Main Menu

Taitz attacks!

Firefox users visiting the Orly Taitz web site today are seeing this message:

Reported Attack Page! warning message

Not long after Orly’s web site was restored following what she says was a hacking incident, I visited her site and saw a popup window that tried to get me to install some software. I detailed some of these popups in my article, “Taitz pop-up advertising more dodgy,” last February; and for a while those had stopped.

Now Google, through the Firefox browser, is issuing an attack warning. The specifics of the Google warning are:

Of the 97 pages we tested on the site over the past 90 days, 9 page(s) resulted in malicious software being downloaded and installed without user consent. The last time Google visited this site was on 2014-06-27, and the last time suspicious content was found on this site was on 2014-06-27.

Malicious software includes 6 exploit(s), 3 trojan(s). Successful infection resulted in an average of 4 new process(es) on the target machine.

Malicious software is hosted on 2 domain(s), including indolocker.com/, zamcheck.org/.

1 domain(s) appear to be functioning as intermediaries for distributing malware to visitors of this site, including zamcheck.org/.

This site was hosted on 4 network(s) including AS6245 (NETWORK-SOLUTIONS), AS55002 (DEFENSE-NET), AS19871 (NETWORK-SOLUTIONS-HOSTING).

This looks to me like the malware is being funneled through her advertising stream. This is similar to what brought Birther Report down for a while (Birther Report is hosted by Google).

Before I retired, one of the employees of my company accessed the Taitz web site on a company computer. It took two days to get the malware cleaned up.

Taitz on the other hand says to ignore the warning in two articles:

  •  If you unable to go on my site, go to Firefox security/preferences and type the url www.orlytaitzesq.com as preference. You will not be blocked. the site appear to be working fine for most people.
  • Obots are inserting software to trigger warning messages, clock on “Ignore this”. 699 media outlets connect to www.orlytaitzesq.com Please, spread the word that regime is trying to stifle

Articles on birther malware:

Print Friendly

, ,

38 Responses to Taitz attacks!

  1. avatar
    The European June 28, 2014 at 2:50 am #

    This moment (6:49 UTC) Taitz´ website is blocked by google as hazardous …..

  2. avatar
    RanTalbott June 28, 2014 at 5:53 am #

    The European: This moment (6:49 UTC) Taitz´ website is blocked by google as hazardous

    Apparently, this happens on a fairly regular basis:

    What is the current listing status for orlytaitzesq.com?

    Site is listed as suspicious – visiting this web site may harm your computer.

    Part of this site was listed for suspicious activity 3 time(s) over the past 90 days.

    What happened when Google visited this site?

    Of the 97 pages we tested on the site over the past 90 days, 9 page(s) resulted in malicious software being downloaded and installed without user consent. The last time Google visited this site was on 2014-06-27, and the last time suspicious content was found on this site was on 2014-06-27.

    Malicious software includes 6 exploit(s), 3 trojan(s). Successful infection resulted in an average of 4 new process(es) on the target machine.

    No mention of whether any of those “new process(es)” began printing out reams of semi-coherent zibbits, or attempting to run E-verify queries on Harrison J. Bounel…

  3. avatar
    Thinker June 28, 2014 at 10:45 am #

    My Chrome browser gives this message also, though my Explorer does not, which is another good reason not to use Explorer. The birther spectragator aggregator is also blocked because of Taitz’s malware.

  4. avatar
    Bob June 28, 2014 at 10:46 am #

    I use Chrome and I get the malware message from Orly and from The Fogbow.

  5. avatar
    Bonsall Obot June 28, 2014 at 10:51 am #

    “Birther Report is hosted by Google.”

    How can this be?? Bob specifically solicited donations from his rubes for an independent server so that he could host the site himself! Surely he didn’t simply use this as an excuse to steal money from his slow-witted readers?

  6. avatar
    Dr. Conspiracy June 28, 2014 at 11:00 am #

    I am not getting any messages about The Fogbow in Chrome. Is it a particular page?

    Bob: The Fogbow.

  7. avatar
    Dr. Conspiracy June 28, 2014 at 11:01 am #

    My own opinion on this is that BR was unrealistic about what it would take to get their own site up and running. I warned them, but …

    Bonsall Obot: How can this be??

  8. avatar
    CarlOrcas June 28, 2014 at 11:28 am #

    Dr. Conspiracy:
    My own opinion on this is that BR was unrealistic about what it would take to get their own site up and running. I warned them, but …

    Do you think he even tried?

  9. avatar
    Suranis June 28, 2014 at 12:35 pm #

    Fair answer; Its impossible to tell.

    Honest answer; No

  10. avatar
    CarlOrcas June 28, 2014 at 12:36 pm #

    Suranis:
    Fair answer; Its impossible to tell.

    Honest answer; No

    Honest answers are good.

