Been getting it since yesterday.
Title: Re: Google Safe Browsing Status: Dangerous
Post by: Vition2 on 03 February 2016, 15:41:33
I've also been getting it for a couple of days (I think it was Monday I got the first notification).

In addition, something has been tripping a Xigncode3 shut down for Black Desert Online - Character Creator saying it is detecting a trojan (bitdefender AV Plus isn't finding anything though).  This wasn't happening about a week ago - the last time I used the program.

Not necessarily related, but the timing is poor and suggestive.
Title: Re: Google Safe Browsing Status: Dangerous
Post by: Giovanni Blasini on 03 February 2016, 21:43:41
So...are we at least safe if we stick to WAP2?
Title: Re: Google Safe Browsing Status: Dangerous
Post by: Bosefius on 03 February 2016, 21:49:23
Chrome on Desktop seems to be behaving correctly now. Thank you for your hard work!
Title: Re: Google Safe Browsing Status: Dangerous
Post by: Stinger on 03 February 2016, 22:32:22
Yes thank you! Appears to be all good now!
Title: Re: Google Safe Browsing Status: Dangerous
Post by: MoneyLovinOgre4Hire on 04 February 2016, 00:05:59
Firefox is also playing nice again.
Title: Re: Google Safe Browsing Status: Dangerous
Post by: sadlerbw on 04 February 2016, 12:57:41
If you wouldn't mind, could a site admin put in a reassessment request with sophos? The url should be https://secure2.sophos.com/en-us/threat-center/reassessment-request.aspx

Their web protection stuff is still flagging the site.

Thanks.
Title: Re: Google Safe Browsing Status: Dangerous
Post by: RoundTop on 04 February 2016, 13:08:07
I put in a request for reassess. Note: you don't have to be a site admin to submit it.

Side note: I work for sophos, but not in the labs. I'll see what I can do to nudge it along.
Title: Re: Google Safe Browsing Status: Dangerous
Post by: sadlerbw on 04 February 2016, 15:01:09
Thanks, it's not being blocked anymore!

I had thought about putting in the request myself, but I was worried the lab would actually ask me a question about the site that I would be completely unable to answer and that might actually make things worse!

Side note: Well whatever you do, I can say I'm pretty happy with Sophos' products, so good job!
Title: Re: Google Safe Browsing Status: Dangerous
Post by: ItsTehPope on 04 February 2016, 15:52:03
So...are we at least safe if we stick to WAP2?

WPA has nothing to do with this.
Title: Re: Google Safe Browsing Status: Dangerous
Post by: RoundTop on 04 February 2016, 16:36:15
Thanks, it's not being blocked anymore!

I had thought about putting in the request myself, but I was worried the lab would actually ask me a question about the site that I would be completely unable to answer and that might actually make things worse!

Side note: Well whatever you do, I can say I'm pretty happy with Sophos' products, so good job!

Thanks! (I'm in the support department)

Yeah, looks like we picked up the google safesearch results on the 2nd. Re-eval was done this morning after we got the reports.  Back to being categorized Games.
Title: Re: Google Safe Browsing Status: Dangerous
Post by: ActionButler on 04 February 2016, 17:51:46
Saw that warning all day yesterday on Safari and Chrome.  No sign of it today.
Title: Re: Google Safe Browsing Status: Dangerous
Post by: deathshadow on 05 February 2016, 01:31:21
Wondering if the "unblock" has anything to do with the conspicuous lack of content on the homepages of all the catalyst sites.

Dunno if it's related to what happened to Catalyst, but one may also want to be aware of:
http://arstechnica.com/security/2016/02/mysterious-spike-in-wordpress-hacks-silently-delivers-ransomware-to-visitors/

Which has gotten a few sites I know running WP tossed on the blacklist (while I laugh at the people who use WP by choice -- I know, stop flagellating the deceased equine) all had this rather nasty bugger...

