Bitcoin Forum

https://www.cryptonewsnet.com/ website is rebuilt and no longer will ask for download!

Yes.


I try to run the website against Virustotal:

https://www.virustotal.com/gui/url/76f89e6cdfc34bb71da019c4f20e743e22e9e734a181ddd922d7e3951483c361/detection


Could be false positive though. To the OP, care to share what's the application that supposed to be downloaded and it seems it run on the background?

Strange.
Everything works well.
Subscribed to your news. Waiting for updates.
Hope, it will be something different than coindesk or cointelegraph.

It's not what you are going to do, it's what you actually do <-- This is my answer to your first post.
You can't get customers at first and then run a business. You have to offer them ready product/service and then attract.
Establish your business at first and then make it public, don't give us promises that you know that can't even achieve and only dream about.

Also there is no need to think about profit from the very first day, of course it should be your aim if it's business but at first do some job, money won't come out of thin air. Be interesting for advertisers...

Also don't even think that you'll get any customer by saying that you are going to donate money collected from affiliate program. No, as I said already, do real job, don't just throw promises.

Try it on Chrome (Version 80.0.3987.163 (Official Build) (64-bit))

The message exists, even if you want to deny it.  :/

I tested it on the following.

(1) Google Chrome version: Version 80.0.3987.149 (Official Build) (64-bit) - it will download

(2) Brave Browser Version 1.5.115 Chromium: 80.0.3987.149 (Official Build) (64-bit) - it will download

(3) Safari Version 13.1 (14609.1.20.111.8) - negative

(4) FireFox 74.0 (64-bit) - negative

(5) Opera Version:67.0.3575.97 - negative

So it looks like the problem is with Chromium based browsers.

Either this website has been backdoored, or OP is trying to install a background miner app.


This is probably a puppet account OP uses to improve credibility. He clearly doesn't know that absolutely nobody trusts newbie spammers.

Stay away from this website until OP removes his driveby script.

The script is 100% why he launched the site.   I doubt he will remove it. 

We are pleased to announce that we have so far partnered with Ninjacoin, webdollar, rollercoin, mintme, beam and Rebuzz. We also just partnered with https://exrates.me/.  We will be keeping up with the latest news everyday.

I have now opened a flag against OP.

He denies the presence of a driveby script on his fake website, then completely disregards a trusted member (Vod) when called out on it.

OP has almost certainly planted the covert mining script himself in order to steal CPU/GPU resources and should not be trusted under any circumstances.

Thread archived in case OP deletes/modifies his posts. http://archive.is/BlQqT

dude its not a scrypt open up twitter and it will give you the same option i doubht now how many more times i have to say it. its something google offers. Please your more than welcome to scan for anything i gurentee you i am legit. I am sorry you guys are parnoid about the site. but this is 100% google and not me. try and load twitter and see if it offers the same install question, I bet it does. Please people actually do research before blindly accusing people of hacking. I am going to assume people that occusing me of hacking with out researching my site and scanning for stuff are just people trying to destroy my name so i will just ignore them. People that actually research and look into my site will see that I am not hacking. I pay $8 a month for my site, I am doing this site because I litterly cannot do anything else right now. I am stuck inside till this virus is over. I thought a fun way to spend the time would be to make a crypto site.

if you guys unistal google the app you install will no longer work, same thing with twitter. I really don't know how to explain it anymore. its pretty obvious if you open the image and see the app but I am guessing you didnt do that. Just like to accuse people of hacking.

We should all just calm down here. I've looked through the source code, the button that shows on the OPs site is a PWA installation. AKA, A Progressive Web App.

You can see more information about them here: https://mobilesyrup.com/2019/03/27/pwa-install-button-google-chrome-canary/

Essentially, it just allows you to pull the website onto your computer and run it locally. Not necessarily a virus concern. AFAIK it's still run within the realm of chrome and not much different from loading the page on your browser (hence why when the OP said removing Chrome removes the app). There are just some differences with regards to loading and caching/saving of assets (such as CSS, etc)

Do I say you should download it, probably not. But at the same time, It doesn't necessarily make it intentional on behalf of the OP.

