Re: being blocked from http://common.org - known to host an injected malicious code or unwanted content

The COMMON site could have been compromised, but a more likely alternative
is that they display ads provided by an advertising network. The ad
network is a group of ad suppliers who get ads submitted by pretty much
anyone. The suppliers aren't always good at catching ads with malicious
intent so some things like fake AV popups, undesired forwarding, etc. can
slip through. When that happens, filters like Websense may get tripped and
disallow site access.

It happens to my employer - who in part relies on web ad revenue - so much
that we use a scanning service (RiskIQ if anyone is interested; not
affiliated, just a customer) to constantly monitor some of our larger sites
to find the malicious ads. We then have our advertising operations folks
work with the ad network to hunt and kill the offending ads.


On Wed, Apr 2, 2014 at 8:30 AM, <rob@xxxxxxxxx> wrote:

Get's me thinking...
At one time there was the site http://whoswho.midrange.com
Worked fine for me until Joe Pluta pasted pictures of him and his family
with Lilo and Stitch. Apparently ?facial recognition? put Lilo and Stitch
in an area of some entertainment you don't need to be doing at work. Not
that it wasn't 'family' rated or anything. Just not business. the
whoswho site has been retired and is offline.
I wonder if common's link to universal studio location has anything to do
with it...
Our BOFH complains that she's blocked from all the casino's she likes to
go to. if at work, she has to use her phone's browser...


Rob Berendt
--
IBM Certified System Administrator - IBM i 6.1
Group Dekko
Dept 1600
Mail to: 2505 Dekko Drive
Garrett, IN 46738
Ship to: Dock 108
6928N 400E
Kendallville, IN 46755
http://www.dekko.com





From: Jeff Crosby <jlcrosby@xxxxxxxxxxxxxxxx>
To: Midrange Systems Technical Discussion <midrange-l@xxxxxxxxxxxx>
Date: 04/02/2014 09:19 AM
Subject: Re: being blocked from http://common.org - known to host
an injected malicious code or unwanted content
Sent by: midrange-l-bounces@xxxxxxxxxxxx



I was able to get to both of these:

http://common.org
http://www.common.org/index.php/annualmeeting.html

In IE, FF, and Chrome. But we don't use Websense.




On Wed, Apr 2, 2014 at 9:07 AM, <rob@xxxxxxxxx> wrote:

I am trying to go to http://common.org
At first I could get to that site but when I clicked on the annual

meeting

(http://www.common.org/index.php/annualmeeting.html ) I got blocked.
Now that I've emailed some board members I now get blocked as soon as I
select the site.
Both IE and FF.
Ok, well, IE get's blocked right away. I still get blocked at the

annual

meeting by FF.

Talked to my network guy and he'll punch me through but he damn near had
me sign a release. He says websense doesn't block sites for no good
reason.

Are others having such an issue?


Access Blocked
The Web site you requested is blocked by your organization.

URL
http://www.common.org/

Reason
Matched categories:
Compromised Websites
Sites that are vulnerable and known to host an injected malicious code

or

unwanted content

For more information, see your organization's policy on acceptable use

of

the Internet.

Websense
Triton



Rob Berendt
--
IBM Certified System Administrator - IBM i 6.1
Group Dekko
Dept 1600
Mail to: 2505 Dekko Drive
Garrett, IN 46738
Ship to: Dock 108
6928N 400E
Kendallville, IN 46755
http://www.dekko.com

--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing

list

To post a message email: MIDRANGE-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/midrange-l.

--
Jeff Crosby
VP Information Systems
UniPro FoodService/Dilgard
P.O. Box 13369
Ft. Wayne, IN 46868-3369
260-422-7531
www.dilgardfoods.com

The opinions expressed are my own and not necessarily the opinion of my
company. Unless I say so.
--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing
list
To post a message email: MIDRANGE-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/midrange-l.


--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/midrange-l.