The disturbing part is it's attack vector remains something of a mystery, though iframe based video embeds (of all things) seem to be related. What makes that REALLY disturbing is IFRAME's are supposed to block cross site exploits -- but again there's a reason we were told 18 years ago to stop using them. Shame 99% of web developers stuck their fingers in their ears and just didn't want to hear that they couldn't use their precious IFRAME tags anymore.

Though again, Wordpress' "one ring" of security and leaving the keys to the kingdom danging in plain sight behind the main gate... well, exploits like that are hardly a surprise. There's esoteric attacks you can't predict, and then there's having ZERO fallback plan should someone get inside.

GOOD news is, if you keep all your plugins up to date (flash, acrobat, silverlight) or just block them, this nasty can't infect you.

It's still just outright bizarre how it's breaking out of the container into the hosting website, and spreading to sites that don't actually have those video embeds from one WP install to another if they so much as talk to each-other in other ways. (like sharing posts via RSS through certain extensions)

I'm waiting for an exploit like this to reach "neverNoSanity" proportions -- where all the people who neutered their upgrade paths on phpBB by adding mods/extensions that weren't being updated ended up 4 to 6 months behind on patches, and the end result took down two thirds the Internet... the CBT I was running at the time included NOT because we were using it, but because someone else on the same server was.

WP just has that vibe of something like that looming over the horizon... Of course with their "zero damages zero accountability" open source policy, it's not like they REALLY have to care so long as they can keep duping people into using it.

...and why I still say no legitimate business has any business using it for a website. YMMV. It's not bad enough it's accessibility trash and insecure code, but the lack of legal recourse thanks to it being open source? There's a reason it took so long for open source to gain traction in business, and we have yet to have a "major" enough failure for that detail to be contested -- but I've seen this pattern before, and it's coming.
Title: Re: Google Safe Browsing Status: Dangerous
Post by: Skyth on 05 February 2016, 04:31:30
I am still getting the warning on Chrome with my desktop.
Title: Re: Google Safe Browsing Status: Dangerous
Post by: Comedian on 05 February 2016, 10:30:07
Still have a warning on Firefox. (05 Febr.) wich leads to this

https://www.stopbadware.org/firefox?hl=de&url=http%3A%2F%2Fbg.battletech.com%2Fforums%2Findex.php
Title: Re: Google Safe Browsing Status: Dangerous
Post by: 00Dawg on 05 February 2016, 22:56:34
Trend Micro at work is still blocking the site as of today.
Title: Re: Google Safe Browsing Status: Dangerous
Post by: PurpleDragon on 06 February 2016, 00:41:49
I am using firefox and I have not received the message in a couple of days now.  If you are still getting it, assuming you haven't already done so, maybe you should clear temporary internet files. 
Title: Re: Google Safe Browsing Status: Dangerous
Post by: DarkSpade on 06 February 2016, 10:32:35
I'm not blocked from the forums anymore, but I just noticed classicbattletech.com still gives the warning.
Title: Re: Google Safe Browsing Status: Dangerous
Post by: Hammer on 07 February 2016, 12:06:43
After a few days with no warning.  Started to get this

(http://i.imgur.com/o33Hqzpb.png) (http://imgur.com/o33Hqzp)

This morning.

Title: Re: Google Safe Browsing Status: Dangerous
Post by: ColBosch on 07 February 2016, 12:35:38
Literally just got the warning again.
Title: Re: Google Safe Browsing Status: Dangerous
Post by: Firesprocket on 07 February 2016, 12:36:02
The Catalyst BT page is now producing script warnings again about a Trojan through Firefox.
Title: Re: Google Safe Browsing Status: Dangerous
Post by: Tai Dai Cultist on 07 February 2016, 12:50:54
Yep, I'm seeing it too now.