  11. avatar
    Woodrowfan June 28, 2014 at 1:32 pm #

    OK, why her site? Is it just that she is so clueless that she can’t run a website with even minimum security?

  12. avatar
    Bonsall Obot June 28, 2014 at 1:40 pm #

    I’m beginning to think she might be incompetent.

  13. avatar
    CarlOrcas June 28, 2014 at 2:21 pm #

    Bonsall Obot:
    I’m beginning to think she might be incompetent.

    But she’s a member of the California Bar…….

  14. avatar
    Suranis June 28, 2014 at 2:30 pm #

    I believe one of the reasons is her habit of copying whole web pages to her site, including malware depositing links.

    Jill Nagamine once wrote her a letter saying flat out they were never accepting one of her emails again after an email from hers infected the Hawaiin network with a nasty virus.

  15. avatar
    Bob June 28, 2014 at 3:41 pm #

    Dr. Conspiracy:
    I am not getting any messages about The Fogbow in Chrome. Is it a particular page?

    Ah . . . yes it seems to be only this page: http://www.thefogbow.com/forum/viewtopic.php?f=24&t=300&start=30900

  16. avatar
    Dr. Conspiracy June 28, 2014 at 3:57 pm #

    He says that he bought a server, which if true constitutes a try. I have no evidence that he didn’t buy a server.

    CarlOrcas: Do you think he even tried?

  17. avatar
    Dr. Conspiracy June 28, 2014 at 4:52 pm #

    I see what’s happening. That Fogbow page has embedded images from orlytaitzesq.com. The Chrome message says:

    “Content from http://www.orlytaitzesq.com, a known malware distributor, has been inserted into this web page. Visiting this page now is very likely to infect your computer with malware.”

    As far as I can tell, there is no hot-linked content from the Taitz site here. I typically download and/or crop off-site images and serve from here.

    Bob: Ah . . . yes it seems to be only this page: http://www.thefogbow.com/forum/viewtopic.php?f=24&t=300&start=30900

  18. avatar
    Northland10 June 28, 2014 at 6:08 pm #

    Dr. Conspiracy:
    He says that he bought a server, which if true constitutes a try. I have no evidence that he didn’t buy a server.

    Back in April, he had a pleasant email discussion with Foggy where he said:

    As for the funds that were raised for the server. The server was purchased and it is sitting here in the box.

    That’s one way to keep it secure from viruses, malware and Obot hackers.

  19. avatar
    mimi June 28, 2014 at 7:51 pm #

    So it’s cuz of images displayed on Fogbow that are hosted at Orly’s site?

    ahhh.

    Orly is a menace.

  20. avatar
    Rickey June 28, 2014 at 9:35 pm #

    When a Google search returns a link to Orly’s site, it contains this warning:

    This site may harm your computer.

  21. avatar
    Rickey June 28, 2014 at 9:44 pm #

    Has Orly conceded yet? With less than a week of ballot counting to go she has 130,122 votes for Attorney General. It looks like she has clinched sixth place with 3.2% of the vote.

  22. avatar
    Northland10 June 28, 2014 at 10:21 pm #

    Tracing back the sites that appeared to be causing the issues, Zamcheck, is claiming an address of 8.8.8.8 (that is actually a Google DNS address) but is hosted on a network with a location of:

    Chisinau, Moldova

    Comments on this network mention fraud clicking Google adwords, using a malicious script to send out spam and brief mention of trying to hack a WordPress site.

  23. avatar
    RanTalbott June 29, 2014 at 1:36 am #

    Northland10: but is hosted on a network with a location of:

    Chisinau, Moldova

    Well, there you have it.

    Obviously, this whole multi-year campaign to go after Obama was merely a facade to lure people into visiting her site, so she could infect them with malware produced by her buddies in The Old Country. All the incoherent briefs, and incompetent tradecraft, were just gimmicks to prolong the struggle so she could entice more victims.

    Sounds like all those people who got hacked should be filing a class-action REEEKO suit…

  24. avatar
    Krosis June 29, 2014 at 4:01 am #

    Do not you mock Attorney Taitz, you hateful, vile Obots,
    She bravely fights against regime, against Obama rot,
    Since he has forged SSN and fake certificate,
    According to research done by Dr. Orly Taitz.

    She is a dissident who fights against the vile regime,
    If you mock her, then truly, you are evil or just dim.
    Obama sponsors all these hordes of horrible ingrates
    Who think it fine to abuse and laugh at Dr. Taitz.

    But truth will certainly triumph, and you all will be done,
    Your sites will suffer an extreme and everlasting ban.
    The Statue of Liberty – the features of her face –
    They will be changed to ones of Dr. Orly Taitz.

  25. avatar
    Dr. Conspiracy June 29, 2014 at 7:27 am #

    You’re joking, right?

    Krosis: She is a dissident who fights against the vile regime,
    If you mock her, then truly, you are evil or just dim.

