Deceptive site

[DJR210]

wb bs

[TheGreatYacht]

My bad

[FaM0us Skins]

It's back wow

[jmard5]

It is back.

[jARS mEsH sEt]

It makes browsing this website unbearable.

[Biernutz]

Kaspersky still with the red screen of death.

[dbestpro]

They need to dump all the posts going back to about a month prior to this happening. Also, the problem lies in the link to the Spurs forum, as when you select it directly from google search, it takes you to another site.

[AaronY]

They need to dump all the posts going back to about a month prior to this happening. Also, the problem lies in the link to the Spurs forum, as when you select it directly from google search, it takes you to another site.

That's called a "sneaky redirect"

https://support.google.com/webmasters/answer/2721217?hl=en

https://support.google.com/webmasters/answer/2604723?hl=en

[Ron Swanson]

Shit's all fucked up again.

[TheDoctor]

Shit's all fucked up again.

[spurs10]

Shit's all fucked up again. Yeah I can't access on my laptop now...iPad is okay.

[spurraider21]

its back

[sasaint]

FWIW, I have never had a problem on my iPad, but I did on my MacBook.

[Budkin]

http://i.imgur.com/voQny.jpg

[K...]

just use a shitty minimal browser. Only the top tier browsers are doing this. Most of the minimal ones aren't going to implement this redirect ban. And hackers can';t phish a browser where no passwords, history, etc are stored.

[Arcadian]

just use a shitty minimal browser

Which would you recommend?

[boutons_deux]

certs can be very expensive

[Brazil]

:lmao tbh

[K...]

Which would you recommend?

on my amazon device, the default browser silk, and on win 10 Chromium. http://www.chromium.org/getting-involved/download-chromium

[Ron Swanson]

just use a shitty minimal browser. Only the top tier browsers are doing this. Most of the minimal ones aren't going to implement this redirect ban. And hackers can';t phish a browser where no passwords, history, etc are stored.

Downloading Netscape Navigator

[spurraider21]

cant believe RC stood pat at the trade deadline instead of acquiring a new IT guy for spurstalk

[SAGirl]

well I think a Jimmer thread was deleted but deceptive site will live on.
:lmao

[Spurs9]

well I think a Jimmer thread was deleted but deceptive site will live on.
:lmao

:lmao :lmao :lmao you beat me to it, was just about to post it. Glad mods are worrying about the important things tbh :lol
:cry they killed my thread :cry

[TDomination]

anyone getting this warning again?

[Spurs9]

anyone getting this warning again?

It was never fixed. I just changed the settings in safari to just ignore it, so it comes up as normal. But in other browsers I don't have it set it still comes up. Mods are busy scoping out any Jimmer threads that pop up.

[HarlemHeat37]

^^I didn't touch firewall, browser or any monitoring system settings on my phone, yet I stopped getting the warning for a few days..it returned a day or 2 ago, though..

[DAF86]

I don't understand everybody's problem with this, I just press "go to the deceptive site anyway" (or something along those lines) and that's it. Am I exposing the PC to some nasty viruses or something? If not, I don't understand why is everybody so worked up over this, tbh.

[Play Boban]

I don't understand everybody's problem with this, I just press "go to the deceptive site anyway" (or something along those lines) and that's it. Am I exposing the PC to some nasty viruses or something? If not, I don't understand why is everybody so worked up over this, tbh.
Because, we are not going to get any new blood on this site with these kinds of dumb issues (which are still ongoing, my browser says it is still unsafe). No new posters are ever going to come when it looks like the site is going to give you a virus.

Then again, this place has a more restrictive immigration process than Trump could ever imagine. The site's registration was closed for years because the owners were too lazy to approve new accounts, so this site is basically just a stal rehashing of the last 10 years, anyways, with the only "new blood" being a bunch of retreat troll alt accounts, tbh. And after a faint glimmer of hope after "It Still Hurts"VP sold the site and accounts started to be approved again, we now have a site that is flagged as an illicit site, so no one will come here. This site will slowly die.

