Angalin

Board Issues 4

1,297 posts in this topic

We think it's a malware ad being served to us by accident. Have notified the ad network. IF anyone can capture information -- which ad appears when this happen, any HTTP addresses related to them, etc., that'd be helpful.

Share this post


Link to post
Share on other sites

I'm getting regularly attacked on this site, and no other site. Eset is intercepting it, but somebody wants to shift me to some other site to update Java.

Same happened to me last night.

Share this post


Link to post
Share on other sites

We think it's a malware ad being served to us by accident. Have notified the ad network. IF anyone can capture information -- which ad appears when this happen, any HTTP addresses related to them, etc., that'd be helpful.

It hasn't happened today. Happened 10-12 times last night. It didn't let me cut and paste the http or IP address, but if I see it again I'll write them down and report.

Share this post


Link to post
Share on other sites

Found a report in ESET.



Looks like www.downrapid.com/favicon.ico



Here is the event log from last night.



[Don't click on those links, whoever is looking at this. Unless you just want to. At any rate, let's be clear, I am not inviting you to click on those links.]



8/15/2014 9:18:45 PM http://www.downrapid.com/favicon.ico Blocked by PUA blacklist C:\Program Files (x86)\Google\Chrome\Application\chrome.exe Home\Glen

8/15/2014 9:18:44 PM http://www.downrapid.com/node/pkg/loader.exe?offer_id=16526&aff_id=11156&transaction_id=9c3e1076-ad73-4474-8dd4-4238b5b87b28 Blocked by PUA blacklist C:\Program Files (x86)\Google\Chrome\Application\chrome.exe Home\Glen

8/15/2014 9:18:15 PM http://www.downrapid.com/favicon.ico Blocked by PUA blacklist C:\Program Files (x86)\Google\Chrome\Application\chrome.exe Home\Glen

8/15/2014 9:18:15 PM http://www.downrapid.com/node/pkg/loader.exe?offer_id=16526&aff_id=11156&transaction_id=e510f3ce-a786-4528-95af-8d4adf919ff4 Blocked by PUA blacklist C:\Program Files (x86)\Google\Chrome\Application\chrome.exe Home\Glen

8/15/2014 9:17:56 PM http://www.downrapid.com/favicon.ico Blocked by PUA blacklist C:\Program Files (x86)\Google\Chrome\Application\chrome.exe Home\Glen

8/15/2014 9:17:56 PM http://www.downrapid.com/node/pkg/loader.exe?offer_id=16526&aff_id=11156&transaction_id=72a64581-28c4-4e11-ba8f-b2ccb8a876b3 Blocked by PUA blacklist C:\Program Files (x86)\Google\Chrome\Application\chrome.exe Home\Glen

8/15/2014 9:17:49 PM http://www.downrapid.com/favicon.ico Blocked by PUA blacklist C:\Program Files (x86)\Google\Chrome\Application\chrome.exe Home\Glen

8/15/2014 9:17:49 PM http://www.downrapid.com/node/pkg/loader.exe?offer_id=16526&aff_id=11156&transaction_id=7d86511b-c274-4e10-98e9-44fa019a215e Blocked by PUA blacklist C:\Program Files (x86)\Google\Chrome\Application\chrome.exe Home\Glen

8/15/2014 8:30:28 PM http://www.downrapid.com/favicon.ico Blocked by PUA blacklist C:\Program Files (x86)\Google\Chrome\Application\chrome.exe Home\Glen

8/15/2014 8:30:28 PM http://www.downrapid.com/node/pkg/loader.exe?offer_id=16526&aff_id=11156&transaction_id=9377e81f-4c70-4f68-97e4-f2238653bac1 Blocked by PUA blacklist C:\Program Files (x86)\Google\Chrome\Application\chrome.exe Home\Glen

8/15/2014 8:29:56 PM http://www.downrapid.com/favicon.ico Blocked by PUA blacklist C:\Program Files (x86)\Google\Chrome\Application\chrome.exe Home\Glen

8/15/2014 8:29:56 PM http://www.downrapid.com/node/pkg/loader.exe?offer_id=16526&aff_id=11156&transaction_id=d3cf6d72-4102-459e-a939-aa4c5ae88dcd Blocked by PUA blacklist C:\Program Files (x86)\Google\Chrome\Application\chrome.exe Home\Glen

8/15/2014 8:19:55 PM http://www.downrapid.com/favicon.ico Blocked by PUA blacklist C:\Program Files (x86)\Google\Chrome\Application\chrome.exe Home\Glen