  26. avatar
    Thinker June 29, 2014 at 8:14 am #

    Krosis: Even if Orly Taitz were correct in her birfery assertions–which she is not–she would never, ever be able to prove it in court because she’s too damn incompetent. Furthermore, she ruined her reputation sufficiently in 2009 with the fake Kenyan birth certificates she submitted to courts, with her disastrous mainstream media appearances, with her affair with a thrice-disbarred felon, with her sanction from Judge Land. Nobody serious will ever take her seriously. Ever. Even if she were correct, which she is not. She has had many, many chances to convince judges and the American people that she is correct and she has failed every single time. You’re backing the wrong horse in this race. She will never, ever win. Ever.

  27. avatar
    Bonsall Obot June 29, 2014 at 8:47 am #

    Krosis:

    Doggerel…

    I got like six or seven new band names in just those three verses.

  28. avatar
    JPotter June 29, 2014 at 9:42 am #

    Dr. Conspiracy:
    You’re joking, right?

    Yes, Krosis is joking. Unless a birfer borrowed his handle?

    https://www.google.com/webhp?sourceid=chrome-instant&ion=1&espv=2&ie=UTF-8#q=krosis%20site%3Awww.obamaconspiracy.org

    Or are you guy responding to his satirical verse sarcastically?

    Poe’s Law, man. Like a confusion greande.

  29. avatar
    Bonsall Obot June 29, 2014 at 10:06 am #

    JPotter:

    Or are you guy responding to his satirical verse sarcastically?

    I was sarcastic in tone, but sincere in fact: The Horrible Ingrates is, in fact, my new band.

    Krosis didn’t really try to pass as a Birfer; the utter lack of misspellings was a dead giveaway.

  30. avatar
    Fred Flintstone June 29, 2014 at 6:45 pm #

    I got on the site, ignored the warnings, now I have visual herpes and a real mean itch.

    Can I sue for treason ?

  31. avatar
    Dr. Conspiracy June 30, 2014 at 9:28 am #

    I added to the article:

    Taitz on the other hand says to ignore the warning in two articles:
    - If you unable to go on my site, go to Firefox security/preferences and type the url http://www.orlytaitzesq.com as preference. You will not be blocked. the site appear to be working fine for most people.
    - Obots are inserting software to trigger warning messages, clock on “Ignore this”. 699 media outlets connect to http://www.orlytaitzesq.com Please, spread the word that regime is trying to stifle

    I visited her site using the Safari browser on a Kindle. How bad can she screw that up?

  32. avatar
    Bonsall Obot June 30, 2014 at 10:03 am #

    699 media outlets can’t be wrong.

    In unrelated news, invading Iraq was a doubleplusgood idea.

  33. avatar
    Thinker June 30, 2014 at 10:50 am #

    Wow. Advising people to ignore the warning about her site is pretty bad advice. Not on par with advising people to kidnap non-English-speaking children and turn them over to a foreign government, but still bad. Her readership will go way down after her flying monkeys lose their computers to malware spread by Typhoid Taitz.

  34. avatar
    RanTalbott June 30, 2014 at 3:19 pm #

    Thinker: Her readership will go way down after her flying monkeys lose their computers to malware spread by Typhoid Taitz.

    Fortunately, most of her flying monkeys lack the mad skilz needed to work the dialogs that would get them past the warning to see her advice.

    Unfortunately, most of the ones who do get infected will believe her crap about Obots “inserting software to trigger warning messages”.

    I’m sure there will be new chain emails soon about how Obama is trying to “kick patriots off the interwebz with viruses”.

  35. avatar
    RanTalbott June 30, 2014 at 3:27 pm #

    Dr. Conspiracy: I visited her site using the Safari browser on a Kindle. How bad can she screw that up?

    She could put a hook in the “go to sleep” code so that, every time you tried to pause in the middle of reading a book, it would use the TTS to screech “Let me feeenish!”.

  36. avatar
    Rickey June 30, 2014 at 8:00 pm #

    Krosis:
    Do not you mock Attorney Taitz, you hateful, vile Obots,
    She bravely fights against regime, against Obama rot,
    Since he has forged SSN and fake certificate,
    According to research done by Dr. Orly Taitz.

    I thought it was a stolen SSN and a forged birth certificate.

    How does one go about forging a Social Security Number?

  37. avatar
    Dave June 30, 2014 at 9:30 pm #

    With massive tongs Obama thrust the numbrous
    ingot in the coals, at bellows strain’d til
    fell and baleful light did shine, then hammer
    high did ring that anvil like the bell of
    doom. Again the coals, again he struck,
    until his tongs held digits nine. He paused,
    beheld his hateful work, then quenched it in
    the blood of patriots.

    Rickey:
    How does one go about forging a Social Security Number?

  38. avatar
    Bonsall Obot June 30, 2014 at 9:42 pm #

    Changed my mind.

    Numbrous Ingot and the Digits Nine is my new band.