[Brazil]

I don't understand everybody's problem with this, I just press "go to the deceptive site anyway" (or something along those lines) and that's it. Am I exposing the PC to some nasty viruses or something? If not, I don't understand why is everybody so worked up over this, tbh.

In my case the fact site is deceptive prevents me from accessing it at work.firewalls won't letme in no matter what I do

[Robz4000]

This is all clearly timvp's fault. It must still hurt I guess.

[benefactor]

Today's Spurstalk :lmao

[Spurs9]

Todays Spurstalk :lmao:cry

[wildbill2u]

I have a browser--Maxthon--that is damn good in the way it lets you customize virtually everything and it doesn't give me a deceptive site reading. Firefox, Chrome and Edge do and some don't even have a override link. So you might want to check out Maxthon. It has been around since the Netscape days and I have been using it since then.

[dabom]

I have a browser--Maxthon--that is damn good in the way it lets you customize virtually everything and it doesn't give me a deceptive site reading. Firefox, Chrome and Edge do and some don't even have a override link. So you might want to check out Maxthon. It has been around since the Netscape days and I have been using it since then.

Chrome does allow to skip the message.

[Spurs9]

I have a browser--Maxthon--that is damn good in the way it lets you customize virtually everything and it doesn't give me a deceptive site reading. Firefox, Chrome and Edge do and some don't even have a override link. So you might want to check out Maxthon. It has been around since the Netscape days and I have been using it since then.
Problem is most tablet browsers don't let you override, I can't even look at the site on mine.

[Spur|n|Austin]

http://i.imgur.com/voQny.jpg

:lol

http://images.rapgenius.com/d196f50f7640a226a8272ec4e544465f.400x214x96.gif

[spurraider21]

seriously, wtf already... been about a month and a half

[dabom]

I'm not getting it on explorer.

[spurraider21]

I'm not getting it on explorer.wtf is that

[dabom]

wtf is that

Internet Explorer. IE. Comes with every computer.

[spurraider21]

Internet Explorer. IE. Comes with every computer.you missed the joke

[will_spurs]

I get the warning on Chrome but I just click on the link anyway. The privacy extensions take care of the rest (AdBlock, uBlock and Ghostery).

[Brazil]

you missed the joke

I think you the one who missed the joke :lol

[vander]

on desktop it's fine, but on firefox mobile I get the warning after each page, the pages load as basically text only, and I have to add "&page=2" to get to page 2. not that I care, I mean, it's just some website. I don't care



I don't even fucking care, seriously

[Trainwreck2100]

on desktop it's fine, but on firefox mobile I get the warning after each page, the pages load as basically text only, and I have to add "&page=2" to get to page 2. not that I care, I mean, it's just some website. I don't care



I don't even fucking care, seriously

The internet browser that comes with your phone might work

[dabom]

I think you the one who missed the joke :lol

:lol

[lefty]

Is Parker running this website?

[benefactor]

smh

[RsxPiimp]

doesnt bother me at all, do people really give/provide CC accts in this site? :lol

[TheDoctor]

doesnt bother me at all, do people really give/provide CC accts in this site? :lol
No, but I cant browse the site from work anymore because of security.

[SupremeGuy]

No, but I cant browse the site from work anymore because of security.Use a proxy?

[024]

Still getting this message on the computer. Barely come to this site anymore.

[Budkin]

No one is running this shit show anymore.

[spurraider21]

so, is this just something we're going to have to deal with in perpetuity?

[TampaDude]

Good thing I have a smartphone, or I'd never be on here again.

[BSfromTX]

I'm getting it on my phone now. Real PIA. It's kept me from checking in as often

[spursistan]

Bump..

Fixed?

[Kori Ellis]

It's probably due to something someone has in their signature. I think it was fixed once a while back, but returned quickly.

[Budkin]

It's probably due to something someone has in their signature. I think it was fixed once a while back, but returned quickly.

