BP.net flagged for malware by Google

I just tried to get onto BP.net and Google popped up a malware warning. It said it had apparently scanned the forums and found some suspicious activity in that it tried to install malware onto the visitor's computer. I already know BP.net is safe so I went ahead and connected anyway but mods or admin might want to look into this.

It wasn't this exact forum but activity on the host. Wierd that decided to try tapatalk today.

My dad has just joined as well he called me and said he was getting the same message. Told him just ignore it.

Sent from my SCH-S720C using Tapatalk 2

just happened to me aswell

Yup, every time I open a tab.

Happened to me too.


Sent from my iPhone using Tapatalk

Same here on Chrome and Firefox.

Yep.. I got it too

I'm confident in the integrity of the site itself, but the malware warning is, indeed, very annoying and inconvenient. And I hope it isn't scaring anyone away! I've initiated a tech-support contact, so hopefully we can get this resolved soon. With the holidays, though, that may be slower in coming than usual.

Be patient, and please accept my apologies for the inconvenience!

You have to go through google and there are a few things that you will have to do to get that flag removed. We had to do it for our web site once before. It's some type of verification process.

This link may help you!

http://googleonlinesecurity.blogspot...-stinking.html

Copy pasted from the firefox flag site for bp.net

Safe Browsing

Diagnostic page for ball-pythons.net

What is the current listing status for ball-pythons.net?

Site is listed as suspicious - visiting this web site may harm your computer.
Part of this site was listed for suspicious activity 2 time(s) over the past 90 days.

What happened when Google visited this site?

Of the 39 pages we tested on the site over the past 90 days, 8 page(s) resulted in malicious software being downloaded and installed without user consent. The last time Google visited this site was on 2012-12-27, and the last time suspicious content was found on this site was on 2012-12-27.Malicious software is hosted on 1 domain(s), including cracklebeatbox.org.
1 domain(s) appear to be functioning as intermediaries for distributing malware to visitors of this site, including journaldugeek.com.
This site was hosted on 1 network(s) including AS36351 (SOFTLAYER).

Has this site acted as an intermediary resulting in further distribution of malware?

Over the past 90 days, ball-pythons.net did not appear to function as an intermediary for the infection of any sites.

Has this site hosted malware?

No, this site has not hosted malicious software over the past 90 days.

How did this happen?

In some cases, third parties can add malicious code to legitimate sites, which would cause us to show the warning message.

Next steps:

• Return to the previous page.
• If you are the owner of this web site, you can request a review of your site using Google Webmaster Tools. More information about the review process is available in Google's Webmaster Help Center.

Edit: Removed the hyperlinks to the possible malicious content.

Here is the link for the Google information above. It mentions two suspect domains that are the offenders. Not sure if you could do a search of all user Signatures or advertising for any reference to those two domains and remove them. But it could be something as simple as a user embedding malicious links in their signature or some ad partner that's been compromised.

http://www.google.com/safebrowsing/d...ll-pythons.net

looks like good old CSS attack to me. i wonder where exactly it resides within the site.

The malware has been removed and all is well. It may take up to 24 hours for the warning from Google to resolve, but BP.net is safe and poses no threat at this time. Thanks for your patience!

Good to hear! Thanks for the update.

Thanks for letting us know! I was getting really frustrated about not being able to access this site ha

Quote:

---

Originally Posted by RoseyReps

Copy pasted from the firefox flag site for bp.net

Safe Browsing

Diagnostic page for ball-pythons.net

What is the current listing status for ball-pythons.net?

Site is listed as suspicious - visiting this web site may harm your computer.
Part of this site was listed for suspicious activity 2 time(s) over the past 90 days.

What happened when Google visited this site?

Of the 39 pages we tested on the site over the past 90 days, 8 page(s) resulted in malicious software being downloaded and installed without user consent. The last time Google visited this site was on 2012-12-27, and the last time suspicious content was found on this site was on 2012-12-27.Malicious software is hosted on 1 domain(s), including cracklebeatbox.org.
1 domain(s) appear to be functioning as intermediaries for distributing malware to visitors of this site, including journaldugeek.com.
This site was hosted on 1 network(s) including AS36351 (SOFTLAYER).

Has this site acted as an intermediary resulting in further distribution of malware?

Over the past 90 days, ball-pythons.net did not appear to function as an intermediary for the infection of any sites.

Has this site hosted malware?

No, this site has not hosted malicious software over the past 90 days.

How did this happen?

In some cases, third parties can add malicious code to legitimate sites, which would cause us to show the warning message.

Next steps:

• Return to the previous page.
• If you are the owner of this web site, you can request a review of your site using Google Webmaster Tools. More information about the review process is available in Google's Webmaster Help Center.

Edit: Removed the hyperlinks to the possible malicious content.

---

...And the next, page link was "AS36351 (SOFTLAYER)" :

"What happened when Google visited sites hosted on this network?

