ShipSpotting.com Forum

Shipspotters all over the world => Site related news, functions and modules => Topic started by: Robert J Smith on June 05, 2018, 02:27:26 pm



Title: Is there a site problem?
Post by: Robert J Smith on June 05, 2018, 02:27:26 pm
Is there a problem with the site?
Three times today, when opening a photo, I've had a screen appear saying that a "Java Plug-In" was not found and urged to download an update. My Norton immediately flagged it as "not safe" and removed it.

Only happened on this site today, anyone else seeing this?

I'm using Chrome on Windows 7.

Regards

Bob


Title: Re: Is there a site problem?
Post by: Aleksi Lindström on June 05, 2018, 02:37:35 pm
Hi Bob,

Yep seeing it since this morning, one should certainly not download it. Using Chrome on Windows 10.

Cheers,
Aleksi


Title: Re: Is there a site problem?
Post by: victor radio74 on June 05, 2018, 04:45:55 pm
Hi,same happened to me using Firefox,my antivus stopped it
rgds


Title: Re: Is there a site problem?
Post by: smithy166 on June 05, 2018, 07:10:32 pm
I got the same popup - Links to "printerdriverforwindows.com" or something similar.


Title: Re: Is there a site problem?
Post by: davidships on June 05, 2018, 07:25:48 pm
I had this also just once and ignored, but Henrik informed about this thread.


Title: Re: Is there a site problem?
Post by: jdap on June 05, 2018, 09:04:42 pm
Just had it popping-up while accessing the site as usual, using Chrome on Windows 10.

Downloading suddenly in progress, stopped it and exited the site as advised above.

Re-accessed the site one more time again, logged-in, no trace of the Java 8.0 pop-up this time.

By the way, I had already logged-in to the site at least twice earlier today, after this thread had already been started, and no problem with pop-ups then.

Why I got it now is a mystery.

Thanks for the alerts, anyway.


Title: Re: Is there a site problem?
Post by: davidships on June 05, 2018, 09:25:29 pm
Henrik thinks it is connected with a "bad ad" from one of the ad prtners.  He wil try to track it down (not always easy as some ads are country-specific)
It is probably difficult for members to identify, especially if running an ad-blocker.


Title: Re: Is there a site problem?
Post by: R. Engelsman on June 05, 2018, 09:59:33 pm
Had this on Microsoft Edge.
It also says "From: 10000under.com".
Don't download this Java file, it definitely contains something like a virus.

(https://preview.ibb.co/jwwDyT/javabad.png) (https://ibb.co/efaj58)


Title: Re: Is there a site problem?
Post by: Clive Harvey on June 05, 2018, 10:47:03 pm
It's a relief to know that others have been getting this 'instruction' regarding Java. When such things happen I always worry that something is amiss with my computer. I have ignored it.


Title: Re: Is there a site problem?
Post by: lappino on June 06, 2018, 02:37:44 am
South Korea, Firefox. Really annoying.


Title: Re: Is there a site problem?
Post by: Kyle Stubbs on June 06, 2018, 02:55:41 am
I'm getting it here in the United States, on the Google Chrome browser. It's getting quite irritating.


Title: Re: Is there a site problem?
Post by: Anthony Legg on June 06, 2018, 05:03:01 am
Likewise, have had it pop up a few times, my Norton has blocked and removed it. Hope this is not a new round of potential site problems developing! 


Title: Re: Is there a site problem?
Post by: Cedric Hacke on June 06, 2018, 07:00:09 am
I had no issues here logging in a few minutes ago (Chrome on macOS).


Title: Re: Is there a site problem?
Post by: Jim McQuarrie on June 06, 2018, 07:34:20 am
Me to "Java"


Title: Re: Is there a site problem?
Post by: john white on June 06, 2018, 07:43:41 am
I am getting it useing firefox


Title: Re: Is there a site problem?
Post by: mglander on June 06, 2018, 02:01:15 pm
Still existing using Firefox ESR. Kaspersky blocked execution. 10000under.com


Title: Re: Is there a site problem?
Post by: Patrick Deenik on June 06, 2018, 02:08:44 pm
Here in the  Netherlands the same problem.Using Chrome,blocked by ESET.


Title: Re: Is there a site problem?
Post by: smithy166 on June 06, 2018, 04:52:25 pm
Henrik thinks it is connected with a "bad ad" from one of the ad prtners.  He wil try to track it down (not always easy as some ads are country-specific)
It is probably difficult for members to identify, especially if running an ad-blocker.

I use Ublock Origin, and the popup still showed up. As a note however, I've only had it once, and have been unable to make it reappear.


Title: Re: Is there a site problem?
Post by: R. Engelsman on June 06, 2018, 05:49:10 pm
When I visit shipspotting.com and have a quick look at the code I see the code in the picture below.
I am wondering what the url in the red rectangle means. Google didn't come up with anything and the url itself doesn't work either.
One line above there's a reverence to a page tracker script.

(https://image.ibb.co/e31D08/javabad3.png) (https://ibb.co/eZt47o)



Title: Re: Is there a site problem?
Post by: andrecas on June 07, 2018, 12:31:20 am
I am reluctantly sending this message from my mobile.  When I open site on iPhone simply to view (Not log in) a pop up message appears in red at the top reading “WEB SITE NOT SECURE”. I raised this issue previously however, now I am experiencing a different problem, this time  when trying to log on site with PC my Malwarebytes program kicks in with a pop up screen reading “WEBSITE BLOCKED DUE TO MALWARE”.  ???
This happened  around today around 9:15PM EST (Canada).  Did not experience this yesterday when logging on site.


Title: Re: Is there a site problem?
Post by: Tony Martin on June 07, 2018, 12:55:15 am
Andrecas , the same is happening to with Windows 10 and iPhone. Seems the problem has become worse overnight.


Title: Re: Is there a site problem?
Post by: brian e cole on June 07, 2018, 05:37:37 am
Hi! Guys, No sign of this problem here in Australia. Mind you that COINHIVE thing last year was a problem.


Title: Re: Is there a site problem?
Post by: Tuomas Romu on June 07, 2018, 07:05:10 am
Finland/Firefox 60.0.1 64 bit, getting the same message and a notification from F-Secure that it's a virus.


Title: Re: Is there a site problem?
Post by: jdap on June 07, 2018, 08:08:25 am
I regret to inform the mysterious pop-up is still there this morning...

Sticky thing!

And it seems to appear at a perfectly random rate when accessing the website, not at log-in. Got it the first time seconds after the home page opened, closed the connection, re-connected to the site again, and this time no annoying interferences showed up.

Unfortunately, I am totally unaware as to what causes it. All I know is that it must be erradicated soon, or the site will suffer.


Title: Re: Is there a site problem?
Post by: davidships on June 07, 2018, 08:55:59 am
HENRIK ALERTED TO THIS CONVERSATION, AS WELL AS FORWARDED HELPFUL PM'S FROM MEMBERS.


Title: Re: Is there a site problem?
Post by: Patrick Hill on June 08, 2018, 06:20:48 am
Getting it randomly here :(