Kori Ellis sighting! I miss you guys!

[boutons_deux]

to repeat, at least Chrome will mark a site "dangerous" for using cleartext HTTP rather than encrypted HTTPS

[NASpurs]

It's probably due to something someone has in their signature. I think it was fixed once a while back, but returned quickly.

Must be the unnamed poster with the Kyle Anderson gifs in their sig. A player that bad shouldn't have gifs.

[spursistan]

lol..now it's back..

[jimbo]

to repeat, at least Chrome will mark a site "dangerous" for using cleartext HTTP rather than encrypted HTTPS


The URL http://www.spurstalk.com/forums/ is flagged SOCIAL_ENGINEERING by Google.

NOTE: This URL is currently flagged by Google under the category Social Engineering (Phishing and Deceptive Sites) REF: Google Security. (https://support.google.com/webmasters/answer/6350487?hl=en) At this point Google has not provided a lot of guidance/information on how to determine whether the site is flagged for "traditional Phishing" OR as a Deceptive Site OR a HTTP URL that is collecting passwords. Cleaning up the site and getting the warning removed is very diffrent depending on why Google is flagging the site so, recommend you take a look at the ref Remove a phishing or web forgery warning linked below.


so it could be a bunch of things

[SpurOutofTownFan]

Kori Ellis sighting! I miss you guys!

When Kori was here every day this shit wouldn't happen

[313]

Don't get the warning on mobile, only on desktop. Shouldn't there be a way to whitelist a website on chrome?

[313]

In Chrome Privacy settings I turned off "Protect you and your device from dangerous sites" and now I don't get the warning anymore. It's a useless feature that I've never found actually protected me from a dangerous site, it was always just blocking me from sites I wanted to visit anyway.

Whether you choose to disable it or not, I'd recommend ublock for stopping dangerous scripts and pop ups.

[spurraider21]

In Chrome Privacy settings I turned off "Protect you and your device from dangerous sites" and now I don't get the warning anymore. It's a useless feature that I've never found actually protected me from a dangerous site, it was always just blocking me from sites I wanted to visit anyway.

Whether you choose to disable it or not, I'd recommend ublock for stopping dangerous scripts and pop ups.thanks, this worked. finally

[PopTheGOAT]

In Chrome Privacy settings I turned off "Protect you and your device from dangerous sites" and now I don't get the warning anymore. It's a useless feature that I've never found actually protected me from a dangerous site, it was always just blocking me from sites I wanted to visit anyway.

Whether you choose to disable it or not, I'd recommend ublock for stopping dangerous scripts and pop ups.
I use chrome 99% of the time, so I turned off the warning on safari (on Mac). Safari browser now strictly for ST lol

[mscott]

to repeat, at least Chrome will mark a site "dangerous" for using cleartext HTTP rather than encrypted HTTPS

To be clear, the problem in this case, is that this site has form data that is not secured with HTTPS. Inside chrome, if you use the developer tools, you can see that it hits a non https URL when it transmits your username and password.

This makes it trivial for someone to steal your password.

Google has an initiative to shame (https://motherboard.vice.com/en_us/article/google-chrome-shaming-http-unencrypted-websites-january)sites that don't use HTTPs. They will expand to all insecure sites, it sounds like, but have only started with those that allow you to enter a password insecurely.

Ultimately, the only long term solution is to purchase an SSL certificate, and configure the site to redirect users to use https://www.spurstalk.com. For the interim, you can probably get away with just encrypting the login, but then you'll run into it again with phase 2. Making the whole site encrypted is easier, generally, anyhow.

I suggest especially for this site, you use a different password than any other, given how easy it would be for an attacker to steal your login data.

[Reck]

Anyone getting the dreaded red sign again? It's back for me.

[dabom]

Anyone getting the dreaded red sign again? It's back for me.

It's been on forever. Never gone.

[Reck]

It's been on forever. Never gone.

Really? It went away for me a couple of months ago.

