Malware warning in Chrome?

Mike Danger

Clicked on Debate and Discourse and got:

Danger: Malware Ahead!
Google Chrome has blocked access to this page on forums.penny-arcade.com.
Content from zoidberg.wz.cz, a known malware distributor, has been inserted into this web page. Visiting this page now is very likely to infect your Mac with malware.
Malware is malicious software that causes things like identity theft, financial loss, and permanent file deletion. Learn more

Solysp

I too am getting this, would pm the appropriate mod, but I don't know who the D&D mods are and I'm too scared to check. :P

Ringo

Also just got this warning trying to get to D&D

Dyrwen66

I got it on the main page first, then in D&D.

Mazzyx

I got it in [chat] then going to the main D&D page.

Henroid

This typically happens when an avatar is being hosted on a site, and said site gets flagged for malware content. The specifics of that side of it can be anything.

Just to let people know what's going on. Now the hunt begins to find out whose avatar it is!

Shadowhope

That criminal guy is awesome.

EDIT: Huh, under advanced I got the following:

Safe Browsing
Diagnostic page for zoidberg.wz.cz/futurama

What is the current listing status for zoidberg.wz.cz/futurama?
This site is not currently listed as suspicious.

What happened when Google visited this site?
Google has not visited this site within the past 90 days.
Has this site acted as an intermediary resulting in further distribution of malware?
Over the past 90 days, zoidberg.wz.cz/futurama did not appear to function as an intermediary for the infection of any sites.

Has this site hosted malware?
No, this site has not hosted malicious software over the past 90 days.

Next steps:
Return to the previous page.
If you are the owner of this web site, you can request a review of your site using Google Webmaster Tools. More information about the review process is available in Google's Webmaster Help Center.

see317

Guess it's been reported already.
Consider this a "Me too" post.

Tube

@icyliquid

IcyLiquid

Henroid wrote: »

This typically happens when an avatar is being hosted on a site, and said site gets flagged for malware content. The specifics of that side of it can be anything.

Just to let people know what's going on. Now the hunt begins to find out whose avatar it is!

I hate this.

IcyLiquid

I've done a search of all avatars and all discussion and comment bodies for that address and turned up nothing. Its possible that the "zoidberg.wz.cz" address is the final destination after one or more redirects, and the actual content in the avatar or discussion/comment is different. What would have really helped is if one of you guys could have downloaded a copy of the page's HTML when this was happening (using cURL or wget or something). As it stands, with the information provided, I have no way to find the offending content in a reasonable amount of time.

Henroid

Someone contacted @Jacobkosh in the D&D chat thread shortly after this thread was made, when they discovered what avatar it was this time and he handled it.

How much of a problem would it be to just relocate all avatars to host off our own forum database?

Jacobkosh

the avatar belonged to @SparserLogic .

kime

I get something very similar occasionally on the mobile site. "Warning: something's not right here! Chrome is unable to verify that the URL for this site is correct. You cannot proceed because the website operator has requested heightened security for this domain."

This happens sometimes when loading My Bookmarks, which doesn't show avatars, so I'm not sure if it is the same or a different issue