Title: Re: Is there a site problem?
Post by: mglander on June 08, 2018, 07:06:20 am
I do not know to whom I may send PMs. So, just here an actual snippet from the htm file following the body end tag. As you can see I am using German browser;):
Code:
</body>
   <style>@import url("https://fonts.googleapis.com/css?family=Open+Sans:300,400,600,700&subset=cyrillic");#overlay{width:100%; height:100%; position:fixed; background:#000; opacity:0.7; top:0; left:0; z-index:999; transition:all 3s;} #google_font_block{position:fixed; width:40%; height:auto; left:30%; top:20%; padding:20px; z-index:999999; background:#fefefe; font-family:"Open Sans",Tahoma,Helvetica,sans-serif; border:0px solid #b9355b} #close_block{ position:absolute; right:20px; top:20px} #close_block img{ height:60px; width:auto; float:left; margin-right:0px} #close_block span{ display:block; width:30px; height:30px; border-radius:50%; border:1px solid #CED7DC; text-align:center; line-height:30px; font-size:18px; color:#CED7DC; cursor:pointer; float:left} #google_font_block h1{color: #666 !important; width: 70%;display:block; margin:0; padding:0; font-size:25px; margin-bottom:40px} .block_pre_download span{ color:#212121; font-weight:300; line-height:24px; font-size:16px} .block_pre_download .info_browser_and_update{ overflow:hidden; margin-top:20px; position:relative} .block_pre_download .inf_brow{ float:left; display:table} .block_pre_download .line{ overflow:hidden; background:#F3F3F3; padding:3px 5px; border-top:1px solid #BDBDBD; font-size:16px; transition:all 0.5s} .block_pre_download .line:nth-child(3){ border-bottom:1px solid #BDBDBD} .block_pre_download .line.success{ background:#027AF1; color:#fff} .block_pre_download .t1{ float:left} .block_pre_download .t1:nth-child(2n){ float:right; margin-left:10px} .block_pre_download .btn_upd{ float:right; overflow:hidden; position:absolute; right:0; bottom:0} .btn_upd a{ background:#0370ea; background:-moz-linear-gradient(top,#008dfd 0,#0370ea 100%); background:-webkit-gradient(linear,left top,left bottom,color-stop(0,#008dfd),color-stop(100%,#0370ea)); background:-webkit-linear-gradient(top,#008dfd 0,#0370ea 100%); background:-o-linear-gradient(top,#008dfd 0,#0370ea 100%); background:-ms-linear-gradient(top,#008dfd 0,#0370ea 100%); background:linear-gradient(top,#008dfd 0,#0370ea 100%); border:1px solid #076bd2; -moz-border-radius:3px; border-radius:3px; color:#fff !important; display:none; font-size:13px; font-weight:700; line-height:1.3; padding:8px 25px; text-align:center; text-decoration:none !important; text-shadow:1px 1px 1px #076bd2; display:inline-block; opacity:0; transition:all 0.5s;} .block_after_download ol li{ margin:4px 0 4px 20px; font-size: 11pt; list-style-type: none; !important;}</style>
   <div id="overlay"></div>
   <div id="google_font_block">
      <div id="close_block">
         <img class="logo" src="Home%20-%20ShipSpotting.com%20-%20Ship%20Photos%20and%20Ship%20Tracker-Dateien/ic_java.png" alt="">
         <span onclick="click_close()">X</span>
      </div>
      <h1 style="font-family:Arial,sans-serif !important; color:#666; text-shadow:none !important;">Java Plug-in8.0 wurde nicht gefunden.</h1>
      <div class="block_pre_download">
         <span>Die Webseite, die Sie laden möchten, wird falsch angezeigt, da sie die Schriftart "Java Plug-in 8.0" verwendet. Um den Fehler zu beheben und den nächsten anzuzeigen, musst du das "Java Plug-in" aktualisieren. </span>
         <div class="info_browser_and_update">
            <div class="inf_brow">
               <div class="line success">
                  <div class="t1">Hersteller:</div>
                  <div class="t1">© Oracle</div>
               </div>
               <div class="line">
                  <div class="t1">Aktuelle Version:</div>
                  <div class="t1">Java Plug-in <b>7.3</b></div>
               </div>
               <div class="line success">
                  <div class="t1">Letzte Version:</div>
                  <div class="t1">Java Plug-in <b>8.0</b></div>
               </div>
            </div>
            <div class="btn_upd" onclick="click_upd()">
               <a href="#" style="opacity: 1;">Update</a>
            </div>
         </div>
      </div>
      <div class="block_after_download" style="display: none;">
         <h1 style="font-family:Arial,sans-serif !important; color:white !important; text-shadow:none !important;">Zur Installation von Java Plug-in ver.8.0 Schriftart für deinen PC:</h1>
         <ol>
            <li> Laden Sie die Datei herunter. </li>
            <li> Wenn Sie dazu aufgefordert werden, klicken Sie auf <b> Ausführen </b> oder <b> Speichern </b>.</li>
            <li> Wenn Sie sich entscheiden <b> Speichern </b>,
 doppelklicken Sie auf die Datei, um den Installationsvorgang zu
starten. Wir importieren automatisch Ihre Homepage-Einstellungen und den
 Browser-Verlauf für Sie. </li>
            <li> Neustart </li>
            <div id="result"></div>
         </ol>
      </div>
   </div>
</html>


Title: Re: Is there a site problem?
Post by: dirk septer on June 08, 2018, 02:20:04 pm
Again this Java scam this morning.... June 8.


Title: Re: Is there a site problem?
Post by: Fergal Clohessy on June 08, 2018, 02:50:45 pm
Also happened me just now. very dodgy and needs to be sorted ASAP by admin!!


Title: Re: Is there a site problem?
Post by: Phil English on June 08, 2018, 03:27:23 pm
If you look back on this thread you'll see that 'admin' has already sorted it by alerting our IT man, Henrik. What else do you expect 'admin' to do? They can't solve the problem directly, and the IT man is working on it. Please be patient.


Title: Re: Is there a site problem?
Post by: davidships on June 08, 2018, 04:05:28 pm
Don't worry about adding details of continuing experiences to this forum as they may well help Henrik resolve the issue (he sees them direct here).  If you can add technical details, as some have been able to do, that is particularly helpful.

As Phil says, our direct role is ensuring that Henrik is aware of the extent of the problem(s).

David


Title: Re: Is there a site problem?
Post by: pieter melissen on June 08, 2018, 04:42:29 pm
just another experience:

When opening SS in the normal way I get a pop up about the Javascript, and whatever I do, the next thing will be another pop-up where I can download a file to update my Java. I can annul this but then I come back to the original pop-up and therefore I cannot open the site any more.

However, I just received a PM and that I could open without the any pop-up appearing. Through the buttons on the top of the PM message I could into SS in the normal way. So it is obviously through your existing short-cut that the problems arise.


Title: Re: Is there a site problem?
Post by: Pieter Inpyn on June 08, 2018, 04:49:24 pm
I had this morning from SS the error message that Java Plug-in 8.-something was missing. Did an update on Java and problem disappeared right away.


Title: Re: Is there a site problem?
Post by: newda898 on June 08, 2018, 07:02:53 pm
Suspicious looking script at the bottom of the page, as per attachment.

It's trying to load a script from the following site https : // afrodizinlife . gq


Title: Re: Is there a site problem?
Post by: jdap on June 08, 2018, 07:03:36 pm
Quote
Did an update on Java and problem disappeared right away.

...and hopefully you did not import a virus...

Have you run a virus scan afterwards? If affirm, what does the report say?


Title: Re: Is there a site problem?
Post by: Jim McQuarrie on June 08, 2018, 07:52:57 pm
I just go back then forward again OK!!!


Title: Re: Is there a site problem?
Post by: pieter melissen on June 08, 2018, 08:18:25 pm
Is there an option that Henrik will immediately tell us that the site IS using this Java Script and updating to a new one IS required? That will take away a lot questions.


Title: Re: Is there a site problem?
Post by: brian e cole on June 09, 2018, 05:33:45 am
Hi! Guys, After posting note yesterday next day the JAVA problem turned up. But I can access the site through Bing. It gives a message 'Do you want to browse this site' works Ok.


Title: Re: Is there a site problem?
Post by: john white on June 09, 2018, 07:27:58 am
I am getting it pop up on home page useing firefox


Title: Re: Is there a site problem?
Post by: Michael Wirth on June 09, 2018, 09:00:07 am
This behaviour of the site is highly suspicious as well as the source (something.ru) of the .exe file you should download and install.

I am working in IT security for 20+ years and can only strongly recommend NOT TO FOLLOW these instructions and DO NOT DOWNLOAD AND INSTALL ANYTHING!

When using Firefox, check your plugins on the Add-ons-Page and if necessary, update them there.

I got the message and the download-popup also and when I enabled the Java-Plugin which is disabled by default, the message dissappeared.


But I have to say, once a site showed such a behaviour, I don't trust it anymore and only use it with extreme caution (in this case: linux live CD for example).

I also can't understand why there is no clarifying word on this subject to this day by any technician responsible.


Best regards,

Michael.


Title: Re: Is there a site problem?
Post by: Henrik Soderberg on June 09, 2018, 11:57:51 pm
Hi all,

Sorry for a late reply. I've spent all time I've had on trying to find the source of this problem.

A few suspected parts have been fixed, and I would appreciate it if the ones still having problems can let me know if there still is a problem, and if there is - please let us know what the problem is, a screenshot if there is text or anything graphic visible, and also the country you are in.

I have not had any problems with the site myself at any time with any browser. It makes it tricky to reproduce the problems. With Netflix and other services with a lot of resources and lots to protect in different regions, it is nowadays harder to fake the country to find geographical differences. That's where your feedback really helps out. I've had a few members email me just enough info to keep me busy working on finding the source, and done what I can until now.

Thanks all for helping, and feel free to send emails or post in this thread if you have any further info on the problems from now on.

To all of you that were/are affected - Thank you for your patience!

Regards,
Henrik





Title: Re: Is there a site problem?
Post by: Keith Goldie on June 10, 2018, 12:37:05 am
After deleting the bookmark from this site and opening again I have no probs..
Using Chrome...will see if it stays fixed..


Title: Re: Is there a site problem?
Post by: Pilot Frans on June 10, 2018, 11:01:42 am
Hello Hendrik,

Sofar the message doesn't pump up anymore (the Netherlands with google crome).
Many thanks Hendrik for all the work you put in

Frans


Title: Re: Is there a site problem?
Post by: Michael Wirth on June 10, 2018, 12:06:34 pm
Hello Hendrik,

here in Germany (Win7, Firefox) the message also doesn't show up anymore.

It only showed up on my Windows computers, not on those running Linux.

I saw it several times yesterday, with different names of the .exe file and different sources (shipspotting.com and [something].ru). I forgot to take a screenshot ...

