BP.net flagged for malware by Google

Copy pasted from the firefox flag site for bp.net

Safe Browsing

Diagnostic page for ball-pythons.net

What is the current listing status for ball-pythons.net?

Site is listed as suspicious - visiting this web site may harm your computer.
Part of this site was listed for suspicious activity 2 time(s) over the past 90 days.

What happened when Google visited this site?

Of the 39 pages we tested on the site over the past 90 days, 8 page(s) resulted in malicious software being downloaded and installed without user consent. The last time Google visited this site was on 2012-12-27, and the last time suspicious content was found on this site was on 2012-12-27.Malicious software is hosted on 1 domain(s), including cracklebeatbox.org.
1 domain(s) appear to be functioning as intermediaries for distributing malware to visitors of this site, including journaldugeek.com.
This site was hosted on 1 network(s) including AS36351 (SOFTLAYER).

Has this site acted as an intermediary resulting in further distribution of malware?

Over the past 90 days, ball-pythons.net did not appear to function as an intermediary for the infection of any sites.

Has this site hosted malware?

No, this site has not hosted malicious software over the past 90 days.

How did this happen?

In some cases, third parties can add malicious code to legitimate sites, which would cause us to show the warning message.

Next steps:

• Return to the previous page.
• If you are the owner of this web site, you can request a review of your site using Google Webmaster Tools. More information about the review process is available in Google's Webmaster Help Center.

Edit: Removed the hyperlinks to the possible malicious content.

Here is the link for the Google information above. It mentions two suspect domains that are the offenders. Not sure if you could do a search of all user Signatures or advertising for any reference to those two domains and remove them. But it could be something as simple as a user embedding malicious links in their signature or some ad partner that's been compromised.

http://www.google.com/safebrowsing/d...ll-pythons.net

looks like good old CSS attack to me. i wonder where exactly it resides within the site.

The malware has been removed and all is well. It may take up to 24 hours for the warning from Google to resolve, but BP.net is safe and poses no threat at this time. Thanks for your patience!

Good to hear! Thanks for the update.

Thanks for letting us know! I was getting really frustrated about not being able to access this site ha

Quote:

---

Originally Posted by RoseyReps

Copy pasted from the firefox flag site for bp.net

Safe Browsing

Diagnostic page for ball-pythons.net

What is the current listing status for ball-pythons.net?

Site is listed as suspicious - visiting this web site may harm your computer.
Part of this site was listed for suspicious activity 2 time(s) over the past 90 days.

What happened when Google visited this site?

Of the 39 pages we tested on the site over the past 90 days, 8 page(s) resulted in malicious software being downloaded and installed without user consent. The last time Google visited this site was on 2012-12-27, and the last time suspicious content was found on this site was on 2012-12-27.Malicious software is hosted on 1 domain(s), including cracklebeatbox.org.
1 domain(s) appear to be functioning as intermediaries for distributing malware to visitors of this site, including journaldugeek.com.
This site was hosted on 1 network(s) including AS36351 (SOFTLAYER).

Has this site acted as an intermediary resulting in further distribution of malware?

Over the past 90 days, ball-pythons.net did not appear to function as an intermediary for the infection of any sites.

Has this site hosted malware?

No, this site has not hosted malicious software over the past 90 days.

How did this happen?

In some cases, third parties can add malicious code to legitimate sites, which would cause us to show the warning message.

Next steps:

• Return to the previous page.
• If you are the owner of this web site, you can request a review of your site using Google Webmaster Tools. More information about the review process is available in Google's Webmaster Help Center.

Edit: Removed the hyperlinks to the possible malicious content.

---

...And the next, page link was "AS36351 (SOFTLAYER)" :

"What happened when Google visited sites hosted on this network?

Of the 414811 site(s) we tested on this network over the past 90 days, 6091 site(s), including, for example, magweb.com/, jokeroo.com/,bestpaylasim.com/, served content that resulted in malicious software being downloaded and installed without user consent.
The last time Google tested a site on this network was on 2012-12-28, and the last time suspicious content was found was on 2012-12-28.

Has this network hosted sites acting as intermediaries for further malware distribution?

Over the past 90 days, we found 348 site(s) on this network, including, for example, ipad2downloads.net/, choosmith.com/, axcessnews.com/, that appeared to function as intermediaries for the infection of 1041 other site(s) including, for example, adrants.com/, australiangamer.com/,cellutitis.org/.

Has this network hosted sites that have distributed malware?

Yes, this network has hosted sites that have distributed malicious software in the past 90 days. We found 424 site(s), including, for example,cslr1.com/, googosearch.biz/, airpurifiersionic.com/, that infected 2082 other site(s), including, for example, qhome.cn/, damingfu.cn/,blinblineo.blogia.com/."

Seems those site on this network host have been hacked. Fortunately BP-net has not. After this post I'm doing Tapatalk for a couple days. I DID NOT remove links I wanted people to see the possible hacked sites. Click at your own risk, as google says.

Quote:

---

Originally Posted by mlededee

The malware has been removed and all is well. It may take up to 24 hours for the warning from Google to resolve, but BP.net is safe and poses no threat at this time. Thanks for your patience!

---

Thank you! So there was malware floating around this site then?

Quote:

---

Originally Posted by arialmt

...And the next, page link was "AS36351 (SOFTLAYER)" :

"What happened when Google visited sites hosted on this network?

Of the 414811 site(s) we tested on this network over the past 90 days, 6091 site(s), including, for example, magweb.com/, jokeroo.com/,bestpaylasim.com/, served content that resulted in malicious software being downloaded and installed without user consent.
The last time Google tested a site on this network was on 2012-12-28, and the last time suspicious content was found was on 2012-12-28.

Has this network hosted sites acting as intermediaries for further malware distribution?

Over the past 90 days, we found 348 site(s) on this network, including, for example, ipad2downloads.net/, choosmith.com/, axcessnews.com/, that appeared to function as intermediaries for the infection of 1041 other site(s) including, for example, adrants.com/, australiangamer.com/,cellutitis.org/.

Has this network hosted sites that have distributed malware?

Yes, this network has hosted sites that have distributed malicious software in the past 90 days. We found 424 site(s), including, for example,cslr1.com/, googosearch.biz/, airpurifiersionic.com/, that infected 2082 other site(s), including, for example, qhome.cn/, damingfu.cn/,blinblineo.blogia.com/."

Seems those site on this network host have been hacked. Fortunately BP-net has not. After this post I'm doing Tapatalk for a couple days. I DID NOT remove links I wanted people to see the possible hacked sites. Click at your own risk, as google says.

---

I left the text of the sites so people could read the bad pages, just removed the ability to click on them. No reason to leave up direct links to known malicious sites *shrug* sorry. I'm not computer savvy, just trying to make sure we don't give more access to the nasty sites. I didn't realize the softlayer link was not icky, newbie mistake :oops:

Quote:

---

Originally Posted by RoseyReps

I left the text of the sites so people could read the bad pages, just removed the ability to click on them. No reason to leave up direct links to known malicious sites *shrug* sorry. I'm not computer savvy, just trying to make sure we don't give more access to the nasty sites. I didn't realize the softlayer link was not icky, newbie mistake :oops:

---

You did great, and got to learn something. I didn't mind risking a little blow back to be overly helpful. I hope it seem like I was correcting you you or stealing your thunder, cause I was pretty impressed page 1 was already posted. :)