I lost the warm fuzzy feeling I got earlier from Knightmare's assurances.
Title: Re: Google Safe Browsing Status: Dangerous
Post by: Tymers Realm on 07 February 2016, 13:30:10
I just got the warning again w/Firefox on the main Forum page.
Title: Re: Google Safe Browsing Status: Dangerous
Post by: Empyrus on 07 February 2016, 13:58:01
On Chrome, getting warnings.
Title: Re: Google Safe Browsing Status: Dangerous
Post by: garhkal on 07 February 2016, 15:29:34
All day yesterday (visited twice) i didn't see the message.  But got it when i tried getting in today/

calling it an attack site..
Title: Re: Google Safe Browsing Status: Dangerous
Post by: Taron Storm on 07 February 2016, 16:04:47
Same here, using firefox.
Title: Re: Google Safe Browsing Status: Dangerous
Post by: Flieger on 07 February 2016, 16:21:40
Same here, using Firefox too.

Also, not sure but seems related as it appeared at the same time: many avatars are not displayed (including mine).

Title: Re: Google Safe Browsing Status: Dangerous
Post by: MoneyLovinOgre4Hire on 07 February 2016, 17:13:38
Not only am I getting the warning again, this time it appears to be preventing images like peoples' avatars from displaying.
Title: Re: Google Safe Browsing Status: Dangerous
Post by: Stormlion1 on 07 February 2016, 18:17:56
Started happening to me as well.
Title: Re: Google Safe Browsing Status: Dangerous
Post by: doulos05 on 07 February 2016, 18:26:42
I just got it as well on chrome for Android.
Title: Re: Google Safe Browsing Status: Dangerous
Post by: Vition2 on 07 February 2016, 18:27:56
I'm getting it again too, but unlike the others I don't seem to have problems seeing other's avatars.  I'm using chrome on windows 10.
Title: Re: Google Safe Browsing Status: Dangerous
Post by: NeonKnight on 07 February 2016, 19:28:16
Yeah, what's that Line from Poltergiest?


"It's  baaaaaaaaaack"

:(
Title: Re: Google Safe Browsing Status: Dangerous
Post by: GreenDragon on 07 February 2016, 21:14:11
Not only am I getting the warning again, this time it appears to be preventing images like peoples' avatars from displaying.
Sig Bars are coming through though.
Title: Re: Google Safe Browsing Status: Dangerous
Post by: Flieger on 07 February 2016, 21:23:22
Sig Bars are coming through though.

They are from an outside source; e.g. in my case imgur.com.
Likewise, the only avatars I seem to see are those from outside sources like photobucket or imgur. (Not that I checked every avatar, but that is my experience so far)
Title: Re: Google Safe Browsing Status: Dangerous
Post by: ANS Kamas P81 on 07 February 2016, 22:07:19
Anyone know WHY we're getting flagged so much?
Title: Re: Google Safe Browsing Status: Dangerous
Post by: Tai Dai Cultist on 08 February 2016, 03:01:56
While browsing the forum here a Norton popup saying it blocked mass injection website 14.   It's that aniwiki.ws stuff apparently.
Title: Re: Google Safe Browsing Status: Dangerous
Post by: Drop Bear on 08 February 2016, 08:26:52
Don't Know but Firefox is blocking and I'm getting all kinds of warnings from my protection package (Bullguard) that is up to date as three hours ago.
Title: Re: Google Safe Browsing Status: Dangerous
Post by: Stormlion1 on 08 February 2016, 09:23:03
It happens with Windows 7 pretty regularly.
Title: Re: Google Safe Browsing Status: Dangerous
Post by: atlask on 08 February 2016, 09:45:02
Now getting it with Safari on my phone. Did not happen till today
Title: Re: Google Safe Browsing Status: Dangerous
Post by: sadlerbw on 08 February 2016, 10:54:05
Firefox is unhappy with the site again this morning. AS someone who has had to deal with a number of website content management systems in the past...I feel your pain!
Title: Re: Google Safe Browsing Status: Dangerous
Post by: Euphonium on 08 February 2016, 13:00:30
I'm getting this site blocked as an attack site again as of right now.
I'm using Firefox Portable 44.0 on Windows 7, and am in the UK
Title: Re: Google Safe Browsing Status: Dangerous
Post by: Wikkid on 08 February 2016, 14:38:24
Safari is effected too.
Title: Re: Google Safe Browsing Status: Dangerous
Post by: Bedwyr on 08 February 2016, 15:28:43
Now getting it with Safari on my phone. Did not happen till today

Seconded. Chrome had issues and now it looks like iOS Safari has caught up.
Title: Re: Google Safe Browsing Status: Dangerous
Post by: Kentares on 08 February 2016, 22:20:38
Just had Chrome saying its not safe to get in here...
Title: Re: Google Safe Browsing Status: Dangerous
Post by: GreekFire on 08 February 2016, 23:06:44
So with the a week's worth of firefox/google/whatever warnings and the front page that's essentially down...can we get any sort of input on what's actually happening? I'm wanting to spend less and less time here, even with my security measures high.