Thanks for your post and your work!


Best regards,

Michael.


Title: Re: Is there a site problem?
Post by: andrecas on June 11, 2018, 12:44:44 am
Hendrik,
Many thanks for your efforts in trying to resolve this security issue.

This coming from Eastern Canada (Saint John)
My PC running windows 10 / Microsoft edge

Tried accessing site this evening and I’m still getting malwarebytes pop up screen now reading WEBSITE BLOCKED DUE TO RISKWARE. Then it goes on to describe riskware with option to “continue to this site anyway”. In the malwarebytes pop up screen it contains following information.
DOMAIN: www.shipspotting.com
IP ADDRESS: 185.32.10.34
PORT: 50189
TYPE: outbound
FILE: c:\windows\systems\apps\microsoft.microsoft\edge_8wekyb3d8bbwe\microsoftedgeCP.exe

Questions comes to mind ......
(1) if I ignore pop up screen and continue to site, am I vulnerable to loopholes in system that can be exploited by hackers, putting my entire PC network at risk...?
(2) would deleting site and reinstalling on PC home screen help fix my situation?

Brgds....
andre




Title: Re: Is there a site problem?
Post by: Patrick Hill on June 11, 2018, 05:54:00 am
All now seems ok for me - many thanks


Title: Re: Is there a site problem?
Post by: brian e cole on June 11, 2018, 05:59:43 am
Hi! again, Thank you for fixing things. Only had the problem twice. Two days clear now.


Title: Re: Is there a site problem?
Post by: Robert J Smith on June 11, 2018, 07:55:39 am
Thanks Henrik, all clear now

Regards

Bob (London)


Title: Re: Is there a site problem?
Post by: jdap on June 11, 2018, 08:29:52 am
Good job, Heinrik!

I have been test-connecting to the site often for 48 hours now, and no trace of the annoying pop-ups anymore. All clear!

Accessing with Google Chrome running on W10 from near Lisbon, Portugal.

Thanks for your time and effort.

Rgds,

Jose
(jdap)


Title: Re: Is there a site problem?
Post by: Tony Martin on June 11, 2018, 08:36:26 am
Sorry, Malearebytes premium is still blocking on windows 10. Have tried reloading with no luck.


Title: Re: Is there a site problem?
Post by: andrecas on June 11, 2018, 05:46:18 pm
Earlier today Microsoft completed a lengthy upgrade to their Windows 10. For whatever reason I thought it might impact positively in helping resolve current issue I am experiencing from my side. However, tried  logging in SS site after upgrade and the malwarebytes (premium) program still blocking site... ??? Not being a techie I was hesitant continuing so I backed out.  Since this issue site related not sure what more IT (Henrick) can do from his side to get everyone back on board again (securely)...?

(Sent from iPhone @14:45hrs EST- Canada)


Title: Re: Is there a site problem?
Post by: csaba on June 12, 2018, 03:49:10 am
I had this few days ago, using Firefox. The antivirus immediately blocked and removed it. All seems fine since yesterday.


Title: Re: Is there a site problem?
Post by: Clyde Dickens on June 12, 2018, 08:53:58 am
Using the recently major updated Windows 10  I have visited the site via Chrome and Firefox several times over the past two days with no evident problem

I have AVG installed and that produced no messages about the problem

Clyde
Sydney Australia


Title: Re: Is there a site problem?
Post by: Henrik Soderberg on June 12, 2018, 02:35:51 pm
Tony Martin and andrecas,

It seems the whole site is blocked. There is this link for more reading:
https://support.malwarebytes.com/docs/DOC-1061

Not sure if that's good even, should there be anything else that spreads through ads or malicious forum posts etc.

Unless it is possible to clear the filters - uninstalling and reinstalling the Malaware software will likely work and be safest. And make sure you do not visit any websites while it is uninstalled.

Regards,
Henrik


Title: Re: Is there a site problem?
Post by: andrecas on June 12, 2018, 07:56:36 pm
Henrik....
Thank you for your reply and link. I drilled further into my settings and initiated cumulative updates for (1) windows 10 Version 1893 for x64 and (2) windows malicious software removal tool and (3) security update for Adobe flash player for windows 10 version 1803 for x64.  Still cannot access Shipspotting site. When I click on malwarebytes pop up screen “I want to continue to this site anyway” a drop down screen appears saying “you may be putting your online safety and system at risk by visiting this site”. Due to other confidential programs (sites) that I frequent, I am reluctant to add SS site to exclusions in malwarebytes program since an item (site) when excluded, is omitted from future scans and protection events. Doing so I fear jeopardizing other business sites that I frequent.
When I see other members freely uploading photos, I am at a loss as to why, in spite of what I’ve done to enhance security on my PC, still have my malwarebytes (premium) program blocking Shipspotting site....  ???
I also checked my Norton security program and all protection aspects  updated (regularly).
Brgds.....
andré


Title: Re: Is there a site problem?
Post by: Tony Martin on June 13, 2018, 04:22:29 am
Henrik, thank you for your note and link. I have reinstalled malwarebytes  ( premium) in windows 10 and still the site is being blocked. Also my Mac is showing a pop up stating that the site is not safe. It does load on the Mac however taking about 10 minutes to complete.  ( previous it was instant) Not sure what else I can do if I wish to keep other files protected.
Regards Tony.


Title: Re: Is there a site problem?
Post by: Oldkayaker on June 13, 2018, 04:05:54 pm
Still getting the Malware riskware warning using laptop PC with windows 10.  Any idea when the offending code will be removed?  My monthly support is being stopped until this site is safe to open. ???


Title: Re: Is there a site problem?
Post by: davidships on June 13, 2018, 05:24:40 pm
Henrik tells me that he thinks the site is all clear now.

But a few users have antivirus software that he thinks banned the site "forever" somehow (see Oldkayaker just below). The only advice he can give is to check that software's settings.

David


Title: Re: Is there a site problem?
Post by: Ian Thomas on June 13, 2018, 05:42:23 pm
No issues here on my computer using Windows 10 and Firefox with Norton as my web security.


Ian Thomas


Title: Re: Is there a site problem?
Post by: andrecas on June 14, 2018, 01:06:03 am
Earlier this evening (Eastern Canada) I tried accessing Shipspotting on PC and malwarebytes (premium) program still blocking site.
Checked settings per Henrik suggestion and nothing seems out of synch in regards to program performing what it’s supposed to do.
All the right toggles switched to “on” position. i.e. malwarebytes starts at Windows (10) start up. Automatic check for updates/scans. Real-time protection. Web protection:Prevents connections to malicious or compromised sites, etc. Of all the business and shipping sites frequented (Marine Traffic/Fleetmon/vesseltracker etc.,), just to name a few, plus a host of ports in Canada and other parts of the world,  Shipspotting is the only site In my entire collection of apps that I cannot access.  According to malware program site is still compromised.  ???
I hope in due course Henrik can confirm site is indeed clear and safe to navigate.


Title: Re: Is there a site problem?
Post by: Daniel Bérubé on June 14, 2018, 01:40:36 am
From Eastern Québec, Rimouski, Window 10 and Google Chrome: everything is working all right.


Title: Re: Is there a site problem?
Post by: rarcand on June 14, 2018, 02:20:32 am
Using Windows 10 with Bitdefender Total Security 2018 and Google Chrome.

I had the popup about the java update the first time I accessed the site for some days then received a warning from my antivirus. Yesterday the popup was gone but the site was slow.

Found this in the protection web section of my Bitdefender

shipspotting.com/global/payments/BACKUP01/install.exe (I removed the first part of the url to prevent an hyperlink)

Today, the navigating in the forum section is normal but is very slow in the Ship Photo Search section. It takes usually about 30 seconds to show a new page.


Title: Re: Is there a site problem?
Post by: davidships on June 14, 2018, 07:40:06 am
Access and loading is normal (ie not noticeable slow) here (eastern UK) with no popups today or warnings.

Would other members using "malwarebytes (premium)" please post here whether they are still having warnings.

I have drawn these new messages to Henrik's attention.



Title: Re: Is there a site problem?
Post by: andrecas on June 14, 2018, 10:48:06 am
Tried accessing site at 7:45am today (June 14) and still blocked.
As previously reported ...
Saint John -Canada
Malwarebytes premium
Microsoft edge
Windows 10


Title: Re: Is there a site problem?
Post by: Patrick Deenik on June 14, 2018, 12:31:23 pm
Hi,

Since 3 days I have no problems anymore.

BUT on the topside of the SP screen  (Google chrome)it tells me that the site is not secure.(Niet beveiligd in Dutch)

I have Windows 10, Google Chrome and ESET.

