Forum Thread

"Malwarebytes Malicious Website Blocked" constantly popping up here on SlickDeals (Chrome)

WildflowerGuru 1,126 389 September 9, 2015 at 01:53 PM
Anyone else using Malwarebytes (premium) and having constant block notifications come up? Doesn't matter what browser I'm using.

Malicious Website Blocked
Domain: i.simpli.fi
IP: 184.173.188.162 (IP changes depending on which page I'm on)
Port: 57507 (Port changes depending which page I'm on)
Type: Outbound
Process: C:\Program Files (x86)\Goo...ome\Application\chrome.exe
Manage Web Exclusions

Doesn't like the "i.simpli.fi" domain.

12 Comments

1

Sign up for a Slickdeals account to remove this ad.

#2
it's not just you. And it's the slickdeals website causing it.

SD you're giving your users malware, please make this a priority for your users sake.
Reply Helpful Comment? 0 0
#3
ok glad to see it was just not me and it is only at Slickdeals that i see it.. no where else. hmm
Reply Helpful Comment? 1 0
#4
Getting the same pop up, hope it gets fixed.
Reply Helpful Comment? 0 0
Joined Nov 2004
Whovian Deleted Me
43,949 Posts
2,877 Reputation
Global Mod
#5
I'm not tech at all so take what I say with a grain of salt but I'm guessing it's probably one of the ads in rotation that's causing it. However, like I said, that's just a guess.
Reply Helpful Comment? 0 0
Joined Jul 2003
Help Is On The Way :)
15,675 Posts
9,123 Reputation
Admin
#6
Quote from WildflowerGuru View Post :
Anyone else using Malwarebytes (premium) and having constant block notifications come up? Doesn't matter what browser I'm using.

Malicious Website Blocked
Domain: i.simpli.fi
IP: 184.173.188.162 (IP changes depending on which page I'm on)
Port: 57507 (Port changes depending which page I'm on)
Type: Outbound
Process: C:\Program Files (x86)\Goo...ome\Application\chrome.exe
Manage Web Exclusions

Doesn't like the "i.simpli.fi" domain.
Quote from WildflowerGuru View Post :
Anyone else using Malwarebytes (premium) and having constant block notifications come up? Doesn't matter what browser I'm using.

Malicious Website Blocked
Domain: i.simpli.fi
IP: 184.173.188.162 (IP changes depending on which page I'm on)
Port: 57507 (Port changes depending which page I'm on)
Type: Outbound
Process: C:\Program Files (x86)\Goo...ome\Application\chrome.exe
Manage Web Exclusions

Doesn't like the "i.simpli.fi" domain.
Quote from suchshibe View Post :
it's not just you. And it's the slickdeals website causing it.

SD you're giving your users malware, please make this a priority for your users sake.
Quote from Woolfman72 View Post :
ok glad to see it was just not me and it is only at Slickdeals that i see it.. no where else. hmm
Quote from Costmore View Post :
Getting the same pop up, hope it gets fixed.
Thanks everyone for reporting and confirming.

We will look into it and see what's happening. I suspect it may be a false positive, but we'll test it to be sure.
Reply Helpful Comment? 0 0
Joined Nov 2009
L4: Apprentice
374 Posts
239 Reputation
Pro
#7
sometimes its um.simpli.fi, most of the time i.simpli.fi
Reply Helpful Comment? 0 0
#8
It doesn't appear to be only this site.

Others on the Malwarebytes forum are also seeing the same thing on different web sites and with various browsers:

https://forums.malwarebytes.org/i...umsimplifi



UPDATE: Per the Malwarebytes thread referenced above, a fix to MBAM should be out shortly to resolve this issue.
Reply Helpful Comment? 0 0
Last edited by NYIslandersGone September 9, 2015 at 05:19 PM

Sign up for a Slickdeals account to remove this ad.

#9
I'm getting block for client.foxydeals.com from all sorts of ports and IPs.
Reply Helpful Comment? 0 0
Joined Nov 2007
L7: Teacher
2,127 Posts
3,802 Reputation
Pro
#10
Malicious Website Protection, Domain, 74.117.199.102, ad.afy11.net, 49322, Outbound. . .constantly from Slickdeals only.
Reply Helpful Comment? 0 0
Joined Jul 2003
Help Is On The Way :)
15,675 Posts
9,123 Reputation
Admin
#11
We have turned off the piece that was pulling data from simpli.fi until MBAM updates their definitions.
Quote from Boding View Post :
I'm getting block for client.foxydeals.com from all sorts of ports and IPs.
I suspect foxydeals is a malicious toolbar/extension, it's unlikely that we have that running anywhere on our site.
Quote from raven70 View Post :
Malicious Website Protection, Domain, 74.117.199.102, ad.afy11.net, 49322, Outbound. . .constantly from Slickdeals only.
Any more color on this? Any specific pages you are seeing that from?
Reply Helpful Comment? 0 0
Joined Nov 2007
L7: Teacher
2,127 Posts
3,802 Reputation
Pro
#12
Quote from redsolar View Post :
We have turned off the piece that was pulling data from simpli.fi until MBAM updates their definitions.

I suspect foxydeals is a malicious toolbar/extension, it's unlikely that we have that running anywhere on our site.

Any more color on this? Any specific pages you are seeing that from?
Keeping an eye on it, but seems to have stopped.
Reply Helpful Comment? 0 0
Joined Jul 2003
Help Is On The Way :)
15,675 Posts
9,123 Reputation
Admin
#13
Quote from raven70 View Post :
Keeping an eye on it, but seems to have stopped.
Thanks for confirming. If it resumes, please let us know!
Reply Helpful Comment? 0 0
Page 1 of 1
1
Join the Conversation
Add a Comment
 
Copyright 1999 - 2016. Slickdeals, LLC. All Rights Reserved. Copyright / Infringement Policy  •  Privacy Policy  •  Terms of Service  •  Acceptable Use Policy (Rules)  •  Interest-Based Ads
Link Copied to Clipboard