It popped up today again out of nowhere.

[dabom]

Really? It went away for me a couple of months ago.

It popped up today again out of nowhere.

and we can we get rid of the 30 second downtime before posts. :lol

[K...]

In the past couple weeks it actually stopped generating the warning on fire fox. I think it has more to do with browser updates than site changes

[eric365]

It’s crazy how long this shit is going on without a fix

[wildbill2u]

If whoever owns the site can't fix it or can't afford to fix it, you'd think common courtesy would dictate a message to explain the problem and why it doesn't matter. I have to have a little dialogue with my browsers before I can get here every day.

[boutons_deux]

it's the cost of the certificate(s) that would allow spurstalk to run encrypted HTTPS, rather than plaintext HTTP now.

whois spurstalk.com
Domain Name: SPURSTALK.COM
Registry Domain ID: 124149924_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.enom.com
Registrar URL: http://www.enom.com
Updated Date: 2017-06-01T03:42:33Z
Creation Date: 2004-07-06T06:01:33Z
Registry Expiry Date: 2018-07-06T06:01:33Z
Registrar: eNom, Inc.
Registrar IANA ID: 48
Registrar Abuse Contact Email:
Registrar Abuse Contact Phone:
Domain Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited
Name Server: NS1.SPURSTALK.COM
Name Server: NS2.SPURSTALK.COM
Name Server: NS3.SPURSTALK.COM
DNSSEC: unsigned
URL of the ICANN Whois Inaccuracy Complaint Form: https://www.icann.org/wicf/

the domain used to owned by Larry Ellis, but that info is now hidden.

Only the owner of the domain can purchase certificates for the domain.

[ElNono]

It's not a certificate problem, and adding a certificate won't fix that. Probably someboby's sig pointing to the wrong site, or some SQL injection.

[spurraider21]

It's not a certificate problem, and adding a certificate won't fix that. Probably someboby's sig pointing to the wrong site, or some SQL injection.
its the government censoring cosmored tbh

[NASpurs]

It's not a certificate problem, and adding a certificate won't fix that. Probably someboby's sig pointing to the wrong site, or some SQL injection.

How reliable is this?

https://sitecheck.sucuri.net/results/www.spurstalk.com/forums/index.php

[ElNono]

How reliable is this?

https://sitecheck.sucuri.net/results/www.spurstalk.com/forums/index.php

Apparently it's a known exploit on vBSEO:

https://www.vbulletin.com/forum/forum/vbulletin-4/vbulletin-4-questions-problems-and-troubleshooting/3962263-misc-php-question

There's a link there that recommends updating to the latest version.
Slomo Kori Ellis

[NASpurs]

I got two hits with this one

https://quttera.com/detailed_report/www.spurstalk.com



/index.html

Severity:
Potentially Suspicious


Reason:
Detected potentially suspicious content.


Details:
Suspicious unconditional redirection


Threat dump:
View code (https://quttera.com/detailed_report/www.spurstalk.com#myModalPotSusp03327303171F2894A5 DB4164A1D1BB2F)


Threat dump MD5:
6CEE5CFB3AC9F0089B1FC8DC8F6D6E63


File size[byte]:
52


File type:
ASCII


Page/File MD5:
03327303171F2894A5DB4164A1D1BB2F


Scan duration[sec]:
0.02




/#top

Severity:
Potentially Suspicious


Reason:
Detected potentially suspicious content.


Details:
Suspicious unconditional redirection


Threat dump:
View code (https://quttera.com/detailed_report/www.spurstalk.com#myModalPotSusp03327303171F2894A5 DB4164A1D1BB2F)


Threat dump MD5:
6CEE5CFB3AC9F0089B1FC8DC8F6D6E63


File size[byte]:
52


File type:
ASCII


Page/File MD5:
03327303171F2894A5DB4164A1D1BB2F


Scan duration[sec]:
0.009

[NASpurs]

Apparently it's a known exploit on vBSEO:

https://www.vbulletin.com/forum/forum/vbulletin-4/vbulletin-4-questions-problems-and-troubleshooting/3962263-misc-php-question

There's a link there that recommends updating to the latest version.
Slomo (http://www.spurstalk.com/forums/member.php?u=121) Kori Ellis (http://www.spurstalk.com/forums/member.php?u=6)

So that's what that is! I've gotten that redirect to that site (myfilestore.com) on my cell phone but not on my laptop for some reason.

