FP? IP 81.169.145.71

[daledoc1]

Hi:

Just checking to see if this IP range is still bad?

The URL of the website is below.

It is the landing page for the dev of a popular FF add-on.

Unfortunately, it tries to load in a new tab automatically when restarting FF after updating it (as is common with many FF add-ons).

I am still being notified by MBAM Pro of a successful IP block every time I update this add-on, even though I try to close the tab before the page even has a chance to load.

According to the dev (~2 weeks ago, when I alerted him to the problem):

>> The landing page is hosted at a webservice called Strato (http://strato.de) and should not be malicious. Please confirm, that the page you've tried to load is: http://www.soerenrinne.de/GoogleShortcuts/update.html

I have not installed this on my new computer and may well uninstall it from FF on my other 2, if this is still a bad IP. Much as I like the add-on, it's ust not worth the risk....

Thanks!

daledoc1

[MysteryFCM]

Apologies for taking so long. I've got 217 records on this range at present, the last one being dated the 20th. I'll get those re-checked and if cleaned up/suspended, the block will be removed.

[MysteryFCM]

I've went through them and there's 39 still carrying malicious code. Sadly they aren't restricted to a single IP, so I can't remove this one at present.

[daledoc1]

Thanks, MysteryFCM!

I'll pass along your information to the developer.

(It's not my "job", of course, but he was kind enough to respond to my earlier emails about the problem.)

Thanks again!

daledoc1

[MysteryFCM]

No problem

[GoogleShortcuts]

Hi,

I am the developer of the above mentioned extension and run the website also mentioned above.

I contacted my domain hoster, who is unfortunately not able to port my website into a different IP range. I therefore ask, if it is possible to create something like a whitelist entry for my specific domain.

Regads,

S

[MysteryFCM]

I'm afraid not, no. The current facilities in place, do not allow for whitelisting.

[GoogleShortcuts]

Hm, ok. It's a pity. So, my only hope is, that you re-check and it's cleaned up?

[MysteryFCM]

Until the sites are cleaned up, or your ISP suspends them, the only suggestion I can give is to move the site elsewhere (another e-mail was sent to Strato a few days ago, but I've had no reply as of writing this).

[GoogleShortcuts]

OK, thanks a lot.

The only answer Strato has is "No, we can't move your site to another IP range. Wanna purchase a virtual server for a lot of money?"

[MysteryFCM]

Sounds about right