Site compromised?

[salvelinus]

I was just browsing the Quill Gordon Summit thread. When I opened the thread, Malwarebytes Anti-Malware notified me that it had blocked access to 83.222.104.170. Looked up the IP address and it is from Russia, main-ip.ru. Not good.

Edit: here is the line from Malwarebytes log.

2013/02/22 20:21:43 -0500 LENOVO Ken IP-BLOCK 83.222.104.170 (Type: outgoing, Port: 56647, Process: firefox.exe)

 

[Fishidiot]

PAFF has seen an extremely high number of spam attacks from foreign countries including Russia lately. It's been a real headache. Thanks for bringing this to our attention.

 

[Maurice]

Thanks Salvalinus, we have blocked the IP block from Russia.

We at Paflyfish appreciate being informed of these issues.

 

[salvelinus]

Malwarebyes is still blocking that IP address. It only occurs on page 8. Digging a little deeper I have narrowed it down to the link in post 106. I tried to open the link in a new tab and Malwarebytes blocks it. It is a gif image from some website "resources.toolwi.com" whatever that is.

 

[JackM]

I took the embedded image out of wsender's post. See if that solves it. If not I'll need to apologize to him.

 

[salvelinus]

That was the problem. No more alerts. Thanks.