# Firefox is outbound pinging 'Angelfire.' **URL:** \ **Category:** Miscellaneous and Personal Stuff I Must Share\ **Created:** [March 28, 2018, 12:45pm UTC](https://boards.straightdope.com/t/firefox-is-outbound-pinging-angelfire/811346 "2018-03-28T12:45:57Z")\ **Posts on this page:** 10\ **Page:** 1
**Author:** ![Tripler](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/tripler/32/21807_2.png) [@Tripler](https://boards.straightdope.com/u/Tripler)\ **Post date:** [March 28, 2018, 12:45pm UTC](https://boards.straightdope.com/t/firefox-is-outbound-pinging-angelfire/811346/1 "2018-03-28T12:45:57Z")
With the Malware sticky thread that was somewhere around these parts, I thought I’d ask here about something going on with my FireFox. I’m running Win 10 on a desktop, with Malwarebytes blocking outbound traffic from FireFox to ‘[angelfire.com](http://angelfire.com)’ If I recall correctly, Angelfire was one of those do-it-yourself sites, along the lines of Yahoo and [GeoCities.com](http://GeoCities.com). Why is my FireFox trying to ping Angelfire once a day or so? I’ve run all the antivirus scans, cleaners, etc., but to no luck. What gives? Tripler Is my browser still stuck in Netscape’s 1996? ---
**Author:** ![naita](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/naita/32/5862_2.png) [@naita](https://boards.straightdope.com/u/naita)\ **Post date:** [March 28, 2018, 3:15pm UTC](https://boards.straightdope.com/t/firefox-is-outbound-pinging-angelfire/811346/2 "2018-03-28T15:15:35Z")
> [@Tripler](#): > > With the Malware sticky thread that was somewhere around these parts, I thought I’d ask here about something going on with my FireFox. I’m running Win 10 on a desktop, with Malwarebytes blocking outbound traffic from FireFox to ‘[angelfire.com](http://angelfire.com)’ > > If I recall correctly, Angelfire was one of those do-it-yourself sites, along the lines of Yahoo and [GeoCities.com](http://GeoCities.com). Why is my FireFox trying to ping Angelfire once a day or so? I’ve run all the antivirus scans, cleaners, etc., but to no luck. What gives? > > Tripler > Is my browser still stuck in Netscape’s 1996? Does it ping Angelfire even if you don’t use Firefox actively. Once a day or so seems like it could just be the action of some webpage you usually access. ---
**Author:** ![Dragwyr](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/dragwyr/32/2855_2.png) [@Dragwyr](https://boards.straightdope.com/u/Dragwyr)\ **Post date:** [March 28, 2018, 7:26pm UTC](https://boards.straightdope.com/t/firefox-is-outbound-pinging-angelfire/811346/3 "2018-03-28T19:26:08Z")
Perhaps you have a browser add-on that is doing the pinging? If it were me, I would disable all my add-ons and then see if the pinging stops, then I would systematically re-enable each add-on and see what happens. ---
**Author:** ![Tripler](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/tripler/32/21807_2.png) [@Tripler](https://boards.straightdope.com/u/Tripler)\ **Post date:** [March 29, 2018, 1:22am UTC](https://boards.straightdope.com/t/firefox-is-outbound-pinging-angelfire/811346/4 "2018-03-29T01:22:48Z")
I can’t say it’s any particular add on, but I will try that. I’ll also take note of when (during the day) it happens, and how often. I’d only seen it pop up once or twice each evening. When I get the error message, I’ll let y’all know too. I don’t _think_ I got anything from here, but I’d only noticed it when I was surfing the Dope. Tripler More to follow. . . ---
**Author:** ![Tripler](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/tripler/32/21807_2.png) [@Tripler](https://boards.straightdope.com/u/Tripler)\ **Post date:** [March 29, 2018, 2:15am UTC](https://boards.straightdope.com/t/firefox-is-outbound-pinging-angelfire/811346/5 "2018-03-29T02:15:58Z")
There! It just popped up just now (still have it on screen) “Website Blocked.” Site detected as malicious. If you don’t want to block this website blahblahblah. . ." It’s telling me firefox.exe is trying to connect through a port. I’m not sure how to make heads/tails of this report though. Tripler Hrm. . . ---