What's going on??
Title: Re: Google Safe Browsing Status: Dangerous
Post by: Orin J. on 08 February 2016, 23:09:11
on firefox (43.0.4) and STILL getting it. i know it ain't the site itself but what's up on the backend? this crap's gettin old and i'd like to know what the problem is that they all feel like dumping on the site.
Title: Re: Google Safe Browsing Status: Dangerous
Post by: trboturtle on 08 February 2016, 23:14:00
I haven't seen any virus notices or warning about the forums -- I'm using IE --- which may be the problem.....

Craig
Title: Re: Google Safe Browsing Status: Dangerous
Post by: pheonixstorm on 08 February 2016, 23:48:33
IE is always a problem.

Heres my woes.. Desktop w/ Firefox has no issues but my phone using Firefox is barfing badly formatted pages due to the little red warning label.

Someone please get this straightened out soon  ??? :-[ :'(
Title: Re: Google Safe Browsing Status: Dangerous
Post by: garhkal on 09 February 2016, 01:39:58
I'm wanting to spend less and less time here, even with my security measures high.

What's going on??

I am starting to feel the same way..
Title: Re: Google Safe Browsing Status: Dangerous
Post by: The_Caveman on 09 February 2016, 02:16:30
Firefox continues to report the forum as an attack site, Microsoft Edge does not.
Title: Re: Google Safe Browsing Status: Dangerous
Post by: pheonixstorm on 09 February 2016, 02:59:21
Odd that I am not getting that right now but you are.
Title: Re: Google Safe Browsing Status: Dangerous
Post by: ANS Kamas P81 on 09 February 2016, 05:09:57
I'm still getting attack site.  I'm in Phoenix, I can post a tracert screenshot to battletech.com here if it'd help.  It seems to be intermittent, maybe it's tripping off an infected (or simply reported) backbone...hrm.  I jump from at.at.cox.net to a timeout to an IP address, 74.205.108.121 before bouncing back to two rackspace.net IPs and then catalystgamelabs.com directly.
Title: Re: Google Safe Browsing Status: Dangerous
Post by: Drop Bear on 09 February 2016, 06:44:47
hear in OZ using Firefox and getting all kinds of notices from my browser and from my protection package, just updated both before visiting the sight.

Edit: getting the warnings and blocks on all CGL sights, from Leviathans to B-Tech and back again.
Title: Re: Google Safe Browsing Status: Dangerous
Post by: Peter Smith on 09 February 2016, 10:07:44
...before bouncing back to two rackspace.net IPs and then catalystgamelabs.com directly.

The Rackspace IPs make sense, that's our hosting provider.
Title: Re: Google Safe Browsing Status: Dangerous
Post by: Flieger on 09 February 2016, 10:12:21
I haven't seen any virus notices or warning about the forums -- I'm using IE --- which may be the problem.....

Yes, I have no warnings or problems using IE, but who wants to use IE?
Meanwhile it is getting worse on my FF; all avatars are gone except those from outside sources.

