Forum Thread

Redirect on email URL goes into loop

labboypro 2,403 1,686 March 28, 2016 at 02:01 PM
Clicked URL on email subscription notice. Loaded page, then loaded "g00" to URL, then looped again, then gave me this--

Code:
Invalid URL: Potential fishing attack Referrer: http://slickdeals.net/g00//f/659093-staples-no-offers-to-buy-sell-paypal-coupons?v=1&p=83206294 - Input: /g00//g00//f/659093-staples-no-offers-to-buy-sell-paypal-coupons?v=1&p=83206294 - Target: http://slickdeals.net/f/659093-staples-no-offers-to-buy-sell-paypal-coupons?v=1&p=83206294
Original URL is embedded, but the "g00" directories appear bogus.

See also attached screenshot of another attempt to simply load slickdeals.net. I have no indication that anything on my system has been "malware'd" and no other websites I've tried are affected in any way (ebay, usps, ups, dell, and other "big" sites I tested).

I am posting this via an incognito session of the same browser on the same machine. Some kind of cookie fubar (???)

10 Comments

1

Sign up for a Slickdeals account to remove this ad.

#2
I am getting this on Chrome when I try to hit the home page now. I am on the site via EDGE browser (sorry, not IE) now without problems.

When I put in www.slickdeals.net in my browser, the URL redirects what appears to be twice to address "http://slickdeals.net/g00//g00//", and I get this error message: "Invalid URL: Potential fishing attack Referrer: http://slickdeals.net/g00// - Input: /g00//g00// - Target: http://slickdeals.net/"

One more note, if I crop the URL to just this: "http://slickdeals.net/g00/"

I get this:

Code:
TypeError: String.prototype.indexOf called on null or undefined
   at indexOf (native)
   at UriCrypto.Decode (/opt/ins-morpheus/morpheus-v1.0.0.20160324T2256/morpheus/build/server/morpheus/lib/UriCrypto.js:164:69)
   at UriCrypto.DecryptUri (/opt/ins-morpheus/morpheus-v1.0.0.20160324T2256/morpheus/build/server/morpheus/lib/UriCrypto.js:237:21)
   at GetTargetUrl (/opt/ins-morpheus/morpheus-v1.0.0.20160324T2256/morpheus/build/server/morpheus/server/EncryptedUri.js:268:34)
   at EncryptedUriHandler (/opt/ins-morpheus/morpheus-v1.0.0.20160324T2256/morpheus/build/server/morpheus/server/EncryptedUri.js:295:18)
   at Route (/opt/ins-morpheus/morpheus-v1.0.0.20160324T2256/morpheus/build/server/morpheus/server/App.js:131:5)
   at call (/opt/ins-morpheus/morpheus-v1.0.0.20160324T2256/morpheus/node_modules/connect/index.js:239:7)
   at next (/opt/ins-morpheus/morpheus-v1.0.0.20160324T2256/morpheus/node_modules/connect/index.js:183:5)
   at compression (/opt/ins-morpheus/morpheus-v1.0.0.20160324T2256/morpheus/node_modules/compression/index.js:218:5)
   at call (/opt/ins-morpheus/morpheus-v1.0.0.20160324T2256/morpheus/node_modules/connect/index.js:239:7)
Reply Helpful Comment? 0 0
Last edited by MacK March 28, 2016 at 02:10 PM
#3
Same issue with Chrome, not on Edge. An incognito Chrome session does not reproduce it either.

Edit: Haha, simul-edit with poster above when adding stack track. Leaving it.

Got this stack trace when going to just http://slickdeals.net/g00/
Code:
TypeError: String.prototype.indexOf called on null or undefined
   at indexOf (native)
   at UriCrypto.Decode (/opt/ins-morpheus/morpheus-v1.0.0.20160324T2256/morpheus/build/server/morpheus/lib/UriCrypto.js:164:69)
   at UriCrypto.DecryptUri (/opt/ins-morpheus/morpheus-v1.0.0.20160324T2256/morpheus/build/server/morpheus/lib/UriCrypto.js:237:21)
   at GetTargetUrl (/opt/ins-morpheus/morpheus-v1.0.0.20160324T2256/morpheus/build/server/morpheus/server/EncryptedUri.js:268:34)
   at EncryptedUriHandler (/opt/ins-morpheus/morpheus-v1.0.0.20160324T2256/morpheus/build/server/morpheus/server/EncryptedUri.js:295:18)
   at Route (/opt/ins-morpheus/morpheus-v1.0.0.20160324T2256/morpheus/build/server/morpheus/server/App.js:131:5)
   at call (/opt/ins-morpheus/morpheus-v1.0.0.20160324T2256/morpheus/node_modules/connect/index.js:239:7)
   at next (/opt/ins-morpheus/morpheus-v1.0.0.20160324T2256/morpheus/node_modules/connect/index.js:183:5)
   at compression (/opt/ins-morpheus/morpheus-v1.0.0.20160324T2256/morpheus/node_modules/compression/index.js:218:5)
   at call (/opt/ins-morpheus/morpheus-v1.0.0.20160324T2256/morpheus/node_modules/connect/index.js:239:7)
Reply Helpful Comment? 0 0
Last edited by generix March 28, 2016 at 02:11 PM
Joined Mar 2009
Schrödinger's Frog
17,342 Posts
2,025 Reputation
#4
I just started getting this on Firefox. I've never used Chrome to log into SD, and it's not happening to me in Chrome (or not yet, anyway).

ETA: Logging out and then back in seems to have fixed it? Of course, I had to copy the logout URL from my Chrome session and paste it in Firefox to log out laugh out loud
Reply Helpful Comment? 0 0
Joined Mar 2011
L8: Grand Teacher
3,488 Posts
351 Reputation
#5
Same here. The site works on Chrome, but on Firefox I get the potential fishing attack message.
Reply Helpful Comment? 0 0
#6
I just encountered this too while using Google Chrome (my daily browser). I was only able to open this page by opening the link in an incognito window. Most of my extensions are not active in incognito mode. Is this an issue related to a particular add-on/extension?
Reply Helpful Comment? 0 0
#7
I'm having the same problem with Chrome; no issues with Firefox....
Reply Helpful Comment? 0 0
#8
I tested something. I temporarily disabled my "Adblock Plus" chrome extension -- disabling the "Easy List" option -- and slickdeals came back fine. Weird...
Reply Helpful Comment? 0 0

Sign up for a Slickdeals account to remove this ad.

Joined Jul 2012
L8: Grand Teacher
3,691 Posts
15,871 Reputation
Pro
#9
I am having the same problem with Firefox. When I turn off my ad blocker, the problem goes away.
Reply Helpful Comment? 0 0
#10
I believe something was wrong with the site, but is now working for people, hence I don't believe any of our actions actually made it so we could connect properly. It just works now. But what the heck WAS that? Pretty scary, made me kinda freak out.
Reply Helpful Comment? 0 0
#11
This has been fixed now

https://slickdeals.net/f/8617134?v=1
Reply Helpful Comment? 0 0
Page 1 of 1
1
Join the Conversation
Add a Comment
 
Copyright 1999 - 2016. Slickdeals, LLC. All Rights Reserved. Copyright / Infringement Policy  •  Privacy Policy  •  Terms of Service  •  Acceptable Use Policy (Rules)  •  Interest-Based Ads
Link Copied to Clipboard