8/15/2014 8:19:55 PM http://www.downrapid.com/node/pkg/loader.exe?offer_id=16526&aff_id=11156&transaction_id=931ea1ff-66ec-4428-9ac3-155da3cc4ecf Blocked by PUA blacklist C:\Program Files (x86)\Google\Chrome\Application\chrome.exe Home\Glen

8/12/2014 6:55:49 PM http://creative.m2pub.com/matomy/scripts/popunder/popunder.js Blocked by PUA blacklist C:\Program Files (x86)\Google\Chrome\Application\chrome.exe Home\Glen

8/12/2014 6:55:42 PM http://creative.m2pub.com/matomy/scripts/popunder/popunder.js Blocked by PUA blacklist C:\Program Files (x86)\Google\Chrome\Application\chrome.exe Home\Glen

Edited by Hodor's Dragon

Share this post


Link to post
Share on other sites

A user named Babank is starting a lot of spam threads in the General forum. Sorry I am on mobile and not at ho.e, so not sure where to report it.

Share this post


Link to post
Share on other sites

I've reported the latest one


Share this post


Link to post
Share on other sites

Since yesterday (or the day before yesterday, I'm not sure), the "Ignore" list ceased to work. I can see everything! And it's disturbing.


Share this post


Link to post
Share on other sites

mine works.



mind you, most of the people I ignore end up banned anyway


Share this post


Link to post
Share on other sites

I have an issue with a current ad on the site - a betting one (no idea if the adverts are supposed to be smart, but I keep getting gambling and smoking ones - I do neither). A William Hill one keeps opening up the AppStore in my ipad and rendering the forum nearly unusable.

Share this post


Link to post
Share on other sites

I'm posting this from my mobile connection because I am unable to even view the forums on my PC. I only get a message that I don't have permission for that and that I am not allowed to visit this community.

I realize I am just a lurker but I am at a loss as to why I would be IP banned on my home connection.

Please help!

Share this post


Link to post
Share on other sites

Targh,

I've contacted our advertising partners. In fact, I've noticed a proliferation of gambling ads as well and am going to see if we can just get rid of those. Don't have any moral qualms with gambling, but they always give sites a seedy quality.

haakon,

Mail me at [email protected], look at whatismyip.org, and send what your IP address is on your PC. You're probably falling foul of an old IP block.

Edited by Ran

Share this post


Link to post
Share on other sites

I don't know if you have done anything or I have just been lucky once out of about 50 tries and been able to load this page without it redireting..



this morning every page/link I have clicked on has automatically re-directed me - normally to the update your flash now although sometimes to other suspisious sites. I've tried on and off for a few hours must have and its done it every time without fail no matter which part of the forum I try to load. (apart from just now when it worked)



Its only the forum that is effecting me. I can look at other sites without any problems. I know you want more speciffic info, but I have not been able to open the forum for long enough to read what you need.


Share this post


Link to post
Share on other sites

I keep getting this when I try to view various pages on the forum. I'm not sure if that is a problem at my end or with the board.


Also, on the mobile site I am now getting a PayPal ad across the top of the page (but only when I actually use it on my mobile, so I'm struggling to get a print screen)


Share this post


Link to post
Share on other sites

I keep getting this when I try to view various pages on the forum. I'm not sure if that is a problem at my end or with the board.

Me too.

Share this post


Link to post
Share on other sites

About the loading problems from a few weeks ago, I also have no more issues, not sure when it went away, suspecting ISP cache refresh (usual time is 48h after all)

Anyway, I wanted to report a weird behaviour on the mobile version: it's not the first time I have it, but I seldom use my phone to access the site anyway, but sometimes, on a page or another, the site refuses to display as the mobile version: the full one tries to load, and it just takes forever. I can try to click "use mobile version" all I want, it does not work... What works, sometimes, is clicking "back" (goes back to previous page and nice mobile theme), waiting some time and reclicking the link. I got it recently when not logged in, multiple times on the main page, opening gen chat and opening lit.

I wonder if one ad could not force the site into full version.

Share this post


Link to post
Share on other sites

Targh,

I've contacted our advertising partners. In fact, I've noticed a proliferation of gambling ads as well and am going to see if we can just get rid of those. Don't have any moral qualms with gambling, but they always give sites a seedy quality.

Cheers!

Share this post


Link to post
Share on other sites

Chrome keeps warning me about getting diverted to this phishing website:



www.flash.com.fouis.com.


Share this post


Link to post
Share on other sites

Chrome keeps warning me about getting diverted to this phishing website:

www.flash.com.fouis.com.

Firefox is the same. Its been more frequent than usual today

Share this post


Link to post
Share on other sites

Firefox is the same. Its been more frequent than usual today

It's bloody annoying!

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!


Register a new account

Sign in

Already have an account? Sign in here.


Sign In Now