Notice: My personal stance on AI generated artwork. Retweet and share if you agree. Let us discuss, and not immediately scream bloody murder.

Now Viewing: anyone else have this happen?
Keep it civil, do not flame or bait other users. If you notice anything illegal or inappropriate being discussed, contact an administrator or moderator.

virrenelf - Group: Member - Total Posts: 1
user_avatar
anyone else have this happen?
Posted on: 12/03/15 05:27PM

so this site trinitylock(dot)com showed as a threat in my regular computer scan, and unsure of what it was, i pulled it up. it came up with the Gelbooru homepage, which struck me as suspicous as gelbooru(dot)com should be the link, which also brought up the same page. anyone else have this site show up, and does it pose any known threats to security on the computer?



jedi1357 - Group: Moderator - Total Posts: 5778
user_avatar
Posted on: 12/03/15 05:35PM

It is likely on your computer. If Gelbooru homepage is in your book marks this malware may have put itself there when you pulled it up. I think you can remove it without it affecting how our site works.

trinitylock is not a part of our homepage.



Deusexcalamus - Group: Moderator - Total Posts: 1169
user_avatar
Posted on: 12/03/15 05:59PM

jedi1357 said:
It is likely on your computer. If Gelbooru homepage is in your book marks this malware may have put itself there when you pulled it up. I think you can remove it without it affecting how our site works.

trinitylock is not a part of our homepage.

...*facedesk*
trinitylock.com and gelbooru.com both share the same ip address, that is to say that the owner of the domain name trinitylock.com pointed it at gelbooru.com's IP address for some reason. I doubt it has anything to do with malware, or else I'd be infected with something I don't know about, which would be...hard, on a linux system. Furthermore, googling trinitydock.com brings up gelbooru as the first result. I don't know what's going on, but I don't think it's overly harmful.



Moonman - Group: Member - Total Posts: 301
user_avatar
Posted on: 12/03/15 08:26PM

I'm thinking that Trinitylock.com is TheDoujin's version of Youhate.us .

d.trinitylock.com/index.php/site/login



jedi1357 - Group: Moderator - Total Posts: 5778
user_avatar
Posted on: 12/03/15 08:47PM

Deusexcalamus said:
...*facedesk*
trinitylock.com and gelbooru.com both share the same ip address, that is to say that the owner of the domain name trinitylock.com pointed it at gelbooru.com's IP address for some reason. I doubt it has anything to do with malware, or else I'd be infected with something I don't know about, which would be...hard, on a linux system. Furthermore, googling trinitydock.com brings up gelbooru as the first result. I don't know what's going on, but I don't think it's overly harmful.


Oh, snap! I got it bass ackwards. I didn't know. I was looking to see if Gelbooru pointed to trinitylock and didn't see it. I wasn't going to look up trinitylock because I thought it was a bad thing.



Jerl - Group: The Real Administrator - Total Posts: 6706
user_avatar
Posted on: 12/03/15 09:09PM

You can look up a lot of information on a website without ever loading it.

For example, I can see that it's registered to lozer.



lozertuser - Group: The Fake Administrator - Total Posts: 2231
user_avatar
Posted on: 12/06/15 01:53PM

It is registered to me. Why it is showing as a threat is an unknown.



Maxidamage - Group: Member - Total Posts: 2
user_avatar
Posted on: 12/11/15 01:03PM

I would also like to add for what its worth that just browsing in this site trips all kinds of alarms as clicking on anything on gelbooru redirects you to some backwater sites. At first I also thought this was malware but after basically purging my PC and checking other image boards I feel confident that this is a problem that exists on gelbooru. If there was a better place for this post I'm sorry but I felt it prudent to inform.



Jerl - Group: The Real Administrator - Total Posts: 6706
user_avatar
Posted on: 12/11/15 01:12PM

Please give us the URLs to those backwater sites.

It's possible you're receiving a malicious ad. These ads are very specifically targeted (for example, they may target only users browsing from, say, Cheyenne, Wyoming and show a completely benign ad to everyone else), so there's a good chance that none of us who know what information to get will even receive the ad. I haven't received any such malicious ads in quite some time.

Without more information, there is nothing we can do. We do not directly sell our ads; they're sold by an ad provider, and the ad provider has all the say in what ads show and what don't. We can ask them to investigate and stop showing a particular ad after we've identified it, but we have to identify it first.



Maxidamage - Group: Member - Total Posts: 2
user_avatar
Posted on: 12/11/15 02:11PM

Sent Jerl some links in a PM



add_replyAdd Reply


1 2