chdbits... attack page??

[dannyyelly]

I tried to access CHDbits today and got this page..

http://img20.imageshack.us/img20/819...kpage12948.png

some explanation:

http://img72.imageshack.us/img72/464...singdiagnu.png

this can't be good

[kukushka]

didn't checked it yet, but there is information that all nexus based sites are affected

[gamesover]

For god knows what reason it was falsely reported as a badware(wtf) site and stayed blocked until I changed my security preferences.

[bijoy]

didn't checked it yet, but there is information that all nexus based sites are affected

no, that's wrong
checked up smoe other nexus based sites & their login page don't have any similar problem.

[ScottK]

LosslessWorld based on Nexus & seems fine too

[Ev0]

And thats what happens when you let the Google bot crawl your site. No need for any private BT Tracker to let the Google bot onto your site.

[Intr4ns1t]

That site's hosted in China right? Well, china just had a huge sweep of anti-piracy efforts this last week, both physical and online. My guess would be that is the problem, not any attack. But, I could be wrong...

[johhny]

LOL i get this warning very often?blah blah blah nothingh serious

[Ev0]

That site's hosted in China right? Well, china just had a huge sweep of anti-piracy efforts this last week, both physical and online. My guess would be that is the problem, not any attack. But, I could be wrong...

My guess is that the Google Bot has picked up on links on the site (users avatars/signature maybe?) that lead to suspicious domains that has malware just like the 2nd link the OP mentioned.

Edit: Yup going to the domains on the 2nd image link by the OP pops up a warning in Firefox.

[anon]

And thats what happens when you let the Google bot crawl your site. No need for any private BT Tracker to let the Google bot onto your site.

http://scroogle.org/cgi-bin/nbbw.cgi?Gw=What.cd&n=2

Anyway, CHDBits loads fine with Opera here. I'm not going to enable the phishing filter to see what happens, but Ev0's explanation of why the site's detected as malware sounds fine to me.

If you're still suspicious, NoScript + browse it inside a sandbox.