5CHN3LL

An element being loaded when I load threads in the 996 forum is producing an alert and a blocked connection by Malwarebytes. This does not affect me (other than logging the alerts and not actually seeing the blocked resource), but if the site Malwarebytes has flagged is legitimately malware (or is being blocked for some other legit reason), this could be an issue for other users.

The first image is a screenshot from Malwarebytes. The second is a capture in Chrome of the dev tools.

The blocked resource does not appear in the page source, so I'm assuming it's an ad, a banner, or other resource that changes based on the whim of the advertisers and RL's banner/ad settings.





Note that these results were generated when I was using Google for DNS; I have tried using another circuit, a different DNS provider, and both proxied and non-proxied. I do not think this is an issue with the browser on my machine requesting a file on its own due to a feature, bug, or infection of any kind.

I'm happy to help further if there's more I can do. I have not done ANY googling on the signature; I just wanted to try to verify that it's coming from a Rennlist pageload and not some other payload I picked up somewhere and attributed to Rennlist incorrectly...

Randy V

Hmmm, will pass along to the IB tech guru.