Btw., the Norton Safe Web gives clearance for the site:
https://safeweb.norton.com/report/show?url=http%3A%2F%2Fbg.battletech.com
Title: Re: Google Safe Browsing Status: Dangerous
Post by: Mendrugo on 09 February 2016, 12:48:10
I got a Phishing warning from Safari yesterday evening.
Title: Re: Google Safe Browsing Status: Dangerous
Post by: pheonixstorm on 09 February 2016, 16:43:29
Had no attack site warnings yesterday.. but today? &%^*%&*(^%(^%*&%&(*%^  >:(
Title: Re: Google Safe Browsing Status: Dangerous
Post by: PurpleDragon on 10 February 2016, 00:19:19
Using firefox; seems to be cleared up today.  I got the issues yesterday though. 
Title: Re: Google Safe Browsing Status: Dangerous
Post by: MoneyLovinOgre4Hire on 10 February 2016, 00:19:50
I've stopped getting warnings but I still don't see avatars.
Title: Re: Google Safe Browsing Status: Dangerous
Post by: PurpleDragon on 10 February 2016, 00:26:58
I've stopped getting warnings but I still don't see avatars.

Oh, me neither.  I didn't notice that.  I was just glad to be able to get on without warnings. 
Title: Re: Google Safe Browsing Status: Dangerous
Post by: GreekFire on 10 February 2016, 02:36:23
Things good on my end as well.

By the way, I just stumbled across a few missing emails that were sent to my spam folder because they had links to this website in them.
Check your spam, folks.
Title: Re: Google Safe Browsing Status: Dangerous
Post by: Flieger on 10 February 2016, 08:48:36
No warnings, but still
no avatars.
Title: Re: Google Safe Browsing Status: Dangerous
Post by: Knightmare on 10 February 2016, 10:41:48
Try clearing your cache
Title: Re: Google Safe Browsing Status: Dangerous
Post by: Bedwyr on 10 February 2016, 10:57:32
No warnings, but still
no avatars.

Do you wanna date mine? </feliciaday>

(sorry sorry that was so bad. I apologize. :)))
Title: Re: Google Safe Browsing Status: Dangerous
Post by: Flieger on 10 February 2016, 16:52:35
Try clearing your cache

Doesn't help. No avatars.  :(
Title: Re: Google Safe Browsing Status: Dangerous
Post by: Knightmare on 10 February 2016, 17:44:52
Can you post a screenshot?

OS/Browser/Version?
Title: Re: Google Safe Browsing Status: Dangerous
Post by: Flieger on 10 February 2016, 17:59:36
I am using Win7 and Firefox 42.0.

This might help: I tried loading an avatar's URL directly, and got this:
http://i.imgur.com/MsenTa9.jpg
(It is German, but I think you understand it nonetheless)

Also, stopbadware.org reports this avatar (and probably most other avatars):
https://www.stopbadware.org/firefox?hl=de&url=http%3A%2F%2Fd15yciz5bluc83.cloudfront.net%2Fforums%2Fuser-avatars%2Favatar_276_1319779665.jpg

But when just loading bg.battletech.com there are no warning, it looks like this:
http://i.imgur.com/L0wZePJ.jpg
Title: Re: Google Safe Browsing Status: Dangerous
Post by: Drop Bear on 10 February 2016, 18:03:20
ok Firefox is allowing access but Bullguard is still blocking, are the admins trying to clear that end up or is that not part of their purview making it a case of waiting for the Ant-Virus programs to come to their senses when they do their next updates?
Title: Re: Google Safe Browsing Status: Dangerous
Post by: Molossian Dog IIC on 10 February 2016, 20:05:01
I am using Firefox on my desktop. The forums were flagged as "attacking website" just a minute ago.

I can access it despite the warning (obviously, I know) and I can see sig bars, but no avatars.


And when I try to access the cbt website it gives me this here. Looks like some wonky formatting:

(http://i364.photobucket.com/albums/oo85/Molossian_Dog_IIC/The%20Shack/Ohay/th_0000-boo_zps8bge2xzd.jpg) (http://s364.photobucket.com/user/Molossian_Dog_IIC/media/The%20Shack/Ohay/0000-boo_zps8bge2xzd.jpg.html)
Title: Re: Google Safe Browsing Status: Dangerous
Post by: Snake Eyes on 11 February 2016, 01:36:50
Same thing is happening to me, and i'm using chrome.....

The same problem is happening when i go to the Shadowrun forums
Title: Re: Google Safe Browsing Status: Dangerous
Post by: GreenDragon on 11 February 2016, 06:29:06
So question: will the avatars come back?  Or do we need to re-upload?
Title: Re: Google Safe Browsing Status: Dangerous
Post by: Bedwyr on 11 February 2016, 08:52:59
Keep in mind that many, including me, can see your avatar. Feel free to try but it might not help, I dunno.
Title: Re: Google Safe Browsing Status: Dangerous
Post by: Knightmare on 11 February 2016, 09:08:20
Clearing the cache and repeated reloads should fix most issues. Logging out, clearing and then loading in will also give a new session cookie.
Title: Re: Google Safe Browsing Status: Dangerous
Post by: Flieger on 11 February 2016, 10:48:23
I doubt that helps since the avatars from cloudfront.net themselves are flagged by Firefox.

Take this avatar for example:
http://d15yciz5bluc83.cloudfront.net/forums/user-avatars/avatar_276_1319779665.jpg

Trying to load this url directly, Firefox produces this:
http://i.imgur.com/MsenTa9.jpg

Also, stopbadware.org reports this avatar's url:
https://www.stopbadware.org/firefox?hl=de&url=http%3A%2F%2Fd15yciz5bluc83.cloudfront.net%2Fforums%2Fuser-avatars%2Favatar_276_1319779665.jpg
Title: Re: Google Safe Browsing Status: Dangerous
Post by: Sharpnel on 11 February 2016, 11:15:26
Using Chrome and evreything is fine, but a wee bit sluggish.
Title: Re: Google Safe Browsing Status: Dangerous
Post by: GreekFire on 11 February 2016, 11:22:49
Yeah it has nothing to do with the cache on my end.
Title: Re: Google Safe Browsing Status: Dangerous
Post by: DarkSpade on 11 February 2016, 12:26:06
When I checked last night, the front page was still blocked. The forums would load but with no avatars. Couldn't tell you much more though because my browser would crash shortly after. Win10 and the most recent version of Firefox.

On my phone (win8) everything has been fine the whole time.
Title: Re: Google Safe Browsing Status: Dangerous
Post by: Adrian Gideon on 11 February 2016, 12:30:36
Cleared cache, still no avatars.
Title: Re: Google Safe Browsing Status: Dangerous
Post by: Knightmare on 11 February 2016, 12:33:58
On it.
Title: Re: Google Safe Browsing Status: Dangerous
Post by: NeonKnight on 11 February 2016, 12:48:15
I've even tried re-Uploading my Avatar Pic, and not getting/showing.
Title: Re: Google Safe Browsing Status: Dangerous
Post by: Knightmare on 11 February 2016, 13:12:12
I'm pursuing some forum options before escalating up the CDN chain.
Title: Re: Google Safe Browsing Status: Dangerous
Post by: Snake Eyes on 11 February 2016, 14:30:22
Its finally working on my end. The forums load just fine, plus i can still see my avatar :)
Title: Re: Google Safe Browsing Status: Dangerous
Post by: NeonKnight on 11 February 2016, 14:39:27
Just an Update:

I cannot see Avatar's through Firefox
I can see Avatar through Microsoft's Edge (Windows 10)

**Update**...I can see SOME avatar's (example the Avatar of this Thread's FIRST poster shows).
Title: Re: Google Safe Browsing Status: Dangerous
Post by: garhkal on 11 February 2016, 14:41:37
I've been getting in ok since last night, but on the avatars, i only see a 'rank' badge or a pic of a mech..
Title: Re: Google Safe Browsing Status: Dangerous
Post by: Flieger on 11 February 2016, 15:19:49
**Update**...I can see SOME avatar's (example the Avatar of this Thread's FIRST poster shows).

Those avatars are from an outside source; in case of the first poster: photobucket.
The forum's own avatars from cloudfront are flagged by Firefox.

