# Weird and Strange Warning Error From Extremely Popular Android Forum? **URL:** https://discuss.privacyguides.net/t/weird-and-strange-warning-error-from-extremely-popular-android-forum/17894 **Category:** Questions **Tags:** website, browsers **Created:** 2024-04-16T01:50:42Z **Posts:** 15 ## Post 1 by @Average_Joe — 2024-04-16T01:50:42Z Good morning, Okay so I was a member of this community called the “[AndroidForums.com](http://AndroidForums.com)”. One of the biggest communities for the Android OS FOR SURE. However, recently they changed their domain to “[https://forum.earlybird.club](https://forum.earlybird.club)” and I keep getting warning messages to not access it. I’ve tried using multiple devices and multiple browsers and multiple OS’ but I keep getting the same warning message?!!?! **WARNING: Do not click “accept and continue” if your web browser displays a warning message about this site because I have no idea if there’s real danger or not!** Sorry if I’m breaking any rules by posting this domain name! Thank you for reading my question! --- ## Post 2 by @jonah — 2024-04-16T01:58:23Z what is the warning message? --- ## Post 3 by @anon59474973 — 2024-04-16T02:14:23Z Quad9 blocks the domain. It blocked it from loading on my browser, so I went to [Blocked Domain Tester | Quad9](https://quad9.net/result) and to check and it’s blocked. ![Screenshot](//forum-uploads.privacyguidesusercontent.com/original/2X/0/0895d6adda2859e2a7ca940960b85f68e4865253.png) --- ## Post 4 by @KeepItSimple — 2024-04-16T05:39:43Z NextDNS also blocked this domain “Blocked by AI-Driven Threat Detection”. It looks like website was hacked. --- ## Post 5 by @anon59474973 — 2024-04-16T05:45:48Z Looks like it. Google Safe Browsing says it’s fine but VirusTotal currently has 7 vendors reporting it as “Malware”, “Malicious” or “Phishing”. --- ## Post 6 by @eqrlzo8t — 2024-04-16T05:56:20Z Are you sure `androidforums.com` is the correct biggest community for android? When I check the traffic via [https://www.similarweb.com/website/androidforums.com/#overview](https://www.similarweb.com/website/androidforums.com/#overview) , it just shows 11.4k visits Meanwhile the one I know [https://forums.androidcentral.com](https://forums.androidcentral.com) has 2.2M visits on [https://www.similarweb.com/website/forums.androidcentral.com/#overview](https://www.similarweb.com/website/forums.androidcentral.com/#overview) * * * Hmm… Looks really like a valid change? [Welcome to the Flock: Android Forums is now Early Bird Club! – Early Bird Club](https://earlybird.club/news/what-happened-to-android-forums/) The announcement was from November 21, 2023. --- ## Post 7 by @anon59474973 — 2024-04-16T06:32:56Z Maybe it used to be malicious? I just checked the website on my iPhone using Safari and my ISP’s DNS, and it looks safe. Clicking on “Forum” from the main page [https://earlybird.club](https://earlybird.club) goes to domain that’s blocked. There’s old posts from the early 2010s and newer posts to a few days ago. We can try to get it unblocked. ——— Edit #1: I went to Quad9’s support page and requested it to be removed from their blocklist. I’ll update this post with the outcome. --- ## Post 8 by @anon73250778 — 2024-04-16T16:07:53Z > [@anon59474973](#): > > went to Quad9’s support page and requested it to be removed from their blocklist. You are not responsible for this. Let the website maintainers handle it instead. Heed the warning of the sites till the site admin resolves it. As a user, it might be in your self interest to listen to the warnings instead. If the admins are bad or irresponsible, it speaks volumes to the kind of privacy and security you get. It is not the only android focused forum in the internet. Look elsewhere for the time being. --- ## Post 9 by @wojciechxtx — 2024-04-16T23:04:32Z Something must be going on there… just guys, look here :slight_smile: ![Zrzut ekranu 2024-04-17 o 01.02.25](//forum-uploads.privacyguidesusercontent.com/original/2X/4/49044eef3f387c86ca3c0d4301aa22fb85e70977.jpeg) --- ## Post 10 by @anon59474973 — 2024-04-17T01:04:30Z People on the website are also mentioning that their ISP and some AVs are blocking the website and it only happened since they changed to the new site. Very odd. --- ## Post 11 by @wojciechxtx — 2024-04-17T10:44:16Z > [@anon59474973](#): > > Very odd. Not so much odd… My **wild guess** is that the domain (https(.)earltbird(.)club) had previously been registered to someone who was carrying out shady tactics there and this blockage is a result of these actions. --- ## Post 12 by @Average_Joe — 2024-04-23T03:42:33Z > [@jonah](#): > > what is the warning message? I appreciate your replies! This is the error I kept getting after trying to access the site. I kept getting a similar error after trying to access it with different browsers, different devices and different OS’: _“The owner of **earlybird.club** has configured their web site improperly. To protect your information from being stolen, Firefox has not connected to this web site._ _SSL\_ERROR\_BAD\_CERT\_DOMAIN_ _Warning: we can’t confirm your connection to this web site is secure._ _It may be a misconfiguration or tampering by an attacker. Proceed if you accept the potential risk._ **Okay for some reason I just tried accessing the site and I’m not receiving any errors using Firefox on my Win10 device:** **[Hot | Early Bird Club](https://forum.earlybird.club/feeds/)** **Does this mean it’s safe to use now?** **Can anyone else access the site without receiving errors?** --- ## Post 13 by @anon59474973 — 2024-04-23T04:34:05Z NextDNS with all security options enabled except for AI-Driven Threat Detection does not block the website (unsure with AI-Driven Threat Detection enabled), Quad9 still does and on VirusTotal only 2 out of the original 7 AV vendors still say it is malicious. Make of that what you will. --- ## Post 14 by @pinkandwhite — 2024-04-23T07:10:45Z > [@Average_Joe](#): > > _“The owner of **earlybird.club** has configured their web site improperly. To protect your information from being stolen, Firefox has not connected to this web site._ > > _SSL\_ERROR\_BAD\_CERT\_DOMAIN_ > > _Warning: we can’t confirm your connection to this web site is secure._ > > _It may be a misconfiguration or tampering by an attacker. Proceed if you accept the potential risk._ That means exactly what it says: either the site owner improperly configured it (i.e., the SSL cert they used doesn’t apply to the domain it’s attached to) or there is tampering by an attacker (i.e., they’re trying to pass one site off as another). Probably the former and not the latter. --- ## Post 15 by @ph00lt0 — 2024-04-23T22:07:01Z Iewl avast. That’s the “security” company that sells all your data for advertising no? I probably should write about this topic. You do not need a third party AV. Those days are long over. They are introducing more security and privacy threats than they prevent.