The website was built with GoDaddy Website Builder, and GoDaddy has been pushing PWAs for a while:
1. https://in.godaddy.com/blog/why-you-should-start-building-progressive-web-apps/
2. https://www.godaddy.com/garage/web-design-skills/#section1
3. https://www.iflexion.com/blog/progressive-web-app-framework (GoDaddy adopting)

You can confirm this with the following manifest file on the OPs website: https://cryptonewsnet.com/manifest.webmanifest and validate it with this guide to add a Manifest/PWA https://pwa-workshop.js.org/1-manifest/#using-a-manifest-generator

TLDR: It's kind of like a newer version of "Add to Homescreen". It allows the website to be pulled down and act as a native app without as many controls. Image if "Add to Homescreen" pulled the website up in its own app, and could act offline. Think of basically being able to open up Amazon right from your desktop and have it function AS IF it was it's own app.


I'll have to confirm whether this is an option in GoDaddy website builder. Perhaps OP accidentally selected it when building the site.

I'm not trying to call anyone out here. I get the feeling. Sometimes crypto sites can seem sketchy and we all have seen those scammed from websites alike this. I'd recommend retracting any flags against the OP until this is further diagnosed.

---

@OP, if you can contact GoDaddy to have them remove the code for the PWA (aka the manifest file), that may not be a bad idea. Websites prompting any sort of installation probably won't bode well for crypto users (due to heightened security risks, etc). I'll put the code which should be removed below:


If there's an option to disable the manifest file from your control panel, I'd recommend it.

Thank you for looking, I really tried to explain to people its called google extensions you can do it with other sites like twitter to. I tried to ask godaddy but they said it was a part of google and not them. I will look into removing it im just not sure yet since it is a part of googles browser if I can.

It's not a chrome extension. Google removed inline support for Chrome extensions in 2018.

It's a piece of code they are placing on your site to create the prompt. They should be able to remove the manifest file as I suggest above. Sounds like a low-level support op just suggesting "nope, that's google's fault"

Didnt see such prompt when i do open the site on Chrome Version 80.0.3987.149 (Official Build) (64-bit) in incognito but when you try it up on non-private it do really have that prompt message.

Little bit off topic which i do thought that this one is Crypto-news.net. . 8)

Edit: Just read up Initscri explanation above..

I will say to OP, have you considered converting your website to something self-hosted like Wordpress. You said you were on quarantine.. not a bad time to learn the software, install a theme, and then you'll have more control instead of being held against will to GoDaddy software.

_{If it aint obvious, I'm not a huge fan of GoDaddy  :-X}

Yea, I will look into it as long as it does not cost to much I would be glad to learn something more. Godaddy did say they cant remove it could be an excuse by them though. Voskcoin will be joining the team so we will be getting videos with him in the future.

The only cost you would incur is web-hosting. Probably no more than you're currently paying GoDaddy.

Hello!
I represent a payment service provider on this site. Please, look at my very first comment. It's not interesting for me to support scammers.
My bad. From mobile he offer to install the strange app but the service, as I understand, is not ready. Looks suspicious.  

Do you write articles about crypto world and can I contact you regarding that?

Please read my previous post on this thread before making decisions with regards to the site.

I wish you luck in your crypto adventure maybe we can collaborate in the future since you are a web dev too and I can see you are a lover of the crypto revolution.

adamcro- if you can contact me on discord I would be glad to talk.

What is it since I did not try it in a mobile browser and PC browser seems neat

Read above about the application its nothing i can control, its built into google chromes browser. If you don't use the browser you wont be asked to install it.

read above were not scammers people just dont understand how google works. also if you have a serious offer join our discord group we do not pay for offers though.

It ain't Google. It's your website having a specific meta tag (manifest) that Google Chrome (along with other browsers) interprets as the site being able to run as a PWA. It's GoDaddy's fault for being unable to remove this upon request.

