marketingmaven12 Posted September 21, 2018 ID:1270842 Share Posted September 21, 2018 I just started getting a fraud block pop up when visiting a site I use often and I believe is reputable. Site is walkinlab.com Is this an issue with my machine or has this company suddenly been blocked for good reason? Link to post Share on other sites More sharing options...
Staff Malwarebytes Posted September 21, 2018 Staff ID:1270843 Share Posted September 21, 2018 ***This is an automated reply*** Hi, Thanks for posting in the Malwarebytes 3 Help forum. If you are having technical issues with our Windows product, please do the following: Spoiler If you haven’t already done so, please run the Malwarebytes Support Tool and then attach the logs in your next reply: NOTE: The tools and the information obtained is safe and not harmful to your privacy or your computer, please allow the programs to run if blocked by your system. Download Malwarebytes Support Tool Once the file is downloaded, open your Downloads folder/location of the downloaded file Double-click mb-support-X.X.X.XXXX.exe to run the program You may be prompted by User Account Control (UAC) to allow changes to be made to your computer. Click Yes to consent. Place a checkmark next to Accept License Agreement and click Next You will be presented with a page stating, "Welcome to the Malwarebytes Support Tool!" Click the Advanced Options link Click the Gather Logs button A progress bar will appear and the program will proceed to gather troubleshooting information from your computer Upon completion, click OK A file named mbst-grab-results.zip will be saved to your Desktop Please attach the file in your next reply. Before submitting your reply, be sure to enable "Notify me of replies" like so: Click "Reveal Hidden Contents" below for details on how to attach a file: Spoiler To save attachments, please click the link as shown below. You can click and drag the files to this bar or you can click the choose files, then browse to where your files are located, select them and click the Open button. One of our experts will be able to assist you shortly. If you are having licensing issues, please do the following: Spoiler For any of these issues: Renewals Refunds (including double billing) Cancellations Update Billing Info Multiple Transactions Consumer Purchases Transaction Receipt Please contact our support team at https://support.malwarebytes.com/community/consumer/pages/contact-us to get help If you need help looking up your license details, please head here: https://support.malwarebytes.com/docs/DOC-1264 Thanks in advance for your patience. -The Malwarebytes Forum Team Link to post Share on other sites More sharing options...
MysteryFCM Posted September 21, 2018 ID:1270926 Share Posted September 21, 2018 Was this on a specific URI? (I can't reproduce it here) Link to post Share on other sites More sharing options...
marketingmaven12 Posted September 21, 2018 Author ID:1270928 Share Posted September 21, 2018 22 minutes ago, MysteryFCM said: Was this on a specific URI? (I can't reproduce it here) So sorry. But I'm not sure what you mean by URI. Link to post Share on other sites More sharing options...
MysteryFCM Posted September 22, 2018 ID:1270942 Share Posted September 22, 2018 URI was referring to a specific page on the site (so far, I can't reproduce it). Are you still seeing the block? Link to post Share on other sites More sharing options...
marketingmaven12 Posted September 22, 2018 Author ID:1270948 Share Posted September 22, 2018 Yes, I'm still seeing the block. The block pop up appears on every page of the site for me. Ugh. I hope it's not something with my computer. Scans are coming back clean. Link to post Share on other sites More sharing options...
MysteryFCM Posted September 22, 2018 ID:1270950 Share Posted September 22, 2018 I'm still not able to reproduce it myself, I'm having a word with the folks internally to see if they can. In the meantime, can you download and install Fiddler; https://www.telerik.com/fiddler Re-load the site to reproduce the block once Fiddler is loaded, then click File -> Save -> All Sessions, then zip and attach the file here. Link to post Share on other sites More sharing options...
marketingmaven12 Posted September 22, 2018 Author ID:1270951 Share Posted September 22, 2018 Hopefully I did that properly. fraud block.zip Link to post Share on other sites More sharing options...
MysteryFCM Posted September 22, 2018 ID:1270952 Share Posted September 22, 2018 (edited) I can see the site referred to in the block, but not a relationship to walkinlab.com. Which browser are you using? (i.e. do you still see the block when using Edge/IE/FireFox etc?). Edited September 22, 2018 by MysteryFCM Fixed typo Link to post Share on other sites More sharing options...
marketingmaven12 Posted September 22, 2018 Author ID:1270953 Share Posted September 22, 2018 It happens in both Chrome and Edge Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted September 22, 2018 Root Admin ID:1270956 Share Posted September 22, 2018 (edited) The block is for: listrakb . com 76.74.219.134 and was Blocked for Fraud.MageCart on 2018-09-20 13:40:03 https://threatpost.com/magecart-strikes-again-siphoning-payment-info-from-newegg/137576/ The main site you're going to is walkinlab . com at 192.124.249.5 and is not blocked. The main site should be working normally aside from that one domain Edited September 22, 2018 by AdvancedSetup Updated information Link to post Share on other sites More sharing options...
marketingmaven12 Posted September 22, 2018 Author ID:1270958 Share Posted September 22, 2018 Is there risk to me since my computer is attempting to access or communicate with the blocked domain? Is my computer infected ? Should I refrain from making purchases from that site? Link to post Share on other sites More sharing options...
MysteryFCM Posted September 22, 2018 ID:1270959 Share Posted September 22, 2018 It's unlikely your machine is infected, MBAM is doing what it' supposed to. Based on a test from Ron, it appears to be caused by an ad on the site. Link to post Share on other sites More sharing options...
marketingmaven12 Posted September 22, 2018 Author ID:1270960 Share Posted September 22, 2018 Great. Thanks for all your help. Have a great night. Link to post Share on other sites More sharing options...
MysteryFCM Posted September 22, 2018 ID:1270963 Share Posted September 22, 2018 Any time. Have a great weekend :) (it' already 06:21 on Saturday here hehe) Link to post Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now