Of the 414811 site(s) we tested on this network over the past 90 days, 6091 site(s), including, for example, magweb.com/, jokeroo.com/,bestpaylasim.com/, served content that resulted in malicious software being downloaded and installed without user consent.
The last time Google tested a site on this network was on 2012-12-28, and the last time suspicious content was found was on 2012-12-28.

Has this network hosted sites acting as intermediaries for further malware distribution?

Over the past 90 days, we found 348 site(s) on this network, including, for example, ipad2downloads.net/, choosmith.com/, axcessnews.com/, that appeared to function as intermediaries for the infection of 1041 other site(s) including, for example, adrants.com/, australiangamer.com/,cellutitis.org/.

Has this network hosted sites that have distributed malware?

Yes, this network has hosted sites that have distributed malicious software in the past 90 days. We found 424 site(s), including, for example,cslr1.com/, googosearch.biz/, airpurifiersionic.com/, that infected 2082 other site(s), including, for example, qhome.cn/, damingfu.cn/,blinblineo.blogia.com/."

Seems those site on this network host have been hacked. Fortunately BP-net has not. After this post I'm doing Tapatalk for a couple days. I DID NOT remove links I wanted people to see the possible hacked sites. Click at your own risk, as google says.

Quote:

---

Originally Posted by mlededee

The malware has been removed and all is well. It may take up to 24 hours for the warning from Google to resolve, but BP.net is safe and poses no threat at this time. Thanks for your patience!

---

Thank you! So there was malware floating around this site then?

Quote:

---

Originally Posted by arialmt

...And the next, page link was "AS36351 (SOFTLAYER)" :

"What happened when Google visited sites hosted on this network?

Of the 414811 site(s) we tested on this network over the past 90 days, 6091 site(s), including, for example, magweb.com/, jokeroo.com/,bestpaylasim.com/, served content that resulted in malicious software being downloaded and installed without user consent.
The last time Google tested a site on this network was on 2012-12-28, and the last time suspicious content was found was on 2012-12-28.

Has this network hosted sites acting as intermediaries for further malware distribution?

Over the past 90 days, we found 348 site(s) on this network, including, for example, ipad2downloads.net/, choosmith.com/, axcessnews.com/, that appeared to function as intermediaries for the infection of 1041 other site(s) including, for example, adrants.com/, australiangamer.com/,cellutitis.org/.

Has this network hosted sites that have distributed malware?

Yes, this network has hosted sites that have distributed malicious software in the past 90 days. We found 424 site(s), including, for example,cslr1.com/, googosearch.biz/, airpurifiersionic.com/, that infected 2082 other site(s), including, for example, qhome.cn/, damingfu.cn/,blinblineo.blogia.com/."

Seems those site on this network host have been hacked. Fortunately BP-net has not. After this post I'm doing Tapatalk for a couple days. I DID NOT remove links I wanted people to see the possible hacked sites. Click at your own risk, as google says.

---

I left the text of the sites so people could read the bad pages, just removed the ability to click on them. No reason to leave up direct links to known malicious sites *shrug* sorry. I'm not computer savvy, just trying to make sure we don't give more access to the nasty sites. I didn't realize the softlayer link was not icky, newbie mistake :oops:

Quote:

---

Originally Posted by RoseyReps

I left the text of the sites so people could read the bad pages, just removed the ability to click on them. No reason to leave up direct links to known malicious sites *shrug* sorry. I'm not computer savvy, just trying to make sure we don't give more access to the nasty sites. I didn't realize the softlayer link was not icky, newbie mistake :oops:

---

You did great, and got to learn something. I didn't mind risking a little blow back to be overly helpful. I hope it seem like I was correcting you you or stealing your thunder, cause I was pretty impressed page 1 was already posted. :)

There seems to be an epidemic on this on several online forums within the past month or so, this is the third animal related board that I have seen this message on (4 in all, this forum, a popular tarantula forum and two fish forums). It's really weird, is this something that is going around like a worm infecting hosting sites for example?

3 of those also had similar threads to this posted and from what I can tell, followed the exact same pattern as what happened here.

Just got the warning again coming to the site while I was at work :( Didn't think to copy/paste the text, but it was the same malware flagged by google warning. I'm using firefox on this computer, but that message never showed up while I was using chrome on my other machine at home. Just thought I'd give you guys a heads up! Don't want anyone getting scared off

Quote:

---

Originally Posted by Valentine Pirate

Just got the warning again coming to the site while I was at work :( Didn't think to copy/paste the text, but it was the same malware flagged by google warning. I'm using firefox on this computer, but that message never showed up while I was using chrome on my other machine at home. Just thought I'd give you guys a heads up! Don't want anyone getting scared off

---

Yea mine never stopped showing up since it started. I always have to bypass that warning page. Hopefully BP.net clears with google soon.

I just checked our Google account and there are no flags, warnings or anything indicating any malware on the site. Can you try clearing your cache and browser history to see if that remedies the issue? You should not still be getting warnings at this point as the issue was cleared up a week ago.

Makes sense! I'll try that out and let you know

I'm using Firefox and I got that big red warning. I simply stayed away a couple days and now I get no warning.

Ah clearing my cookies and cache did work. Thanks!