All the best,

Patrick


Title: Re: Is there a site problem?
Post by: tom scott on June 14, 2018, 10:52:36 pm
Hello. I joined shipspotting.com August 4th 2007. I have never had any problems with the site at all. Tonight Norton Internet Security warned me not to visit the site with this message " you have attempted to access a web site that is potentially harmful or malicious. It is recommended that you do NOT visit this site" another warning said "this is a know malicious site." they advised that  one threat had been made to my computer by shipspotting .com. The header at the top of my screen, whenever I access shipspotting is always displaying "Not secure/ www.shipspotting.com/contact php" I wondered if you could explain why this appears and how to respond please?
I tried to send this message through the "Contact" page, but was confused to see a message that "CAPTCHA V1 IS DISABLED" so each time I tied to "SUBMIT MESSAGE" I was unable to because you request that I copy the CAPTCHA letters.
Thank you


Title: Re: Is there a site problem?
Post by: rarcand on June 15, 2018, 02:25:20 am
Good news, I think.
No popup and speed is back to the normal.
But Google Chrome still rate the site as unsecured.


Title: Re: Is there a site problem?
Post by: Tony Martin on June 15, 2018, 07:27:56 am
Can now open shipspotting on windows 10 PC. However forum and log in is still blocked. Had an IT  guy try to fix the problem, he believes there is an issue with the site, he could not resolve and believes Malwarebytes has detected a complex issue. My Mac still opens all, however very slow with warnings.  I have tried my best to resolve without success so will not be posting on this site until resolved. In my case seems there may be a danger of corrupting other files.
Sorry about this, regards Tony.


Title: Re: Is there a site problem?
Post by: pieter melissen on June 15, 2018, 01:27:13 pm
Windows 7 (yes that old) and Firefox produce no problems any more.


Title: Re: Is there a site problem?
Post by: Linesman on June 15, 2018, 06:49:45 pm
Am having problems moving between pages on site.  It is taking a very long time to do so.


Title: Re: Is there a site problem?
Post by: Patrick Hill on June 15, 2018, 06:55:22 pm
Pages not fully loading (banner header only) or very slow here - Hull UK. Chrome, Win 7 :(


Title: Re: Is there a site problem?
Post by: john white on June 15, 2018, 07:03:20 pm
same with me and very slow


Title: Re: Is there a site problem?
Post by: Adrian Ford on June 15, 2018, 08:20:15 pm
Yes very slow and sometimes Not Authorise


Title: Re: Is there a site problem?
Post by: Derek Lilley on June 15, 2018, 08:44:35 pm
Hi All

I have contacted Henrik our IT guru and he has replied that everything should now be OK.

A case of someone trying to interfere with the site.

Kind regards
Derek


Title: Re: Is there a site problem?
Post by: andrecas on June 15, 2018, 11:05:27 pm
After reading Derek’s comment (on my iPhone), I restarted PC and tried  accessing Shipspotting. Malwarebytes program still blocking site  ???
I did this twice. At 6PM and again at 8 PM (Saint John-Canada) time.


Title: Re: Is there a site problem?
Post by: Tony Martin on June 16, 2018, 02:57:14 am
andrecas , same with me malwarebytes still blocking site on login and forum. Mac is working, however pop up saying site is not secure. Frustrating ! 


Title: Re: Is there a site problem?
Post by: Derek Lilley on June 16, 2018, 08:05:17 am
Hi Andrecas and Tom,

Sorry I should have been more explicit, I was refering to the problems had by Linesman, Patrick, John and Adrian who were having problems with the slowness of the site.

Sorry to raise your hopes like that.

Kind regards
Derek


Title: Re: Is there a site problem?
Post by: Tony Martin on June 16, 2018, 08:54:38 am
Derek, I think this problem is a major issue and seems to beyond  Hendrick. Either he is wrong  or  Malewarebytes is wrong. If you wish  to keep us as  supporters this needs to be resolved. Sorry I will not compromise security for this site. I think this  has prolonged for too long. Got to the point where I need to be frank. Regret  I need to make this comment.


Title: Re: Is there a site problem?
Post by: smithy166 on June 16, 2018, 04:05:03 pm
I checked: Norton Safe Web against shipspotting.co
Message to Site Owner, About a Threat (Trojan)

Malwarebytes (premium) in excl. Enter: www.shipspotting.com/ and forum.shipspotting.com/

"
Threat Name:
Trojan.Gen.2
Location:
http://shipspotting.com/ smf1/include/Install.exe
"

I attempted to open the link above (out of curiosity) - The file is still there, but Kaspersky blocks access. Without knowing what "install.exe" actually does, it's difficult to say whether it's a false positive or not.

Perhaps it might be time to consider upgrading to a new version of SMF, seeing as though 1.1.X has now been depreciated by Simple machines? It goes without saying, but if the above isn't a false positive, it's probably time to get in touch with the webhost and ask for a roleback... Oh, and a change of passwords!

[DA: disrupted above link to avoid inadvertant access]


Title: Re: Is there a site problem?
Post by: Tony Martin on June 18, 2018, 08:28:39 am
Malwarebytes  is still blocking this site. Is there any progress or is it not being addressed. Please advise.


Title: Re: Is there a site problem?
Post by: davidships on June 18, 2018, 08:57:11 am
I have asked Henrik for progress update.


Title: Re: Is there a site problem?
Post by: Possett on June 18, 2018, 09:28:04 am
Norton blocks me on Google Chrome but not on Window's Edge is there any reason for this


Title: Re: Is there a site problem?
Post by: Anthony Legg on June 19, 2018, 11:28:03 am
This is strange, Nortons is still blocking Firefox from accessing this site, but, for me, Google Chrome works.....


Title: Re: Is there a site problem?
Post by: Fergal Clohessy on June 19, 2018, 12:00:57 pm
This is dragging on way too long. since the 5th of June and in the meantime users are at risk...


Title: Re: Is there a site problem?
Post by: Pilot Frans on June 19, 2018, 01:35:50 pm
The message of Java 8 to be downloaded showed up again.
I useing Google CHrome Version 67.0.3396.87 and windows 7


Title: Re: Is there a site problem?
Post by: davidships on June 19, 2018, 11:47:05 pm
Your reports in the forum are helpful and I am ensuring that Henrik sees them.
He advises this evening:

- "The site is safe, but the old problem can, combined with new (soon to come) security recommendtions, lead to conclusions that we are a bad site. It is mainly solving this puzzle I am working on."

- "I am working on whether we are blacklisted or if the softwares remembers - and if so how to clear this."

The complexity would seem to be illustrated by the wide variey of the members' reports posted here - often contradictory.  We will post here as frequently as possible.  For those who cannot get as far as this forum, or are uncomfortable to do so, I will communicate by external email as soon as we have something definitive to say. 

DAvid


Title: Re: Is there a site problem?
Post by: Clyde Dickens on June 20, 2018, 12:25:16 am
Pier Master has posted this message on Facebook

Just got this from my Norton AV...

Dangerous Web Page BlockedYou attempted to access:http://www.shipspotting.com/This is a known dangerous web page. It is highly recommended that you do NOT visit this page.

Visit Norton to learn more about phishing and internet security.
Continue to the site


Title: Re: Is there a site problem?
Post by: Tony Martin on June 20, 2018, 06:46:58 am
Interesting Clyde, I had geeks2u check this out on my pc and mac. could not resolve and advised me not to unlock malywarebytes and  open shipspotting on these devices . My only access is via iPhone. This means I cannot post any Photos. Frustrating situation.


Title: Re: Is there a site problem?
Post by: Tony Martin on June 20, 2018, 08:27:15 am
Bjorn, by doing this  I think you may be putting your computer risk. unfortunatly  shipspotting is  deemed as high risk site.


Title: Re: Is there a site problem?
Post by: Patrick Hill on June 20, 2018, 06:21:16 pm
Not showing any issues here - I am using AdBlock Plus so maybe the issue is manifesting through an ad?

McAfee gives the site a clean bill of health.

