MSE showing as dangerous in Google Chrome

Anne_Marie_2 · 30 June 2017 at 3:53PM

Just a heads up that I am getting a warning from Google Chrome reporting this as a deceptive site and that details are not secure.

Unfortunately unable to copy and paste the full warning, but the gist is:-
Deceptive site ahead.
Attackers on c95735.ssl.cf3.rackcdn.com may trick you into something dangerous etc etc

Google Safe Browsing recently detected phishing on c95735.ssl.cf3.rackcdn.com etc. etc.

Firefox reports that logins could be compromised.

Safari doesn't show any problems that I can see.

MothballsWallet · 30 June 2017 at 7:56PM

This may or not be related, but I've been getting "Your connection to this site is not secure" when I click on the "i" symbol next to the site address in Chrome 59.0.3071.115 (64-bit version) ever since the last update took my system to that version.

Screenshot here:

pogofish · 30 June 2017 at 8:14PM

How many threads do we have on this now..?

MothballsWallet · 30 June 2017 at 9:46PM

Well, the official one that MSE Andrea posted is now on page 2, so it obviously can't be that important an issue.

Anne_Marie_2 · 1 July 2017 at 4:34AM

pogofish wrote: »

How many threads do we have on this now..?

I hadn't seen any other threads regarding my issue, but I did have a quick check.
I did see the other thread which Mothballs has also posted on. However, I have not seen a thread regarding the huge full page red google chrome warning, which I had yesterday afternoon, warning of unsafe site.
The red page that I had yesterday is now gone this morning, but the "not secure" in forum url is still there, as per the other thread.
http://forums.moneysavingexpert.com/showthread.php?t=5595834

Jabba_flabba · 1 July 2017 at 12:33PM

Anne_Marie's right, this is a separate problem from the "no SSL issue" that there are a few threads on.

Anne_Marie: what you've seen is Google Chrome's Safe Browsing feature. Take a look at https://www.trendmicro.com/vinfo/us/security/news/cybercrime-and-digital-threats/google-now-warns-against-social-engineering-content

http://forums.moneysavingexpert.com/ is pulling its Museo Slab web fonts from https://moneysavingexpert.scdn3.secure.raxcdn.com
..but I can't see any references to the particular subdomain rackcdn.com URL you mention.

I guess it's either gone away because something changed at the site end, or perhaps your Chrome updated itself between when you reported the problem and now, yielding slightly more relaxed deception detection.

I believe the Chrome (v59) setting that pertains to Safe browsing is under 3 dots > Settings > Advanced > Privacy & Security > Protect you and your device from dangerous sites (toggle). For me it was off by default, but turning it on doesn't yield me the big red screen when I visit http://forums.moneysavingexpert.com/

As for the "Not secure" / "Your connection to this site is not secure" that's totally to be expected at the moment. For interest, the original thread I started on this dates to the back end of last year:
http://forums.moneysavingexpert.com/showthread.php?t=5567176

Anne_Marie_2 · 1 July 2017 at 7:39PM

Thanks for all the detail there Jabba_flabba. Will have a look at those links.

I did know that the issue I had was different to that already reported.

Thought that I had better report it, as not everyone would go through checking through various browsers to check and would just not visit this site with such a warning.

Anyway, all good with me now. Thanks for taking the time to reply with useful information.

pogofish wrote: »

How many threads do we have on this now..?

One, as far as I know, unless you know of others, and you can point me in the right direction.

Former_MSE_Andrea · 4 July 2017 at 12:13PM

Hi Anne_Marie

I'm sorry for the delay replying.

Are you (or anyone else) still seeing this message?

Frogletina · 4 July 2017 at 12:58PM

Jabba_flabba wrote: »

I believe the Chrome (v59) setting that pertains to Safe browsing is under 3 dots > Settings > Advanced > Privacy & Security > Protect you and your device from dangerous sites (toggle). For me it was off by default, but turning it on doesn't yield me the big red screen when I visit http://forums.moneysavingexpert.com/

I had this issue and the setting was set at on. I amended the setting to off and was then able to get onto this site

frogletina

Former_MSE_Andrea · 4 July 2017 at 1:17PM

Thanks Frogletina!

MothballsWallet · 4 July 2017 at 1:32PM

I'm still getting the "i" symbol in the address bar and I don't want to turn the setting off.

MSE showing as dangerous in Google Chrome

Comments

Categories

Get our FREE Weekly email full of deals & guides - and it’s spam-free