**Author:** ![Merneith](https://avatars.discourse-cdn.com/v4/letter/m/57b2e6/32.png) [@Merneith](https://boards.straightdope.com/u/Merneith)\ **Post date:** [March 29, 2018, 4:11am UTC](https://boards.straightdope.com/t/firefox-is-outbound-pinging-angelfire/811346/6 "2018-03-29T04:11:01Z")
Post the exact text of the message, in full, or a screenshot thereof. Did you try disabling your addons? You should immediately install and run an up-to-date copy of malwarebytes. Let it do a full scan. ---
**Author:** ![Dragwyr](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/dragwyr/32/2855_2.png) [@Dragwyr](https://boards.straightdope.com/u/Dragwyr)\ **Post date:** [March 29, 2018, 1:42pm UTC](https://boards.straightdope.com/t/firefox-is-outbound-pinging-angelfire/811346/7 "2018-03-29T13:42:38Z")
In that case, I would try running a MalwareBytes scan. Download MalwareBytes, install it and run the updates. Then run a complete system scan. Remove or delete any malware that it detects, then do a reboot and see how things go. ---
**Author:** ![gnoitall](https://avatars.discourse-cdn.com/v4/letter/g/bb73d2/32.png) [@gnoitall](https://boards.straightdope.com/u/gnoitall)\ **Post date:** [March 29, 2018, 2:44pm UTC](https://boards.straightdope.com/t/firefox-is-outbound-pinging-angelfire/811346/8 "2018-03-29T14:44:37Z")
> [@Dragwyr](#): > > In that case, I would try running a MalwareBytes scan. Download MalwareBytes, install it and run the updates. Then run a complete system scan. Remove or delete any malware that it detects, then do a reboot and see how things go. OP already had Malwarebytes. It’s Malwarebyte’s real-time filter which caught the initial indications. ---
**Author:** ![gnoitall](https://avatars.discourse-cdn.com/v4/letter/g/bb73d2/32.png) [@gnoitall](https://boards.straightdope.com/u/gnoitall)\ **Post date:** [March 29, 2018, 2:53pm UTC](https://boards.straightdope.com/t/firefox-is-outbound-pinging-angelfire/811346/9 "2018-03-29T14:53:53Z")
Default Firefox doesn’t do any of that. Possibilities: [ol] [li]An addon has a hidden “phone home” to Angelfilre. We don’t know what addons you’re using; if you want to, list them out here for our analysis. (Or you could do what you were planning on doing, based on **Dragwyr** ’s recommendation.)[/li][li]A website you’re using is accessing a resource at Angelfire. I would assume you would have noticed any correspondence between a website visible in any tab and when the warning pops up, but then again I’ve worked tech support enough to not stake my life on that assumption.[/li][li]It’s not really the browser. You have malware which named itself “firefox.exe”. You never answered **naita** ’s question about whether the warning event occurs only when you’re trying to use the browser. (Not a very likely explanation, but not impossible to rule out given the incomplete information.)[/li][/ol] ---
**Author:** ![Tripler](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/tripler/32/21807_2.png) [@Tripler](https://boards.straightdope.com/u/Tripler)\ **Post date:** [March 30, 2018, 1:00pm UTC](https://boards.straightdope.com/t/firefox-is-outbound-pinging-angelfire/811346/10 "2018-03-30T13:00:43Z")
My apoligies **naita** , I thought I had answered your question. But apparently I didn’t. Here’s more info: 1. The add-ons are: 2. I am looking back at the Malwarebytes reports, and the “Website Blocked” reports seem to correlate to when I’m looking at the SDMB, which is why I brought it here. There are a dozen or so reports of first thing in the morning (coffee before work) and later in the evening (relaxing before turning in). I recall two or three times seeing the MWB popup while on this site, which is why I raised the issue to see if any other Dopers were having the same trouble. I’ve cleared out the crap from my MWB log, to see if I can better track when/what page it happens on. 3. It really only happens when I’m using the browser. Now, on second thought, I’ve totally cleaned out the browser to see if it pings Angelfire while I’m away. The next time it happens, and I’m here, I can provide a screenshot. Just gotta figure out where to host it. Tripler Thanks for the help–this may be helping multiple Dopers!