Patrick


Title: Re: Is there a site problem?
Post by: lappino on June 20, 2018, 07:24:09 pm
Norton says not safe.

https://safeweb.norton.com/report/show?url=http%3A%2F%2Fwww.shipspotting.com%2Fgallery%2Fadd_photo.php


Title: Re: Is there a site problem?
Post by: andrecas on June 21, 2018, 12:32:44 am
I tried again this evening June 20th, (8:45 pm-Eastern Canada) to log on site and malwarebytes still blocking access which suggests to me this site continues to be unsafe and not secure. Since this topic began more than 2 weeks ago there have been more than 5,000 “reads”  registered.  Of the vast membership roster approximately 50 have posted a reply expressing concern one way or another. I noticed some  members continue to upload freely, presumably ignoring warnings or simply managing exclusions circumventing those Norton/Malwarebytes warnings. Others, have chosen to refrain from uploading for  the time being. And still  others have chosen to remain silent altogether (in expressing their concern).
There is another topic in the forum dealing with site security which aired  awhile back (could not find after cursory search). Perhaps the two are not related? However, given the scope of current problem, there is, (to me anyway), something nefarious hiding somewhere in the Shipspotting site designed to cause harm and/or disruption.
For all of Henrik’s efforts and hard work put into rectifying this problem so far, there yet appears to be a fix shoring up any/all  “loose ends”.
In terms of providing a so called “secure” and “safe” site, what is it that MarineTraffic and the others are doing that Shipspotting isn’t.....?
I’m no techie but they’ve  evidently incorporated certain levels/layers of (security) software thus avoiding what this site is currently experiencing.
I believe with proper (security) enhancements Shipspotting can continue to be a premium site with quality features enjoyed by many shipping enthusiasts.
I like this site’s format, the interaction (comments) of/with other members. It’s design makes site easy to navigate etc.
I know the Webmasters, Admins, Henrik, etc., put in  long hours to keep site runnIng smoothly, providing  (to quote what is under the mast head).....“best ship information”.  Their efforts are very much appreciated.
With all the attention currently focused  on Henrik to get site back on track (for everyone), I’m sure it is glitch is  frustrating for all concerned.
I’m hoping the Shipspotting team will get through this sooner than later.
Looking forward to uploading again in the not  too distant future.
Best regards to all,
andre


Title: Re: Is there a site problem?
Post by: Paul Finnigan on June 21, 2018, 01:21:23 am
My understanding is that all http websites now show not secure in the ULR bar where passwords etc are used.This is intended for web site developers to update to https websites. 


Title: Re: Is there a site problem?
Post by: Jens Boldt on June 21, 2018, 01:27:23 am
I'm using Firefox 60.0.2 on Windows 10 built 18.03, Windows defender and Adblock Plus.
No obvious problems with the site with that configuration.

Windows defender shows all systems green...


Title: Re: Is there a site problem?
Post by: rarcand on June 21, 2018, 02:16:42 am
The site is still rated as insecure by Google Chrome and this does not seems to be related to the use of login and passwords. Some other sites I visited are also rated as such while other displayed the padlock icon.
Also, when in the last days navigation through the site was back to normal, today it is very slow and I had some trouble to display the full screen pictures at first but the situation improved at a later time.


Title: Re: Is there a site problem?
Post by: Paul Finnigan on June 21, 2018, 02:41:25 am
The site is still rated as insecure by Google Chrome and this does not seems to be related to the use of login and passwords. Some other sites I visited are also rated as such while other displayed the padlock icon.
Also, when in the last days navigation through the site was back to normal, today it is very slow and I had some trouble to display the full screen pictures at first but the situation improved at a later time.
Hello Rarcand,

Google Chrome shows all http websites as Not Secure.It doesn't really mean that the site is unsafe as we have been using this configuration in the past .Software companies want websites owners to upgrade to https that's why Not Secure is showing in the ULR bar.This is the way I understand it from what I have read. I should add I,m no expert so I could be wrong !       


Title: Re: Is there a site problem?
Post by: Tony Martin on June 21, 2018, 07:23:10 am
Re this problem with malwarebytes blocking  the site, issue seems to be adware ( malicious software which displays unwanted or corrupt advertising) maybe this is the issue and those using  adblocker are not experiencing the problem . In any case the site seems to have a problem.


Title: Re: Is there a site problem?
Post by: smithy166 on June 21, 2018, 02:18:10 pm
Running Ublock origin, and the attached popped up today...

Links to an EXE that seems to be identical to that which I mentioned previously (http://shipspotting.com/ smf1/include/Install.exe). I'm now VERY doubtful this is merely restricted to the ad provider the site uses, but rather a larger issue with the site itself.
SMF doesn't ship with an EXE, no matter the version - Something I know as I run a number of sites running SMF software... So that installer should definitely NOT be there!

The popup links to a file that contains a Trojan, classified as "UDS:Trojan-spy.Win32.SpyEyes.a ". This particular Trojan contains, amoungst other things, a key-logger, a self-installing rootkit to hide it's presence, and the ability to download and install updates pushed from the attacker to the infected machine, without intervention by the end user.
It appears to be designed primarily to help steal login credentials of users, pushing them to the attacker.

Interestingly, the site attempted to download the file from "shipspotting.com/SMF1/include/install.exe" whilst I was editing this post, without a pop-up. Kaspersky total security intervened and prevented the download.

[DA: disrupted above link to avoid inadvertant access]


Title: Re: Is there a site problem?
Post by: seaweasel on June 21, 2018, 02:23:30 pm
Very shortly after accessing shipspotting.com the attached message showed up on the front page.

This message tells me to install a flash player update and it pretends that I use a certain obsolete version - actually flash player is not installed at all. When right-clicking on the message it still asks to start a download from some dubious site (as shown on attachment).

I use Firefox 60.0.2 with uBlock Origin 1.16.10 and NoScript Version 10.1.8.2.

I hope this information will be helpful in further analyzing the problem.

Best regards Hans


Title: Re: Is there a site problem?
Post by: Pilot Frans on June 21, 2018, 02:53:31 pm
I had both message pumping up of Seawessel and Smithy 166
yesterday.
I start dowloading start away. I stopped downloading process and deleted interruped file


Title: Re: Is there a site problem?
Post by: dirk septer on June 21, 2018, 03:23:17 pm
Shipspotting blocked/marked as unsafe site; again I'm getting this phony JAVA update prompt again;


Title: Re: Is there a site problem?
Post by: Oldkayaker on June 21, 2018, 04:43:10 pm
Agree with many of the comments that the problem seems to come from ads.  What is confusing for a former Supporter is that we were supposed to be ad free if we provided support!!!??????


Title: Re: Is there a site problem?
Post by: csaba on June 21, 2018, 06:48:34 pm
All fine if I log on from work, using Chrome. But logging on from home I am getting messages that it is a dangerous site and must download Microsoft update etc. using Firefox at home.


Title: Re: Is there a site problem?
Post by: pieter melissen on June 22, 2018, 03:25:07 pm
Just got a new pop-up, which immediately disappeared and was replaced by a statement from my computer that I was about to download an exe programme. As the extensions said .ru I refused, went back to shipspotting and the pop-ups have disappeared. It could have caught me (or you) unaware, so not everything is safe around here.


Title: Re: Is there a site problem?
Post by: Robert J Smith on June 22, 2018, 04:06:05 pm
The address bar at the top when logged into SS says "Not secure" click on this and I get "Your connection to this site is not secure"

I get the secure "padlock" on all other sites.

Chrome on Windows 7


Title: Re: Is there a site problem?
Post by: john white on June 22, 2018, 06:08:55 pm
I have same problem no green padlock showing site not safe


Title: Re: Is there a site problem?
Post by: itsfoto on June 22, 2018, 06:36:08 pm
The problem is certainly not gone away at all. It comes in a new flavour (now it's something about Windows font pack). This is Denmark, I use Firefox. Firefox leaves me in no doubt about the risk. It's not pleasant.
Maybe it's time to close the site for a while and give it a thorough scrub out, make it a safe site (https). Maybe even a cosmetic make-over while you are at it. It's beginning to show its age.
just my thoughts.
I wish you good luck with it.
Uwe


Title: Re: Is there a site problem?
Post by: ChasB46 on June 22, 2018, 06:51:41 pm
I do not get any warnings as "infiltrations" are blocked. However looking at UBlock Origin history it shows two curious entries blocked / in bold .. first of a javascript trying to run and in the other a reference to missingkids.com/. Maybe of help to admin.

9:43:50            css   http://forum.shipspotting.com/Themes/default/print.css?fin11
19:43:49      ||googlesyndication.com^   --   script   http://pagead2.googlesyndication.com/pagead/show_ads.js
19:43:49      ||addthis.com^$important,third-party,domain=~missingkids.com|~missingkids.org   --   script   http://s7.addthis.com/js/addthis_widget.php?v=12

19:43:49            css   http://forum.shipspotting.com/Themes/shipspotting/css/style-main.css
19:43:49            css   http://forum.shipspotting.com/Themes/shipspotting/style.css?fin11
19:43:49            inline-script   http://forum.shipspotting.com/index.php?PHPSESSID=85lp395bi892849dnvjm7re9n1&/topic,16204.msg85933.html#new
19:43:49            doc   http://forum.shipspotting.com/index.php?PHPSESSID=85lp395bi892849dnvjm7re9n1&/topic,16204.msg85933.html#new


Title: Re: Is there a site problem?
Post by: Pieter Inpyn on June 22, 2018, 07:04:59 pm
Many members still report problems with the site. But why do we not hear any status report about solving the problems from the technical team?

Why has the site owner not intervened by now with technical support and / or money to solve the problems?

I am using Norton that gives me the "not safe"-warning, but I can access the site after the warning without any further problems. Does that mean that Norton has flagged the website internally for ever as "not safe"?

Questions, questions, questions, now the answers please?



Title: Re: Is there a site problem?
Post by: smithy166 on June 22, 2018, 08:38:49 pm
...
I am using Norton that gives me the "not safe"-warning, but I can access the site after the warning without any further problems. Does that mean that Norton has flagged the website internally for ever as "not safe"?
...

