Search Support

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Learn More

Thunderbird keeps trying to connect to websites that are infected. How do I stop this? Also, Is contactsupport.com associated with you?

  • 9 replies
  • 1 has this problem
  • 46 views
  • Last reply by David Foltz

more options

My virus control program (Bitdefender) is blocking various infected websites that Thunderbird is trying to connect to. I don't know how to stop this. In a Google Search, it shows "contactsupport.com/thunderbird" that is associated with Mozilla Thunderbird. Do you sponsor this website? Also, do I need to contact Bitdefender (my virus control program) to see why Thunderbird keeps trying to connect my computer with various websites that are infected? A couple of samples of my virus protection program blocking a site are:

The application thunderbird.exe accesses a web resource http://opiteousan.tk/?number=844-664-7849 that has been detected as infected. The web resource has been successfully blocked and your PC is now safe.

The application thunderbird.exe accesses a web resource http://192.81.219.192/alert/ch/?a5b0d5bcf7107c0tfn1b5b0d5bcf710c2=+18665084496&c5b0d5bcf711230ftfn1d5b0d5bcf71165=(866)%20508-4496 that has been detected as infected. The web resource has been successfully blocked and your PC is now safe.

Please advise. Thanks.

My virus control program (Bitdefender) is blocking various infected websites that Thunderbird is trying to connect to. I don't know how to stop this. In a Google Search, it shows "contactsupport.com/thunderbird" that is associated with Mozilla Thunderbird. Do you sponsor this website? Also, do I need to contact Bitdefender (my virus control program) to see why Thunderbird keeps trying to connect my computer with various websites that are infected? A couple of samples of my virus protection program blocking a site are: The application thunderbird.exe accesses a web resource http://opiteousan.tk/?number=844-664-7849 that has been detected as infected. The web resource has been successfully blocked and your PC is now safe. The application thunderbird.exe accesses a web resource http://192.81.219.192/alert/ch/?a5b0d5bcf7107c0tfn1b5b0d5bcf710c2=+18665084496&c5b0d5bcf711230ftfn1d5b0d5bcf71165=(866)%20508-4496 that has been detected as infected. The web resource has been successfully blocked and your PC is now safe. Please advise. Thanks.

Chosen solution

Do a test. Exit any browser that is open.

Exit and restart Thunderbird Do not select an emails, just let Thunderbird try to check server for emails.

Does the browser auto try to open one of those bad webpages?

Wait a while - maybe check AV. If nothing happens...

Check received emails. Select an email with links in it. Do not click on anything.

Notes about 'links' in emails: If you hover over a link (not click), it will show you the real link web url in the bottom status bar. This is one way of checking to see if the link you think you are clicking on is really opening on that link or a different one.


Remote content: Do you allow Thunderbird to see show remote content? REmote content is like an image which could link (or send information) to a url. By default Thunderbird does not allow remote content, but that depends upon what you have allowed. https://support.mozilla.org/en-US/kb/remote-content-in-messages

Read this answer in context 👍 0

All Replies (9)

more options
My virus control program (Bitdefender) is blocking various infected websites that Thunderbird is trying to connect to.

What are you doing when this happens?

In a Google Search, it shows "contactsupport.com/thunderbird" that is associated with Mozilla Thunderbird. Do you sponsor this website?

This domain is for sale. This forum is the official Thunderbird support venue.

more options

Thanks for your answer regarding "contactsupport.com/thunderbird". I would like to know what I should do regarding my Thunderbird Email Program that keeps on trying to contact infected websites? My virus protection program (Bitdefender) is blocking them to keep me safe; but I want Thunderbird to stop trying to connect to infected websites. I have had Thunderbird for a long time without experiencing malware problems. I recently uninstalled Thunderbird and then reinstalled it. But that did not solve the problem. I have not contacted my virus control program yet for their support regarding Thunderbird. If I do, they will probably have me to uninstall Thunderbird for good, which I prefer not to do if at all possible. Is there anymore advise that you can give me that would correct this problem that I am experiencing with Thunderbird? If so, it would be greatly appreciated. Thanks for your time and advice!

more options
Is there anymore advise that you can give me

Just answer the question(s) being asked.

I'm not sure why you marked this topic is solved, when apparently it's not. This will lower your chance to get this resolved, when others will just skip over a solved topic.

Modified by christ1

more options

Sorry about that. I did not mean to mark it "Solved". I just don't know what to do about this problem that I am currently experiencing. I would like to get it solved if at all possible. If that's not possible, I will probably have to "do away" with my Mozilla Thunderbird Account. Thanks.

more options

How do I stop Thunderbird from trying to access various websites that have malware? It has attempted to do this DAILY since May 24th. My virus control program has successfully block the accesses each time. A couple of the attempts are:

The application thunderbird.exe accesses a web resource http://192.81.219.9/alert/ch/?a5b1937d70754f0tfn1b5b1937d70758e=+18443951479&c5b1937d7075c60ftfn1d5b1937d7075fe=(844)%20395-1479 that has been detected as infected. The web resource has been successfully blocked and your PC is now safe.

The application thunderbird.exe accesses a web resource http://198.199.66.172/alert/ch/?a5b169a860a0790tfn1b5b169a860a0b5=+18443951479&c5b169a860a0ef0ftfn1d5b169a860a134=(844)%20395-1479 that has been detected as infected. The web resource has been successfully blocked and your PC is now safe.

Your help would be greatly appreciated. Thanks.

more options

You need to answer the questions being asked. As christ1 has asked: 'What are you doing when this occurs?'

When you start up thunderbird, it probably auto connects to server to download emails.

  1. Does this attempting to open your browser on bad webpages occur before you have done anything?
  2. Does it occur automatically as you click to open an email?
  3. Does it occur when you click on an image or link in an email you have opened?
more options

I really don't know. I read a lot of emails this morning and opened many links. Checking with my antivirus program after that, no attempt of Thunderbird accessing any website with malware, so far. Checking the logs in my antivirus program, it shows that Thunderbird tries to access a bad website no more than a couple of times a day (mainly once a day). If I had to guess, number 2 above would be it.

more options

Chosen Solution

Do a test. Exit any browser that is open.

Exit and restart Thunderbird Do not select an emails, just let Thunderbird try to check server for emails.

Does the browser auto try to open one of those bad webpages?

Wait a while - maybe check AV. If nothing happens...

Check received emails. Select an email with links in it. Do not click on anything.

Notes about 'links' in emails: If you hover over a link (not click), it will show you the real link web url in the bottom status bar. This is one way of checking to see if the link you think you are clicking on is really opening on that link or a different one.


Remote content: Do you allow Thunderbird to see show remote content? REmote content is like an image which could link (or send information) to a url. By default Thunderbird does not allow remote content, but that depends upon what you have allowed. https://support.mozilla.org/en-US/kb/remote-content-in-messages

more options

Thank you for your support. My computer was being attacked via "Showing Remote Content". I removed all of my emails from allowing remote content to be shown. Problem solved!