A quick and dirty solution is to directly load an avatar manually, then click to ignore Firefox's warning, and proceed. You should see all the avatars as usual, at least in the current Firefox session.
Title: Re: Google Safe Browsing Status: Dangerous
Post by: GreenDragon on 11 February 2016, 15:55:54
They are back now.  I asked because in my profile, it said I hadn't uploaded one at all.  I was afraid I was going to have to dig through old back up discs to find the image.
Title: Re: Google Safe Browsing Status: Dangerous
Post by: nicj on 11 February 2016, 17:45:34
All,

The Catalyst websites were hit by the malware that deathshadow mentioned (http://arstechnica.com/security/2016/02/mysterious-spike-in-wordpress-hacks-silently-delivers-ransomware-to-visitors/), infecting various WordPress sites, roughly 2 weeks ago.

We have taken several steps to rectify the situation since then.

The malware was actually cleaned within a day or two from the server.  Unfortunately, it's taken longer for us to find all of the places it was "cached".  Notably, we cache parts of the website (for performance reasons), and serve the website from CDNs.  Both of these places had parts of the malware cached until late last week.

All of those places now have no traces of the malware left.

The "Safe Browsing" prompts you're seeing from Google and Firefox come from analysis Google does.  We've had to submit requests for review to Google several times to get the sites taken off their list.  At this point, all of the main Catalyst properties are looking "green", and we continue to monitor the situation.

From this thread, you've pointed out one additional property that is showing "red", d15yciz5bluc83.cloudfront.net.  This is one of the CDNs we use to host content, such as avatars.  I wasn't aware it was flagged until now -- I've recently submitted it to get reviewed as well, so hopefully it will turn "green" soon.

Thanks for your patience. We've been working behind the scenes to rectify this situation.
Title: Re: Google Safe Browsing Status: Dangerous
Post by: GreekFire on 11 February 2016, 19:28:40
Thank you for letting us know what's up, nicj. Really appreciate it.
Title: Re: Google Safe Browsing Status: Dangerous
Post by: Liam's Ghost on 11 February 2016, 20:00:47
So I never saw any warning (using windows 10 and Opera) during this whole thing. What does that mean?
Title: Re: Google Safe Browsing Status: Dangerous
Post by: NeonKnight on 11 February 2016, 20:12:00
 
So I never saw any warning (using windows 10 and Opera) during this whole thing. What does that mean?

That you were the Typhoid Mary of the whole malware infection  :D
Title: Re: Google Safe Browsing Status: Dangerous
Post by: Wrayth on 12 February 2016, 05:10:40
This whole thing has been...interesting to say the least.  Imagine my surprise when I loaded up the Battletech website and my antivirus suddenly started telling me that it was blocking repeated attempts to install a trojan on my computer.  (This was a couple of days ago.)  I'm really glad that things seem to be getting back to normal, for the most part.
Title: Re: Google Safe Browsing Status: Dangerous
Post by: Xtrahmxwohld on 12 February 2016, 10:58:05
So does this mean we can get the Republic theme back soon?  O:-)
Title: Re: Google Safe Browsing Status: Dangerous
Post by: MoneyLovinOgre4Hire on 12 February 2016, 11:07:23
And avatars are back up again.
Title: Re: Google Safe Browsing Status: Dangerous
Post by: CrossfirePilot on 12 February 2016, 14:53:02
Firefox is still reporting this as an attack site.
Title: Re: Google Safe Browsing Status: Dangerous
Post by: MoneyLovinOgre4Hire on 12 February 2016, 15:39:27
Strange, it's not doing that for me.
Title: Re: Google Safe Browsing Status: Dangerous
Post by: garhkal on 12 February 2016, 16:20:17
Nor me, and i am now seeing full avatars.
Title: Re: Google Safe Browsing Status: Dangerous
Post by: pheonixstorm on 13 February 2016, 10:13:26
mobile and desktop all clear for me. How many are still having issues?
Title: Re: Google Safe Browsing Status: Dangerous
Post by: Orin J. on 14 February 2016, 00:42:30
a-ok here. a big thank you to the admins for handling what i'm sure was a headache as promply as i imagine was possible.
Title: Re: Google Safe Browsing Status: Dangerous
Post by: PurpleDragon on 14 February 2016, 00:53:29
I'm good to go now.  Complete with avatars and everything.