Quote from Nono's link:


Over the last week users searching on Google and clinking on links at Google to my site have been getting redirected to MyFileStore.COM

And that's exactly how I got that redirect, by searching Spurstalk on Google and getting redirected to that particular site when I click on the result.

[spurraider21]

Apparently it's a known exploit on vBSEO:

https://www.vbulletin.com/forum/forum/vbulletin-4/vbulletin-4-questions-problems-and-troubleshooting/3962263-misc-php-question

There's a link there that recommends updating to the latest version.
Slomo (http://www.spurstalk.com/forums/member.php?u=121) Kori Ellis (http://www.spurstalk.com/forums/member.php?u=6)




/index.html

Severity:
Potentially Suspicious


Reason:
Detected potentially suspicious content.


Details:
Suspicious unconditional redirection


Threat dump:
View code (https://quttera.com/detailed_report/www.spurstalk.com#myModalPotSusp03327303171F2894A5 DB4164A1D1BB2F)


Threat dump MD5:
6CEE5CFB3AC9F0089B1FC8DC8F6D6E63


File size[byte]:
52


File type:
ASCII


Page/File MD5:
03327303171F2894A5DB4164A1D1BB2F


Scan duration[sec]:
0.02




/#top

Severity:
Potentially Suspicious


Reason:
Detected potentially suspicious content.


Details:
Suspicious unconditional redirection


Threat dump:
View code (https://quttera.com/detailed_report/www.spurstalk.com#myModalPotSusp03327303171F2894A5 DB4164A1D1BB2F)


Threat dump MD5:
6CEE5CFB3AC9F0089B1FC8DC8F6D6E63


File size[byte]:
52


File type:
ASCII


Page/File MD5:
03327303171F2894A5DB4164A1D1BB2F


Scan duration[sec]:
0.009






https://78.media.tumblr.com/b17edbc39cdce6d1e99e628cf7e3266e/tumblr_o8cz5qvRIP1qattp2o1_500.gif

http://s3.crackedcdn.com/phpimages/article/8/4/6/507846.gif?v=1

[NASpurs]

Hopefully our Slovenian overlords learn how to wipe their own asses again. :tu

[IronMexican]

Why did timvp and Kori let this place die? Why do they not give a shit anymore

[benefactor]

Why did timvp and Kori let this place die? Why do they not give a shit anymore
They are still paying the bills tbh. When you start seeing ads is when you know it's dead

[IronMexican]

Tbh I get that. But they just stopped moderating the site.

Every thread is about the cancer now.

[Robz4000]

Tbh I get that. But they just stopped moderating the site.

Every thread is about the cancer now.

Every post on every site is about the cancer infecting it tbh. Hell, so is the real world these days. Just par for the course.

[SpursforSix]

It's not a certificate problem, and adding a certificate won't fix that. Probably someboby's sig pointing to the wrong site, or some SQL injection.

Bend over, I'll show you a fucking SQL injection.

[tholdren]

This site, like the nba, should be banned

[eric365]

Apparently it's a known exploit on vBSEO:

https://www.vbulletin.com/forum/forum/vbulletin-4/vbulletin-4-questions-problems-and-troubleshooting/3962263-misc-php-question

There's a link there that recommends updating to the latest version.
Slomo Kori Ellis

They don’t even need to update to the latest version, it seems doing that is enough:
- Admin CP >> Settings >> Options >> Server Settings and Optimization Options
- Scroll down to Use Remote YUI
- Set this to Google

That’s like 5 minutes of work

[dabom]

They don’t even need to update to the latest version, it seems doing that is enough:
- Admin CP >> Settings >> Options >> Server Settings and Optimization Options
- Scroll down to Use Remote YUI
- Set this to Google

That’s like 5 minutes of work
Slomo Kori Ellis timvp rjv

[007nites]

Why did timvp and Kori let this place die? Why do they not give a shit anymore

They sold the site it's no longer their responsibility.

