[Susurrus]

According to my google chrome browser at least..

[Durahansolo]

Originally Posted by Susurrus

According to my google chrome browser at least..

I recommend 'Go Back to Safety.

[Taskmage]

Start about halfway down this page: Looking for input on site changes

tl;dr is that it probably does not but it might. As always keep your guard up. PiNG and AKo have been contacted about it.

[Sabaron]

I'm getting the same warning--It's annoying

[Taskmage]

If you're in FireFox, under Options in the Security tab you can uncheck "Tell me if I'm visiting a suspected attack site" and it will stop bothering you here, but naturally that's probably not a setting you want to leave off full time.

[Mhurron]

Originally Posted by Taskmage

tl;dr is that it probably does not but it might.

It would explain a few things.

[Taskmage]

Originally Posted by Mhurron

It would explain a few things.

What are you thinking of specifically?

[LyonheartLakshmi]

Originally Posted by Taskmage

If you're in FireFox, under Options in the Security tab you can uncheck "Tell me if I'm visiting a suspected attack site" and it will stop bothering you here, but naturally that's probably not a setting you want to leave off full time.

You can also add sites that are an exception to this rule.

I tried posting a thread about this earlier (before this thread popped up), but couldn't with that warning that kept coming up every single page load from this domain. If I click the choice for "ignore warning", I expect the browser to remember that instead of asking me the same thing with every single change in URL while I'm browsing the site.

I may indeed leave that option turned off full time. It isn't just warning me. It's flat out blocking my ability to use a site. I have Adblock and Noscript bolted on and working for a reason. I really don't need this warning-that's-far-more-aggressive-than-just-a-warning feature.

[Telera]

Yeaaaah, kinda agitating. Though the warning report as to why it's blocked says that in the past malware has infected people twice from this site. Hosted from other places, apparently. One of the listed hosts looked Chinese to me, the other I forget offhand.

So... yah?

Edit: This is what it says

What happened when Google visited this site?

Of the 17 pages we tested on the site over the past 90 days, 7 page(s) resulted in malicious software being downloaded and installed without user consent. The last time Google visited this site was on 2009-02-21, and the last time suspicious content was found on this site was on 2009-02-20.Malicious software includes 8 trojan(s). Successful infection resulted in an average of 15 new processes on the target machine.
Malicious software is hosted on 2 domain(s), including xxxxxxxxxxxxx/, xxxxxxxxxxxxxx/.
This site was hosted on 1 network(s) including AS26347 (DREAMHOST).

[Taskmage]

This is what google says about us:

Safe Browsing
Diagnostic page for ffxionline.com

What is the current listing status for ffxionline.com?

Site is listed as suspicious - visiting this web site may harm your computer.

Part of this site was listed for suspicious activity 2 time(s) over the past 90 days.

What happened when Google visited this site?

Of the 17 pages we tested on the site over the past 90 days, 7 page(s) resulted in malicious software being downloaded and installed without user consent. The last time Google visited this site was on 2009-02-21, and the last time suspicious content was found on this site was on 2009-02-20.

Malicious software includes 8 trojan(s). Successful infection resulted in an average of 15 new processes on the target machine.

Malicious software is hosted on 2 domain(s), including xxxxxxxxxxxxx/, xxxxxxxxxxxxxx/.

This site was hosted on 1 network(s) including AS26347 (DREAMHOST).

Has this site acted as an intermediary resulting in further distribution of malware?

Over the past 90 days, ffxionline.com did not appear to function as an intermediary for the infection of any sites.

Has this site hosted malware?

No, this site has not hosted malicious software over the past 90 days.

How did this happen?

In some cases, third parties can add malicious code to legitimate sites, which would cause us to show the warning message.

FFXIAH was listed as clean, so it's not that script: Google Safe Browsing diagnostic page for www.ffxiah.com

Again, I haven't been able to replicate the occurrence of any unexpected scripts, so it's probably safe but exercise caution as always. I've sent an email to PiNG and AKo so hopefully they'll be along with a more thorough investigation and get Google to re-review the site before long.

[Mhurron]

Originally Posted by Taskmage

What are you thinking of specifically?

First, that damn warcraft icon that's popped up over the past few days.

However, more specifically, think back a few weeks to when there was that little spam for whatever that online money was. There were two or three threads about it under new posts, all starting with 'someone' asking about the 360 version of FFXI. All three initial posts in the threads were dated 2007. Two of the threads had responses by the time I saw them and those posts were dated correctly in 2009 to be new posts, but there was a thread with just the initial post that was dated 2007 even though it was on the latest 7 posts.

It looked like the first posts had been planted with an old date to look legitimate while still being a place to post the actual followup spam.

It could be nothing, but it just looked very odd to me.

[ShepardG]

I just ignored it, I hear that works. If you ignore someone who is attempting to mug you at gun/knife point, it's impossible to get shot/stabbed. That's fact.

[Neomage]

So it's safe to say whatever malware that was on here(apparently trojans) is gone now?

[Mhurron]

Originally Posted by Neomage

So it's safe to say whatever malware that was on here(apparently trojans) is gone now?

Technically, since so far nothing has really been confirmed or denied, the fact that it may or may not be gone can also neither be confirmed or denied.

[Taskmage]

Originally Posted by Mhurron

However, more specifically, think back a few weeks to when there was that little spam for whatever that online money was. There were two or three threads about it under new posts, all starting with 'someone' asking about the 360 version of FFXI. All three initial posts in the threads were dated 2007. Two of the threads had responses by the time I saw them and those posts were dated correctly in 2009 to be new posts, but there was a thread with just the initial post that was dated 2007 even though it was on the latest 7 posts.

It looked like the first posts had been planted with an old date to look legitimate while still being a place to post the actual followup spam.

Wow, good eye. What warcraft icon though?