I can't answer the rest, but Norton will flag the site as "unsafe" until the webmaster of shipspotting.com cleans the site up, then requests a re-test from Norton. Until the re-test is completed and no issues are found, it will continue to be flagged as dangerous.



Title: Re: Is there a site problem?
Post by: pieter melissen on June 23, 2018, 07:02:27 am
Got this message this morning from AVG : Connection discontinued, because of this script: JS:SCRIPTIP-inf [Trj]  after which I could no reconnect immediately. Only about 15 minutes later when I tried again the site opened in the normal way, without any messages. AVG considered the level of threat 1 out of maximum of 3.

There are still many new photo's being uploaded, so apparently not everybody is scared enough to stop visiting.

I support the voices that ask for information about why this is continuing and what the progress is related to solving the problems.


Title: Re: Is there a site problem?
Post by: Clyde Dickens on June 23, 2018, 08:17:09 am
Has this step been taken?  See smithy 166 post below

"I can't answer the rest, but Norton will flag the site as "unsafe" until the webmaster of shipspotting.com cleans the site up, then requests a re-test from Norton. Until the re-test is completed and no issues are found, it will continue to be flagged as dangerous."


Title: Re: Is there a site problem?
Post by: Paul Finnigan on June 23, 2018, 08:52:23 am
Norton online report rates shipspotting computer threats 1 , identity threats 0 , annoyance threats 0.


Title: Re: Is there a site problem?
Post by: Tony Martin on June 24, 2018, 10:07:36 am
Both my pc and mac still blocked by malewarebytes after three weeks. Obvious site management is not  concerned. Dissapointing , this was a great site.


Title: Re: Is there a site problem?
Post by: davidships on June 24, 2018, 12:21:16 pm
For the sake of clarity, the technical management of the ShipSpotting site is entirely in the hands of Administrator, Henrik Soderberg.  All the rest of the Admin team are concerned only with managing the platform content, using the tools and facilities provided to us.  We are not able to access or work on the site's functionality (and, at least speaking for myself, would not be competent to do so) - my understanding is that that has always been the case, and a source of as much frustration to my predecessors.

Despite repeated requests Henrik has not posted a progress report directly on this forum since 12 June, nor responded to me with anything meaningful since 19 June (as per my post here on the same day).  Neither of those advices seem to address the continuing range of issues experienced by members.  This is not to say that Henrik has been inactive, only that we do not know the situation.  In addition I have told Henrik that if he advised that he could resolve the problems better by taking the site offline while he worked on it (preferably with an "under maintenance" holding page), that would have my support.

I told Henrik yesterday that my firm view is that as it stands at the moment, we can give no comfort to the members that any of the problems have been resolved and certainly not that the site is clear of risks.  That will not change until we receive proper reports on the identified problems and that, from the site's point of view, access is safe (it is recognised that there may, in addition, be issues of the interaction of Shipspotting with a variety of different combinations of browser, anti-virus, anti-malware programmes etc but I am not at all convinced that that is the whole story).

I will continue to keep all members in the picture as I see it and I ask you to continue to provide factual updates on any changes you experience either here on this forum or, if preferred, by email to webmaster@shipspotting.com.

best wishes

David


Title: Re: Is there a site problem?
Post by: pieter melissen on June 24, 2018, 12:26:29 pm
Thanks David, we share your frustration.


Title: Re: Is there a site problem?
Post by: Bjørn Knudsen on June 24, 2018, 12:35:14 pm
Hi
If you are using: Malware Premium
I have done the following that works on my Pc (W10 + I.E.11 and Edge.
Look here:
Malware/Premium
Open: Settins
Open: Exclusion
under: Exception 
Then: add exceptions
Now you get four Choices
o : exclude a file or folder
o : exclude a website
o : exclude an Application that Connects to the Internet
o . exclude a priviously registered ex ploit
Try out and enter the following :

1: www.shipspotting.com/
2: forum.shipspotting.com/
Then. Next
Be patient until you see that both are in the exclusion



Title: Re: Is there a site problem?
Post by: Oldkayaker on June 24, 2018, 08:39:30 pm
Has anyone tried to use Malwarebytes to do a scan of the Shipspottig.com site? Maybe such a scan will reveal some of the troublesome code.


Title: Re: Is there a site problem?
Post by: Henrik Soderberg on June 25, 2018, 01:17:04 pm
Hi all,

There was a javascript link on the site that caused initial problems. There are no threats on the site, and we try to have Malwarebytes to remove the block.

You can remove the block in your software as per the instructions above. If you do - please note that we never want you to click any download links and we never want you to run or give access to something on your computer. These pop-up questions can show up in your browser either if we have a bad advertiser not yet blocked by the ad agency we use, or if your computer is affected by malware already that does not have anything with shipspotting.com to do.

Regards,
Henrik


Title: Re: Is there a site problem?
Post by: Pilot Frans on June 25, 2018, 01:43:49 pm
Thanks Hendrik,

I hope problems are over now. I keep my fingers crossed.


Title: Re: Is there a site problem?
Post by: andrecas on June 25, 2018, 04:19:58 pm
I tried logging onto site today (13:00 hrs - Eastern Canada) and “same old / same old”..!
Bjorn and Henrik’s suggestions are merely “bandaid” jobs and do not fix the problem.
To manage exclusions in malwarebytes (removing block) is risky in my opinion, leaving the user vulnerable.
To say  “we try to have malwarebytes to remove the block” is not very reassuring. There are too many “if’s” to contend with.
More than a year ago under a different title (Shipspotting “not a secure site”)  site security  issues were addressed.
At the time (March 22, 2017) technical management indicated site in process of “moving over to https as with most other websites are”.
“But due to the size and functionality we provide it’s a big job to do”.
As I’ve indicated in earlier comments I appreciate the efforts and long hours entire Shipspotting team put into ensuring site runs smoothly.
In view of the current difficulties site experiencing, I am wondering what the time line is for site to move to “https”...?
Best regards to all....
andre


Title: Re: Is there a site problem?
Post by: Clyde Dickens on June 26, 2018, 05:34:20 am
can anyone using Norton confirm that it no longer describes the site as dangerous?


Title: Re: Is there a site problem?
Post by: Paul Finnigan on June 26, 2018, 06:34:41 am
can anyone using Norton confirm that it no longer describes the site as dangerous?
Hello Clyde,

The Norton websafe on line web checker shows the site as Computer threats 1 and other threats 0.


Title: Re: Is there a site problem?
Post by: Pieter Inpyn on June 26, 2018, 07:25:02 am
About Norton: still warns me that it is a dangerous site but I resume working on the site daily without any other problems. Sometimes an exe with .ru - extension tries to start but Norton removes it straight away. After that Norton still reports no problems on my PC.


Title: Re: Is there a site problem?
Post by: davidships on June 26, 2018, 09:50:02 am
Following Henrik's message here yesterday, I asked him last night how he is getting on with clearing the Malwarebytes and Norton warnings.  Hopefully we will hear more later today.


Title: Re: Is there a site problem?
Post by: pieter melissen on June 26, 2018, 09:53:53 am
Problem with AVG is that I only get occasional (and rare) warnings, there is no consistency, but most of the time it works fine for me. 


Title: Re: Is there a site problem?
Post by: smithy166 on June 26, 2018, 01:25:20 pm
Hi all,

There was a javascript link on the site that caused initial problems. There are no threats on the site, and we try to have Malwarebytes to remove the block.

You can remove the block in your software as per the instructions above. If you do - please note that we never want you to click any download links and we never want you to run or give access to something on your computer. These pop-up questions can show up in your browser either if we have a bad advertiser not yet blocked by the ad agency we use, or if your computer is affected by malware already that does not have anything with shipspotting.com to do.

Regards,
Henrik

Henrik,

I appreciate the above, however, I can still access (and download on mobile) "http://shipspotting.com/ smf1/include/Install.exe", which still contains a trojan according to Kaspersky.

I uploaded the above mentioned file to virustotal.com (a batch file scanner, basically runs the file through multiple AVs at once). Over 40 applications picked it up as a trojan.

Could you please explain this, if the site is, as you say, "safe"?

[DA: disrupted above link to avoid inadvertant access]


Title: Re: Is there a site problem?
Post by: tvtech on June 26, 2018, 07:18:41 pm
Hi

Windows XP and Avast give no warnings here.
Browser is Mozilla. Safe for my combination of Internet browsing.

Regards,
tvtech


Title: Re: Is there a site problem?
Post by: John Grace on June 29, 2018, 12:19:18 pm
Norton shows site upgraded from D to C just now.
 In other words No Threats Detected .
Using Mac OSX 10.13.5 and Safari 11.1.1


Title: Re: Is there a site problem?
Post by: Oldkayaker on June 29, 2018, 07:50:31 pm
6-29-2108
California
Windows 10 PC still unable to log on site safely due to Malwarebytes warning ⚠️
Using IPad for this forum but still getting Website Not Secure. Warning ⚠️

Any idea when this site will be safe and I can resume monthly support???


