Yandex blacklists giantitp.com

[Sgeo]

Yandex claims that giantitp.com might be infected with Troj/Iframe-JG: http://yandex.com/infected?l10n=en&url=giantitp.com

I don't know how reliable that blacklist is, but MyWOT uses it: http://www.mywot.com/en/scorecard/giantitp.com/event-40321#events

[NerdyKris]

There was a virus issue 2 months ago. Look on the news page. Yandex probably has to update their list.

[Rawhide]

Tell them that their information is out of date. The site was infected 2 months ago for 2 hours. For more information, see here (http://www.giantitp.com/forums/showthread.php?t=285749) and here (http://www.giantitp.com/index.html#AlXaO8EiS89zOiJIQK5).

[The Dark Fiddler]

Tell them that their information is out of date. The site was infected 2 months ago for 2 hours. For more information, see here (http://www.giantitp.com/forums/showthread.php?t=285749) and here (http://www.giantitp.com/index.html#AlXaO8EiS89zOiJIQK5).


Yandex periodically checks websites for viruses. The last check (less than two days ago) detected malware on this website. The owner of the site may be completely unaware of any malicious code installed on the site by hackers. If the code is not found the next time the website is checked the tag will be removed.

Unless they're blatantly lying, they came across some recently. I can't help but think of the times when users report that the site is being blocked, and it turns out to be because of somebody's hosted avatar or signature image coming from a website that's having problems.

Furthermore, us non-owners can't actually do anything. Either the "Owner" of the website would have to contact Yandex (though I imagine they'd allow people working for Rich, like you), or they'll take down the notice once they check the website again and fail to find the infection.

[Zherog]

Yep, my hunch would be a linked avatar or sig image.

[Rawhide]

Unless they're blatantly lying, they came across some recently. I can't help but think of the times when users report that the site is being blocked, and it turns out to be because of somebody's hosted avatar or signature image coming from a website that's having problems.

Then it would seem that they are blatantly lying. The infection reported is the infection that lasted only 2 hours 2 months ago.

[Silverraptor]

Then it would seem that they are blatantly lying. The infection reported is the infection that lasted only 2 hours 2 months ago.

I assume that's the "Troj/lframe-JG" that its referring to?

[Rawhide]

Yes, amongst other indicators.

Honestly, after investigating this, I'm very reluctant to make any kind of contact with them. It reeks of a scam, and if it's not, it at least shows less than total competence. I'm inclined to leave it, they will eventually either give up or fix their mistake.

I'm also far more inclined to believe Google, who trawl the site almost constantly and noted the infection moments after it happened, and they have given no indication of potential infection.

[OverdrivePrime]

I work in search marketing and I've had to deal with Yandex before. Unless a sizable chunk of Giantitp.com's organic search traffic comes from Yandex (5% or more), I wouldn't bother responding. Yandex may be the largest search engine in Russia, but they're not exactly known for up-and-up business practices, and their results are fairly specious.

[martianmister]

How can I stop Yandex's so-called "protection"? I already deleted Yandex and Yandex toolbar from my computer, but it's still blocking this site.

[Grey_Wolf_c]

How can I stop Yandex's so-called "protection"? I already deleted Yandex and Yandex toolbar from my computer, but it's still blocking this site.

The pirate bay just released a (completely legal, no funny business in this link) browser (http://piratebrowser.com/) designed to get around such blocks. You could try that.

Edit: also, I'm curious - how are you getting to the site, if you are being blocked? That seems like a useful piece of knowledge to carry around in my noggin.

Grey Wolf

[137beth]

How can I stop Yandex's so-called "protection"? I already deleted Yandex and Yandex toolbar from my computer, but it's still blocking this site.

What browser are you using? What OS?

[NerdyKris]

More importantly, is this ISP level filtering?

[martianmister]

Edit: also, I'm curious - how are you getting to the site, if you are being blocked? That seems like a useful piece of knowledge to carry around in my noggin.

There is a link at the below that say "ignore" in my language.

[ThreadKiller]

Glad to know that I'm not the only one having the Yandex issue. It's getting annoying that I have to click the ignore warning link every time I want to access this website. They even have a hyperlink that says "this is not an attack site" but when I click it, I believe there's a page that says "404 Not Found Error". Not sure what to do, since I've uninstalled Yandex and Yandex toolbar from my computer as well. I'm using Firefox on a Windows 7. Meh, hopefully they fix the issue soon. :smallsigh: