For the last four days, my anti-virus software has been blocking a possible virus when I visit some popular news sites. The URL flagged as a virus is a subdomain of that has a long string of random characters and looks highly suspicious. A report on VirusTotal indicates two anti-virus providers are blacklisting that domain as a malware site.

The latest site where I encountered this virus alert was a story on Stars and Stripes. I'm not embedding a link for obvious reasons, but it has the headline "Veteran, one of 4,200 mistakenly declared dead by VA, feels 'resurrected.'"

In the Google Chrome developer console, I can see that when the story is read, the URL is being loaded in an XmlHttpRequest by this JavaScript code on the news page:

<script src=""></script>
if (!navigator.userAgent.match(/StripesApp/i)) {
  var pp = { client: { config: { 'zone':"-jmtl7NTsKXjcoZnYuS2qB", 'mode':"universal", 'debug':0, 'precheck': function(){ return 1; } } } };

This code is provided by Press Plus, a company that manages newspaper subscription paywalls. I think the purpose of the script is to superimpose a box above the story that urges a reader to subscribe to the site.

The script does not have any reference to, so I don't know why it is attempting to make a connection to one of its subdomains.

I've encountered this 24 times on different news sites. I'd like to figure out why it's happening. I post a lot of links to news stories on the Drudge Retort and I can't link to a site I believe might have been compromised by a virus.

-- Rogers Cadenhead


Happens to me too. , a site with sensationalist news/media that my 10yr old has visited is hosting frame content from


I'm getting the same behavior when I visit I'm using Eset NOD32. If I try to visit their sports page,, I get a popup telling me I've used up my free visits.


Hello Roger!

You should activate moderation or spam check on your blog cause it seems that spammers are getting through.

Best regards,
a reader.



My name is Robin Floyd Lamura. I am from Berlin Germany and i am a happy man today? I told my self that any Loan lender that could change my Life and that of my family, i will refer any person that is looking for loan to Them.

If you are in need of loan and you are 100% sure to pay back the loan please contact them, They are European helping loan seekers get loan with easy steps, please tell the Loan agents that Mr, Robin Floyd referred you to them.

contact via E_mail:


This is Vincent Financial Services a private loan firm, who gives out loan in a very low interest rate of 3%. Our loan ranges from $10, 000.00 to $25, 000,000.00. we give out all kind of loan like Educational loan, Business loan, home loan, Agricultural loan, Personal loan, auto loan and other good Reason. Duration of 1- 15 years depending on the amount you need as loan.

Vincent Lance Jessy (Dr)
Loan Controller Service Director
Tel: +1{407 329 4984}
Email: {}


Add a Comment

These HTML tags are permitted: p, b, i, a, and blockquote. A comment may not include more than three links. Participants in this discussion should note the site's moderation policy.