It seems GoDaddy website builder has this problem for virtually everything in the <head> tag. For example, removing OG tags has been deemed impossible by many on the GoDaddy support forums: (ref: https://ph.godaddy.com/community/Websites-Marketing-Website/Unwanted-Open-Graph-Meta-Tags-Facebook-Website-Builder/td-p/7000)

As for why they blamed it on Google, well, it's GoDaddy  ::)

I've tried searching to see if it's possible to remove the manifest file which is causing that prompt. From what I can tell, it's not possible within the realm of GoDaddy website builder. Your only option AFAIK to remove that prompt is to switch to other software besides GoDaddy website builder.

Like I said, in this community, probably not a bad idea.

While I haven't downloaded the PWA to conclude it's 100% safe, I don't believe this warrants the current flag on your account (see this link (https://bitcointalk.org/index.php?action=trust;flag=1544)) so I've opposed it. This counters it and removes the negative connotation from your trust page.

Cheers

Thanks were even starting a faucet that you can get free coins with to.

I am working on switching from them, i am getting started working again in like a week so I will pay to transfer my domain over once I am back working and people wont have to worry about the app anymore.

Good call. It's not a bad idea regardless to move over to a platform like Wordpress (or similar).

If you have any questions feel free to give me a shout!

I try it, and it looks good. An amazing project! with the amazing team. I really like the community in the project. A project without drawbacks, everything is done simply and easily. Excellent innovation! Success is written all over this project!

Hey I did have some questions do you have discord? Just wanted to run some ideas through.

From the list of the links will direct you into another platform that will force you to install to your device which is not a good response into a platform that may cause of a lot of damage and information leak, like phishing platform and inserting some worm, malware, and most common is the trojan virus looks like act a software application run into your devices and makes your devices slower and slower. @OP you give a lot of damage to the people who already visited the link and ask to download some software application to their devices this is not a good performance.
Also, the OP has a lot of alt accounts that are making a reply that the post is good just to earn views and merits I think the higher ranks make a red flag about this kind of action and reported already.

please read above and never made multiple accounts. before you post about me scamming people actually read what above people are saying. Im getting tired of people not actually looking into the project before posting. I am about to have them delete this page because people cant read. I am just going to awesome that people post about my site saying anything about the install thing are just scams because they dont take the time to actually read. I know people want to see projects fail so I wont take it personally. People just need to learn how to read before posting.

please ban this guy for not reading above statements

Widevine
Ask when a site wants to install Widevine on your computer.

go to google extensions in settings and turn it off problem solved. ask google to remove it from there browser not me.

Who exactly are you claiming are his alt accounts? Just to be clear.

I do understand his concern regarding people not reading this thread and coming in screaming fire.

I've already established from my professional POV that while the PWA should be removed to avoid concern, that I don't believe maliciousness is the focus of this site, and that the PWA is simply a result of GoDaddy software. Do I recommend installing it, no. But to claim that the OP has caused damage by maintaining the site which has a PWA when there have been 0 cases of anyone coming to report that the install has come back malicious, well, that's a stretch.

I haven't personally downloaded the PWA and I don't recommend downloading it though. However, his site isn't the only GoDaddy Website Builder site to do this. I've discovered others which do prompt and others which do not. https://clubmeadowridge.com/ is an example of one of these sites which do prompt in the same fashion. It is also built with the same version as GoDaddy Website Builder.


I keep my discord rather private. You can contact me on Telegram @mattnet if you wish.

https://www.cryptonewsnet.com/ its completely rebuilt and no longer asks for download!

Your logo seems to be missing, as well as some pages don't seem to be completely functional on my end. May want to get back to your developer.

its not fully set up iv had to completly rebuild from scratch, i figured its worth it though so people cant complain about the download file.

That's completely fair!

Glad you moved off GoDaddy :) GL with the new build.

Would have been easier on you if you hadn't defended it in the first place.

Still, Initscri was the voice of reason.   GL with the new project.

i honestly had no control over that feature and i hadn't been able to work for a long time because of the virus. I finally got money to upgrade to better stuff, I am the only one working on the project sorry if its not perfect yet.