octgn / OCTGN

Online Card and Tabletop Gaming Network
http://www.octgn.net
Other
357 stars 129 forks source link

Malwarebytes Popping up for Blocked Domain: q.dreniq.com #1694

Closed konals closed 6 years ago

konals commented 6 years ago

When I click refresh on the game list or download Arkham Horror LCG, Malwarebytes pops up a blocked domain alert, saying the domain is malicious. A few google searches have indicated to me that this is caused by a parked domain? Are there any expired domains that are still being referenced in the game list/downloads?

malwarebytes

brine commented 6 years ago

does this happen for other games as well?

konals commented 6 years ago

I just tried Netrunner, same thing. It popped up/occurred near the end of the download/install time.

konals commented 6 years ago

Uninstalling Netrunner also gave me the pop-up.

brine commented 6 years ago

have you done a full virus and malware scan on your PC recently?

konals commented 6 years ago

Yes, I have. Nothing wrong. Other software/sites are not giving me this issue.

konals commented 6 years ago

Okay, if I filter the list of games via the categories at the top:

image

The only case where it shows that error popup is when I select "All" or "The Spoils". The Spoils doesn't have an image, so my assumption is that it's a broken link and my system doesn't like whatever redirect is 'parking' it.

brine commented 6 years ago

yeah possibly, my malwarebytes isn't detecting anything for those games. From what I've read, there were some viruses that created redirects to that domain, but other than that there shouldn't be anything in OCTGN's installers that go outside of myget.org

konals commented 6 years ago

Okay, I found the problematic page, it is indeed the icon for Spoils.

I did the search to find the myget url.

image

image

image

image

image

Going to the URL for the icon:

image

So yeah, that's what is causing the issue. I think MalwareBytes is just blocking whatever is parking that URL. The URL doesn't seem to load for me.

konals commented 6 years ago

image

brine commented 6 years ago

ok we'll have to take a look at changing this.

BenMatteson commented 6 years ago

just wanted to pop in and say thanks for working through that, love it when people help out where they can

konals commented 6 years ago

No problem, I wanted to figure out what it was before I threw the download over to my friend, and after a bit it just became a puzzle I wanted to solve :D

brine commented 6 years ago

it looks like this has been resolved