As was foretold, we've added advertisements to the forums! If you have questions, or if you encounter any bugs, please visit this thread: https://forums.penny-arcade.com/discussion/240191/forum-advertisement-faq-and-reports-thread/

Getting phishing warning in last few pages of General COVID thread

JaysonFourJaysonFour Classy Monster KittehRegistered User regular
I was getting up to date with the last few pages of the thread, and suddenly got a popup from Kaspersky warning of a potential phishing link that could host malware on it. I don't know exactly what's causing it, but it's the web address http:// findresults . site /? rpid= 9POR3TG0A (remove spaces but be careful). I'm thinking it might be coming from one of the pictures or something that's been posted, because I can go elsewhere on the forum and not get pinged.

steam_sig.png

Posts

  • JaysonFourJaysonFour Classy Monster Kitteh Registered User regular
    Also getting this in the first page of the Quarantine Chat thread. I think it's a link in someone's sig or something.

    steam_sig.png
  • TubeTube Registered User admin
    Can you link to the relevant pages please?

    Hobnail wrote: »
    This forum has taken everything from me
    This hurts but I deserve it

    Zilla360
  • Crippl3Crippl3 oh noRegistered User regular
    Yeah, I've been getting this for a couple days, seemingly in multiple threads. I tend to open up a bunch of threads at once in tabs so I couldn't figure out what it was in, today I went one-at-a-time and got the notification in the latest page of the SE++ Indie Games thread: https://forums.penny-arcade.com/discussion/229998/indie-games-h-o-n-k/p18

    It's from "find results dot site", I figure it's probably in someone's sig somehow. Might be multiple users.

  • EchoEcho ski-bap ba-dapModerator mod
    Crippl3 wrote: »
    It's from "find results dot site", I figure it's probably in someone's sig somehow. Might be multiple users.

    I can't find that in the page source of any of the linked pages. Some browser plugin you're using that's injecting stuff?

    Echo wrote: »
    Let they who have not posted about their balls in the wrong thread cast the first stone.
  • JaysonFourJaysonFour Classy Monster Kitteh Registered User regular
    Only plugins I'm using are the Kaspersky-provided one and AdBlock Plus.

    steam_sig.png
  • BahamutZEROBahamutZERO Registered User regular
    edited April 2020
    If you're still getting the warnings, try turning each of them off and trying to trigger the warning again to test them.

    e: FWIW I saw some element loading from findresultssite or whatever on the https://forums.penny-arcade.com/discussion/235674/the-general-coronavirus-discussion-thread-mk-ii/p92 page, I don't have this kaspersky plugin that throws warnings though.

    BahamutZERO on
    BahamutZERO.gif
  • Inquisitor77Inquisitor77 2 x Penny Arcade Fight Club Champion A fixed point in space and timeRegistered User regular
    I'm also getting this for Bitdefender:
    Phishing attempt detected
    3 hours ago

    Feature:
    Online Threat Prevention

    We blocked this phishing page for your protection:
    http://findresults.site/?rpid=9POR3TG0A
    Phishing pages attempt to obtain sensitive information such as login credentials or credit card details by disguising as trustworthy entities. The stolen data can be then used for financial gain

    Consistently reproduced by visiting this page: https://forums.penny-arcade.com/discussion/231379/streaming-services-you-love-them-you-hate-them-you-have-them-all/p47

    Based on past bug reports for these forums, I believe this is related to the alabasterslim.com domain that is being used to host signature images. Interestingly enough, visiting the site itself won't pop up with a warning. It may also be worth nothing that the domain uses straight http and not secured https.

  • JaysonFourJaysonFour Classy Monster Kitteh Registered User regular
    I mean, I have the same sig, and it's not triggering on this page- if I had to point to anything, I'd say the common thread would be something on Zilla360's signature- they're the only poster who's posted on every single one of the threads that's been giving me these dings, but that's more circumstantial than anything...

    steam_sig.png
  • Inquisitor77Inquisitor77 2 x Penny Arcade Fight Club Champion A fixed point in space and timeRegistered User regular
    JaysonFour wrote: »
    I mean, I have the same sig, and it's not triggering on this page- if I had to point to anything, I'd say the common thread would be something on Zilla360's signature- they're the only poster who's posted on every single one of the threads that's been giving me these dings, but that's more circumstantial than anything...

    This might be it. Zilla's sig contains a link to the following site: https://eu.playstation.com/psn/profile/Cyd0n11a

    Going to that link opens up a SSL_ERROR_BAD_CERT_DOMAIN error.

  • EchoEcho ski-bap ba-dapModerator mod
    This might be it. Zilla's sig contains a link to the following site: https://eu.playstation.com/psn/profile/Cyd0n11a

    Going to that link opens up a SSL_ERROR_BAD_CERT_DOMAIN error.

    Well, shame on Sony for mismanaging their certs then. But yeah, that looks like it.

    Echo wrote: »
    Let they who have not posted about their balls in the wrong thread cast the first stone.
    H3KnucklesJaysonFourZilla360
  • Zilla360Zilla360 21st Century. |She/Her| Surreal. Immersive. Earth.Registered User regular
    God damnit, Sony. Sorry everyone. :redface:

    NH844lc.png | PSN | GACSALB.jpg My Blog |🏳️‍⚧️♥️
    ShadowfireElvenshae
  • JaysonFourJaysonFour Classy Monster Kitteh Registered User regular
    Can confirm I am no longer getting the warning. Looks like that was it!

    steam_sig.png
    Zilla360
Sign In or Register to comment.