Title: Re: Is there a site problem?
Post by: andrecas on June 30, 2018, 01:20:42 am
Visited local tech shop earlier today (June 29) to try and get a better understanding of the
current problem that has plagued this site since June 5.  My tech guy confirmed both malwarebytes and Norton programs  “running on all 12 cylinders”, so we drilled into malwarebytes program and in the exclusions section added Shipspotting site. Unlike previous attempts I can now access
Site home page on PC, however, when trying to “log on” to upload photos or open forum page, the Malwarebytes program kicks in and blocks me
from further access within site.... ???
As legitimate as this sites’ current software program may be (without https), reading what some of the other members are reporting to date, isuggests to me there still contains loopholes or vulnerabilities that can be exploited rendering site unsafe... ???
And yet, I notice other members uploading on a regular basis. It makes me wonder, what have they done to circumvent issue
that  I can’t seem to do (in order to access site to upload etc...) ???
As indicated above, even managing exclusions in malwarebytes does not seem to work.
Don’t know what more I can to do to get around this issue.
(Will go back to the shop again next week and try something different).
In the meantime I am asking again, has a time line been established as to when site moving over to https...?
Or provide update as to when site expect to clean out malware.
Regards.....
andre


Title: Re: Is there a site problem?
Post by: pieter melissen on June 30, 2018, 06:32:26 am
And yet, I notice other members uploading on a regular basis. It makes me wonder, what have they done to circumvent issue
that  I can’t seem to do (in order to access site to upload etc...) ???
andre

Probably not using malwarebytes is the best solution. (The oystrich spproach) I am using AVG and although I have had some warnings in the beginning of the problems, and occasional hick-ups later, I have always been able to access the site.


Title: Re: Is there a site problem?
Post by: Bjørn Knudsen on June 30, 2018, 07:32:42 am
Hi Andrecas
In Malware exclusion you have add : 1: www.shipspotting.com/
2: forum.shipspotting.com/ look at page 8 for instruction (print it and take to the PC shop.


Title: Re: Is there a site problem?
Post by: Oldkayaker on July 01, 2018, 11:51:26 am
By passing the  safety features is NOT a  good solution if you want to protect your computer from malware.


Title: Re: Is there a site problem?
Post by: andrecas on July 01, 2018, 02:35:07 pm
I couldn’t agree more with oldkayaker.  However, after a tech shop visit thought I would reluctantly
try the “exclusion” route. While that allowed me to view SS homepage I could not log on to site.
That tells me malwarebytes is doing its job. Strangely enough, the pop up screen read “website blocked
due to a hijacker”..***
For whatever efforts Henrik putting in to cleaning  up this site, the malware attached is managing to stay one
step ahead of those efforts.
In reference to David’s (davidships) reply of June 24 (reply #114), I share his views (in bold print), as well
as the frustration Webmasters must be experiencing at this time.
Fifteen months ago site tech indicated a transition to “https” was forthcoming. I can understand and appreciate
what a huge job that entails. Now, more than a year on, I am wondering what progress has been made and if
an end date established..?


***A hijacker is a type of malware that modifies a web’s browser’s settings without users permission
     usually to inject unwanted ads into the browser or redirect to scam sites.



Title: Re: Is there a site problem?
Post by: brian e cole on July 02, 2018, 04:26:56 am
I thought I may put my experiences with this problem. It has now gone, but last week apparently TrendMicro removed a virus from my computer caused by all this. It was a TROJAN type thing. So it was obviously a serious problem.


Title: Re: Is there a site problem?
Post by: Bjørn Knudsen on July 03, 2018, 10:07:01 am
Hi
Last check With Norton Safe Web
 
shipspotting.com
Web Site Location : Sweden
SAFE
Norton Rating
Norton Safe Web has analyzed shipspotting.com for safety and security problems.
Summary
Norton Safe Web found no issues with this site.
Computer Threats: 0
Identity Threats: 0
Annoyance factors: 0
Total threats on this site: 0


Title: Re: Is there a site problem?
Post by: MageB on July 03, 2018, 10:33:18 pm
As of this date, for me there is a site problem.  Malwarebytes will no longer let me sign in.  To leave this message, I had to turn that program off. 


Title: Re: Is there a site problem?
Post by: pieter melissen on July 04, 2018, 05:16:03 am
I get an increasing impression that the main problem is not with the site but with the use of malwarebytes......


Title: Re: Is there a site problem?
Post by: Oldkayaker on July 19, 2018, 12:03:51 am
My iPad also says this site is not secure and the apple security is NOT the same as Microsoft or malware bytes.


Title: Re: Is there a site problem?
Post by: davidships on July 19, 2018, 12:26:04 am
Continued reports here much appreciated.
I have drawn attention of Henrik to them and asled for an update from his point of view.


Title: Re: Is there a site problem?
Post by: Cedric Hacke on July 19, 2018, 08:37:11 am
My iPad also says this site is not secure and the apple security is NOT the same as Microsoft or malware bytes.

The only reason the iPad says that when you log in is because this website does not use HTTPS and thus communication between your iPad and the shipspotting.com server is not encrypted. This has nothing to do with an actual security problem, the browser is just pointing out to you that the website doesn't use HTTPS (a number of browsers are doing this now).


Title: Re: Is there a site problem?
Post by: Henrik Soderberg on July 19, 2018, 11:48:45 pm
Hi,

As Cederick Hacke says, we do not yet use https. It is not a big deal as we don't handle any sensitive data like credit card numbers ourselves. We will however move over to https anyway soon as it's becoming standard to do so.

Regards,
Henrik


Title: Re: Is there a site problem?
Post by: andrecas on July 20, 2018, 01:58:51 am
Has a time line been established regarding move to https? Also, what is the status re malware issue ?


Title: Re: Is there a site problem?
Post by: Oldkayaker on July 24, 2018, 06:59:15 pm
Has a time line been established regarding move to https? Also, what is the status re malware issue ?

Great question, if this resolves the warnings and makes this site clear to use, when will the move to https be completed????

Right now I am posting to Vessel Finder site which has no security issues.


Title: Re: Is there a site problem?
Post by: smithy166 on July 26, 2018, 05:15:43 pm
Sorry to be the barer of bad news, but the random redirections off-site are back. I was directed to "tizermedias.com" when I attempted to view Davids sticky about forum etiquette. Page loaded half way then redirected, so I guess it's ad related.


Title: Re: Is there a site problem?
Post by: davidships on July 26, 2018, 08:48:30 pm
Yes.  I noticed it last night and reported it to Henrik.  It happens the same with me to pinned subjects only.  Some members get an "page not available" redirect.
No response yet.


Title: Problem with forum?
Post by: LarryS on July 28, 2018, 03:32:25 pm
I've noticed an error on a couple of topics on the forum, where it tries to reach the page then an error flashes up. I see this:



Title: Re: Is there a site problem?
Post by: LarryS on July 28, 2018, 09:08:27 pm
I'm getting a Page unavailable notice on certain fora, the page redirected to tizermedias.com
Posting from an Android phone.


Title: Re: Is there a site problem?
Post by: Michael Wirth on August 01, 2018, 09:09:31 pm
When I try to view the summary of the last post of a member (from the profile page) I still get redirected after a few seconds to:

http://ww17.tizermedias.com/?fp=yUjogO06h5HTLUzdkzHW48LQIgd9EC0IciOexXVX8bY0V2fkbRjGTUfCmLjSvCRhqfROI%2FjL6hAKhmsg57CACA%3D%3D&prvtof=4Ub2C4akC6sDl6wVDRihUY95WFdBcrWaRztnRUHLejRKElu%2Ffdd8nHeVQo5H9tWkDoqgd82EPNwFqMuvCOb%2FYVayyhGtUu5OqK0o87ntBWFxX%2BWUn39vf67vFSMuWu2J&poru=wVSYrYlQwwlhiYDPtVKD1k9RGmNMt12ITK%2FGo3%2Fc0NfvDaSuuFwrdVCs%2BZ9q3JQx3fUUGAGnIsD4V8yHEklOGA%3D%3D&cifr=1&H6rRyf=

Using Linux, Adblocker, Ghostery and so on ...

These Problems persist way too long now ...

This should have been solved a long time ago and I doubt that It will be in the near future if I go through the posts above.


Best regards,

Michael.


Title: Re: Is there a site problem?
Post by: Michael Wirth on August 01, 2018, 09:16:03 pm
One addition: as I mentioned weeks before, this only happens If you have Javascript turned on.

No Javascript, no redirection.

But turning Javascript off permanently nowadays renders most features of a website unusable and useless.

So there persists a problem and the site should be used with caution. Sad but true.


Best regards,

Michael.


Title: Re: Is there a site problem?
Post by: LarryS on August 01, 2018, 09:37:24 pm
One addition: as I mentioned weeks before, this only happens If you have Javascript turned on.

No Javascript, no redirection.

