Outbound Connection being blocked......

[2kwik4u]

This started happening today. Only on JB.net. Not sure exactly what is happening, but every time I click on a link on this domain, I get this popup outside of Chrome.

 

[Julian]

So your malwarebytes is warning you about a page attempting to connect to something they don't like. Not sure it is jetboaters.net - unless that is the ONLY tab you have open.

This thread gives some insight into what Malwarebytes is doing:

Outbound Connection Blocked

HI, Hopefully this is an easy question for the Malwarebytes experts. I am running Malwarebytes Premium version 3.3.1 on my windows 7 box. I've noticed when surfing on some websites; yahoo.com for example, I will receive a malwarebytes pop-up in the lower right corner advising of an outbound conne...

forums.malwarebytes.com

 

[2kwik4u]

So your malwarebytes is warning you about a page attempting to connect to something they don't like. Not sure it is jetboaters.net - unless that is the ONLY tab you have open.

This thread gives some insight into what Malwarebytes is doing:

Outbound Connection Blocked

HI, Hopefully this is an easy question for the Malwarebytes experts. I am running Malwarebytes Premium version 3.3.1 on my windows 7 box. I've noticed when surfing on some websites; yahoo.com for example, I will receive a malwarebytes pop-up in the lower right corner advising of an outbound conne...

forums.malwarebytes.com

Yeap, Got the premise.

Only tab open is JB.net, and it happens on each new thing I click on here......

Got a website on this one.



Getting this fun error as well while trying to post that image as thumbnail. Thumbnail button doesn't work and looks like this.

 

[Julian]

Have you rebooted?
Did you just install that app?
That ip address is likely our webserver right @Bruce

 

[mark_m]

Any modifications to your DNS setup, upgrade or setting changes to Chrome? Lastly, does it do the same thing but with Firefox or Edge browsers too?

 

[Kelleyja]

Nope - that's a phishing site.

VirusTotal

VirusTotal

www.virustotal.com

Jetboaters.net should resolve to 198.199.84.246

You're going to jetboaters.SOMEBULLSHIT.BLAH.COM

 

[2kwik4u]

Have you rebooted?
Did you just install that app?
That ip address is likely our webserver right @Bruce

Not sure which app that is. Didn't install it on purpose, I'll check when I start the laptop up in the morning.

Typically gets booted in the am at the office, then again in the PM at home.

I'll keep digging. Thanks guys!

 

[Bruce]

We use DigitalOcean spaces for image and attachment hosting.

Not sure what Malwarebytes is or why it is complaining.

Every image on the forum has a spaces URL. Spaces is a competitor to Amazon S3.

 

[mark_m]

We use DigitalOcean spaces for image and attachment hosting.

Not sure what Malwarebytes is or why it is complaining.

Every image on the forum has a spaces URL. Spaces is a competitor to Amazon S3.

Mac-Studio:~ $ nslookup jetboatsers.nyc3.digitaloceanspaces.com

Server: 192.168.7.1
Address: 192.168.7.1#53

Non-authoritative answer:

Name: jetboatsers.nyc3.digitaloceanspaces.com
Address: 162.243.189.2

Yep. Still recommend that you attempt a different browser. Are you using OpenDNS @2kwik4u VPN or a proxy server in your setup?

 

[2kwik4u]

Mac-Studio:~ $ nslookup jetboatsers.nyc3.digitaloceanspaces.com

Server: 192.168.7.1
Address: 192.168.7.1#53

Non-authoritative answer:

Name: jetboatsers.nyc3.digitaloceanspaces.com
Address: 162.243.189.2

Yep. Still recommend that you attempt a different browser. Are you using OpenDNS @2kwik4u VPN or a proxy server in your setup?

I'll attempt a different browser.

I'm on a "corporate" laptop, but our IT dept isn't exceptionally sophisticated. Hard to say what my DNS setup is once it leaves my machine through the company network.

I did try at home, and I have just a dumb router and cable connection. Nothing fancy there either.

 

[mark_m]

I'll attempt a different browser.

I'm on a "corporate" laptop, but our IT dept isn't exceptionally sophisticated. Hard to say what my DNS setup is once it leaves my machine through the company network.

I did try at home, and I have just a dumb router and cable connection. Nothing fancy there either.

Cool. Ok it's a corp laptop then with same behavior at home and at work. It feels like a malwarebytes browser extension setting may have been flipped by your IT dept in a centralized manner to be more strict. Curious to see if it behaves the same way with a different browser.

 

[Can0n11]

Also make sure your chrome is updated to at least 100.xx - . Win 7 runs TLS 1.0 by default which is weak. All of my remaining win7 machines were knocked off our network last week by the security guys forcing Win10 upgrades. Complete mayhem right now with people being off the net. One of the local community colleges were knocked off line a couple of weeks ago from a ransomware attack. Pretty nasty stuff going around recently.

 

[2kwik4u]

I'm up to date it appears.



Definitely an image fetching issue on my end. Avatars, and various hosted pics aren't showing up for me.

Same behavior with Edge, old school IE, and Chrome.

I'll check with IT dept and see what they say.

 

[Bruce]

Someone posted a single fishing file to a DigitalOcean Spaces account and Malwarebytes blocked all content from DO Spaces.

Seems like a massive overreaction to me but explains what @2kwik4u is seeing.

Phishing notification on my site

The images on my site don't load and Malwarebytes notifies you of a phishing attempt. Report: Malwarebytes www.malwarebytes.com -Log Details- Protection Event Date: 5/10/22 Protection Event Time: 1:42 PM Log File: 3ac5f4f8-d080-11ec-8976-d050997c7ee8.json -Software Information- Version: 4.5.8.191...

forums.malwarebytes.com

 

[2kwik4u]

@Bruce @Julian

Appears either Malwarebytes, or my IT staff got their collective stuff together. Alerts have stopped, and all the images/thumbnails are working again. No changes on my setup that I'm aware of.

If you guys changed something, thank you, if not no biggie.

 

[Bruce]

@Bruce @Julian

Appears either Malwarebytes, or my IT staff got their collective stuff together. Alerts have stopped, and all the images/thumbnails are working again. No changes on my setup that I'm aware of.

If you guys changed something, thank you, if not no biggie.

Glad it is working again. I reported the problem to Malwarebytes and to DigitalOcean but I am sure my reports were among many.