[boutons_deux]

Tipping the Scales on HTTPS: 2017 in Review

as 2017 comes to a close, an average of 66% of page loads on Firefox and are encrypted (https://twitter.com/letsencrypt/status/938091855941550080), and

Chrome shows even higher numbers (https://transparencyreport.google.com/https/overview).

https://www.eff.org/deeplinks/2017/12/tipping-scales-https

spurstalk is in the minority of web sites that don't run HTTPS

[K...]

I find most browsers have stopped the warning in 2017. I don't know if they whitelisted it, or just got more savvy about what sites are dangerous

[cutewizard]

Its annoying tbh

[Brazil]

I'm not sure if they have done something but at least this morning I did not had to go through back and forth with my browser for him to let open a page

[Spurtacular]

I keep people coming back, tbh.

https://s.faketrumptweet.com/jbys87x3_wruejt_l9xu95.png

[Spurtacular]

If whoever owns the site can't fix it or can't afford to fix it, you'd think common courtesy would dictate a message to explain the problem and why it doesn't matter. I have to have a little dialogue with my browsers before I can get here every day.

I'm guessing you don't use the sleep function? I think it asks if you reset the browser and/or computer.

[illusioNtEk]

Just started a spurs site.... I promise never to put ads, and it will always be updated and secured.

[spurraider21]

theres always spurstalk.net courtesy of splits

[illusioNtEk]

theres always spurstalk.net courtesy of splits

That link dont work :(

[024]

Yeah I pretty much stopped accessing this site on my laptop and only browse it on mobile if I'm REALLY bored. Used to browse this site a lot but the owners let this site die so no point in coming back much.

[eric365]

They don’t even need to update to the latest version, it seems doing that is enough:
- Admin CP >> Settings >> Options >> Server Settings and Optimization Options
- Scroll down to Use Remote YUI
- Set this to Google

That’s like 5 minutes of work

Any admin still here to try that?
I still have the warning using Chrome

[cd98]

Is there a reason my keyboard doesn't type well with Spurstalk. Most of the time it skips letters or I have to press the key three times. It only happens on this site. It works fine from my phone, but not from my laptop.

[Dex]

Is there a reason my keyboard doesn't type well with Spurstalk. Most of the time it skips letters or I have to press the key three times. It only happens on this site. It works fine from my phone, but not from my laptop.

It's probably the virus.

[Spur|n|Austin]

Is there a reason my keyboard doesn't type well with Spurstalk. Most of the time it skips letters or I have to press the key three times. It only happens on this site. It works fine from my phone, but not from my laptop.

Right when the deceptive site thing happened and for a few weeks after my spacebar would not work if doing a "quick reply", I would have to "go advanced". Pretty odd...

[spurraider21]

Right when the deceptive site thing happened and for a few weeks after my spacebar would not work if doing a "quick reply", I would have to "go advanced". Pretty odd...
yeah i had issues typing from time to time as well

[lefty20]

The site is finally banned at my work PCs :depressed

[daledondale]

Still having the annoying warning.

[benefactor]

Warning stopped for me tbh

[Fireball]

yep ... it stopped

[Canyonero]

Yes, now Spurs are ready for the :lobt2:

[SAGirl]

:lobt2:

[Slippy]

My internet security has stopped allowing me to open this site when using chrome on mobile. Something is still not right

[Play Boban]

:cry

[lefty]

:bobo

[boutons_deux]

Something is still not right

the site owners still have not installed a certificate to run the secure protocol HTTPS, rather than cleartext HTTP.