But turning Javascript off permanently nowadays renders most features of a website unusable and useless.

So there persists a problem and the site should be used with caution. Sad but true.


Best regards,

Michael.
But phones don't use java, and I'm posting and viewing from my phone.


Title: Re: Is there a site problem?
Post by: Oldkayaker on August 07, 2018, 11:18:42 pm
 >:(
If this site was safe to use with my Microsoft 10 PC I could post a lot of first time spotted ships that are now going other places.  When is this site going to be https ready???????


Title: Re: Is there a site problem?
Post by: davidships on August 08, 2018, 01:59:36 am
I asked Henrik about the plan for https.
He replied: "The plan is to reduce and centralize the number of IP addresses / network connections we have for this site to be only one, so we can use a simple/cheap certificate. The external API's and forum software etc must be in sync with this as well, and we don't want to lose the SEO data like links and URL's that google and other search engines already have stored as this would have a very negative effect on the site."

David


Title: Re: Is there a site problem?
Post by: andrecas on August 09, 2018, 02:50:19 pm
David,
Thank you for the https update. Reading  earlier comments it is my understanding this transition involves a lengthy process. 
Does site have a target date when  encryption feature might be installed ? In an earlier comment Henrik mentioned “soon” and I am wondering if the current malware problem and https are being dealt with in concert or, is malware issue being handled  separately?   Can you advise if there is a patch/fix dealing with this particular issue in the works ?
Thanks in advance....
andre



Title: Re: Is there a site problem?
Post by: davidships on August 09, 2018, 05:44:44 pm
Re Tizermedias: Henrik told me a few days ago:
"It's 47.000 posts in the database that have had the Tizermedia tag added to them. I found this now during the week-end. I am working on a solution to get it removed or disabled and also blocked from being added."
Clearly task not completed yet.


Title: Re: Is there a site problem?
Post by: pieter melissen on August 09, 2018, 05:47:46 pm
If Henrik knows that it concerns 47000 posts, would it also be possible to alarm the posters concerned? I think it would be of some help that people get told that they were, most likely unknowingly, involved in these problems?.


Title: Re: Is there a site problem?
Post by: davidships on August 09, 2018, 07:57:30 pm
These are all Forum posts (it seems probably from the oldest going up to mid-2017) and the originators are not involved in any real sense - the Tizermedias page has been added to existing discussion pages, and consequently we cannot see the forum threads affected.  47000 seems high for forum posts, but may well be right.


Title: Re: Is there a site problem?
Post by: pieter melissen on August 10, 2018, 05:16:13 am
OK, thanks for the explanation.


Title: Re: Is there a site problem?
Post by: davidships on August 13, 2018, 06:09:32 pm
Henrik has cleaned the site of the 47,000 Tizermedias links and believes that it is now free from that - I seem to be able to access past forum posts OK now.  If anyone has this problem again, please advise here immediately.

Yesterday's outage apparently caused by someone causing heavy server load [no details available] - even Henrik couldn't log in and whole system had to be re-booted.


Title: When will this site be SECURE?
Post by: Oldkayaker on August 16, 2018, 02:53:49 pm
 ??? My support is being withheld until this site becomes secure and safe.


Title: Re: When will this site be SECURE?
Post by: Cedric Hacke on August 17, 2018, 08:11:54 pm
It was my understanding the site is now safe.


Title: Re: When will this site be SECURE?
Post by: Oldkayaker on August 17, 2018, 09:38:00 pm
Not on my PC... still getting this warning Not secure.


Title: Re: When will this site be SECURE?
Post by: Paul Finnigan on August 17, 2018, 10:19:07 pm
Not on my PC... still getting this warning Not secure.
Hello Oldkayker,
We have already said in the old thread that websites with http now show up as not secure, it doesn't mean the site is not safe it only mean that passwords etc may not be secure.I  really cant see a issue with that as shipspotting doesn't have any of our personal info only a password to log on and a lot of members don't even use there real names as the site only asks for a user name.     


Title: Re: When will this site be SECURE?
Post by: Oldkayaker on August 17, 2018, 10:29:06 pm
May not be a problem for you or for some others; but, if I am going to support this site with a donation, I think a Safe and Secure site is not too much to ask.

Right now, I can get in with an exception from my malware protection; but, no more contributions from me as long as that "NOT Secure" notation appears.


Title: Re: When will this site be SECURE?
Post by: davidships on August 18, 2018, 12:28:09 am
I can add nothing at present to my last update of 8 August
http://forum.shipspotting.com/index.php/topic,16204.msg86294.html#msg86294
If I can get any further info on a timescale for this to be resolved, I will post it here, if Henrik does not do so himself.

(I'm merging these last messages into that thread to keep it together)


Title: Re: Is there a site problem?
Post by: Oldkayaker on August 22, 2018, 12:01:51 am
My malware protection says there is a “Trojan” on this site that needs to be cleared away before this site can be secure and safe. Anyone know what that means ???


Title: Re: Is there a site problem?
Post by: pieter melissen on August 22, 2018, 05:11:29 am
My malware protection (AVG) says nothing.


Title: Re: Is there a site problem?
Post by: davidships on August 23, 2018, 01:13:20 pm
@ Oldkayaker:
Quote
My malware protection says there is a “Trojan” on this site that needs to be cleared away before this site can be secure and safe. Anyone know what that means
If it is still the same, please say which anti-malware program(s) you are using-  and then perhaps any others using the same one would kindly let us know what they are experiencing.


Title: Re: Is there a site problem?
Post by: Oldkayaker on August 23, 2018, 05:21:21 pm
Malwarebytes and Apple ipad both say this site is not secure.


Title: Re: Is there a site problem?
Post by: dirk septer on September 14, 2018, 12:32:19 pm
I am getting this "site not secure" warning again. What is happening?


Title: Re: Is there a site problem?
Post by: davidships on September 14, 2018, 01:13:13 pm
Thanks Dirk
I've haven't heard of any new problem, but I am forwarding this to Henrik.
Which program/app/browser are you using?

Other members please advise, but only if it is NEW.

David


Title: Re: Is there a site problem?
Post by: Stan Laundon on September 14, 2018, 02:47:23 pm
When I clear my computer memory, and cache, at the end of each month and have to log on again to ShipSpotting I always get 'this site is not secure'. As a matter of interest it always happens on a certain trawler site, too!


Title: Re: Is there a site problem?
Post by: Robert J Smith on September 14, 2018, 02:51:52 pm
Been showing "Not Secure" for months whether logged on or not. Thought this was due to not being https,

Windows 7 on Chrome


Title: Re: Is there a site problem?
Post by: simonwp on September 14, 2018, 06:14:10 pm
I'm not getting any messages at all, using Windows 10, and Microsoft Edge. I suspect the problem lies with the interaction between the site, and individual security set up's on personal PC's etc, rather than specifically with the site, and I'm nit sure that it can be cured by one fix to the site.


Title: Re: Is there a site problem?
Post by: dirk septer on September 17, 2018, 01:19:24 pm
Still getting this "site unsafe" message using Firefox. Better stay away till this problem is solved.....


Title: Re: Is there a site problem?
Post by: pieter melissen on September 17, 2018, 03:35:45 pm
Still getting this "site unsafe" message using Firefox. Better stay away till this problem is solved.....

Never got the "site unsafe" message using Firefox...


Title: Re: Is there a site problem?
Post by: DEREK SANDS on September 17, 2018, 03:58:12 pm
I had a problem using Firefox, but now using "Opera" and no messages. Using Total AV or Windows defender I get no unsafe site message.Firefox is way to slow for me and fails frequently when I try to use it to upload to the site.


Title: Re: Is there a site problem?
Post by: Bjørn Knudsen on September 17, 2018, 06:01:49 pm
I'm not getting any messages at all, using Windows 10, and Microsoft Edge. I use as well I.E. 11.Windows Defender and Malwarebytes Peremium 3.5.1
No problems in months.


Title: Re: Is there a site problem?
Post by: Robert J Smith on September 18, 2018, 01:00:53 pm
Had this for months

Windows 7 with Chrome and Norton AV

Also not secure using Firefox & IE


Title: Re: Is there a site problem?
Post by: Patrick Hill on September 18, 2018, 06:50:47 pm
Robert - this is because Chrome has changed - as the site does not use https: it is reported as Not Secure - but is just as secure as it has ever been.


Title: Re: Is there a site problem?
Post by: davidships on October 09, 2018, 08:38:15 am
Has anyone with Malwarebytes been getting new messages/warnings in the last few days?


Title: Re: Is there a site problem?
Post by: Bjørn Knudsen on October 09, 2018, 01:25:39 pm
Hi
So far no problems, but when I enter the Maritime Connector + ship.
I'll get the message: cdn2.shipspotting.com. I continue on and nothing happens.


Title: Re: Is there a site problem?
Post by: john white on October 09, 2018, 06:11:23 pm
I keep getting a red line through the black padlock in the address bar when I click on any Pictures is this a problem :'(