Gizmos Freeware Reviews  

Go Back   Gizmo's Freeware Forum > Site Forums > Comments, Suggestions and Feedback

Reply
 
Thread Tools Display Modes
Old 04. Apr 2021, 04:43 PM   #1 (permalink)
Member
 
Join Date: Jun 2008
Posts: 2
Default Website infected

Website infected with pop up redirect to a video site. I went through the source (in dev mode) and deleted maybe 8+ different script injections to get the site to actually work long enough to report it.

Tried several browsers as well. Site blockers also didn't work.
tabletguy is offline   Reply With Quote
Old 04. Apr 2021, 08:22 PM   #2 (permalink)
Site Manager
 
MidnightCowboy's Avatar
 
Join Date: Aug 2008
Location: South American Banana Republic, third bunch from the left
Posts: 15,383
Default

Quote:
Originally Posted by tabletguy View Post
Website infected with pop up redirect to a video site.
Please provide links so we can check this out.
__________________
Buy a Hoover and prove technology sucks.
MidnightCowboy is offline   Reply With Quote
Old 11. Apr 2021, 03:47 PM   #3 (permalink)
Senior Member
 
Sea Mac's Avatar
 
Join Date: Apr 2008
Location: Body: San Diego | Mind: Lost | Heart: With You
Posts: 636
Rejected I confirm we are off the Net

It is the Ad service we are using ... they sell Ad Banner space to ANYBODY Without vetting anything ...

If I'm NOT Logged in: I instantly see Malware Downloads offered as "Needed Updates" on Almost ALL of our pages. The ADS Are the Source of the script injections and the last week has been particularly bad.

I strongly suggest a Different Ad Provider because the Current one doesn't know or doesn't CARE about 3/4 of their Ad Clients being BOT Owners always looking to recruit new suckers to their Zombie armies.

Sea Mac
__________________
"Software Santa" owes a debt of thanks to Tech Support Alert. Thank You.
Sea Mac is offline   Reply With Quote
Old 12. Apr 2021, 11:09 AM   #4 (permalink)
Senior Member
 
Sea Mac's Avatar
 
Join Date: Apr 2008
Location: Body: San Diego | Mind: Lost | Heart: With You
Posts: 636
Thumbs down Here are 3 more attacks documented

https://upgulpinon.com/12?rnd=305729...AflIchwCWrmXQ=

Redirects to:
https://2update.yourtechplace4upgrad...37&sub=3924060


https://upgulpinon.com/12?rnd=295914...AflIchwCWrmXQ=

Redirects To:
https://livecheck.yourtechplace4upgr...88&sub=3924060

Every page I'm not Logged in on gets a pop under that INSISTS I download and Install "Player Update" - and that download pops over and Blocks access to our pages! The site is useless if you are not logged in - all of our gullible guests that download the update are getting infected ... won't be long before Google lists us as a malware distribution site and blocks us.

https://upgulpinon.com/12?rnd=336514...AflIchwCWrmXQ=

Redirects to:
https://versionsupport.legendarysite...0&sid=4f85346b

There. 3 Different Ad URLs that direct to 2 different attack domains in 3 minutes on 3 pages ... I could go on getting different attack site malware URLs All day ... but I'm leaving for the day now ... I have a life. Our Ad server is serving Malware EXCLUSIVELY ... between Rev Content and ads from https://upgulpinon.com/12 it is ALL Infected.

Really, I'd rather we shut the site down than be forced to serve drive by malware payloads to unsuspecting guests who turn to us for HELP. Please ditch this scammy crooked Ad revenue source: as it HAS Ruined the site.

PS Firefox Blocks the Ads from Showing ... If I browse with SAFARI and I'm not logged in then EVERY Page has an attack. SAFARI is a W H O R E for Ads
__________________
"Software Santa" owes a debt of thanks to Tech Support Alert. Thank You.

Last edited by Sea Mac; 12. Apr 2021 at 11:17 AM.
Sea Mac is offline   Reply With Quote
Old 12. Apr 2021, 11:39 AM   #5 (permalink)
Senior Member
 
Sea Mac's Avatar
 
Join Date: Apr 2008
Location: Body: San Diego | Mind: Lost | Heart: With You
Posts: 636
Thumbs down Attack sites confirmed

Google Safe Browsing confirms that those 2 domains I was redirected to ARE Malware Domains!

https://transparencyreport.google.co...grades.work%2F

https://transparencyreport.google.co...4upgrades.info
__________________
"Software Santa" owes a debt of thanks to Tech Support Alert. Thank You.
Sea Mac is offline   Reply With Quote
Old 12. Apr 2021, 03:10 PM   #6 (permalink)
Maestro di Search
 
Jojo Yee's Avatar
 
Join Date: Jul 2008
Posts: 7,953
Default

Quote:
Originally Posted by Sea Mac View Post
Google Safe Browsing confirms that those 2 domains I was redirected to ARE Malware Domains!

https://transparencyreport.google.co...grades.work%2F

https://transparencyreport.google.co...4upgrades.info
Thanks, C Mc. The links have been sent to the ad network for filtering out.
Jojo Yee is offline   Reply With Quote
Old 12. Apr 2021, 04:55 PM   #7 (permalink)
Senior Editor
 
rhiannon's Avatar
 
Join Date: Jul 2008
Location: Land of Enchantment
Posts: 750
Default

Quote:
Originally Posted by Sea Mac View Post
Google Safe Browsing confirms that those 2 domains I was redirected to ARE Malware Domains!

https://transparencyreport.google.co...grades.work%2F

https://transparencyreport.google.co...4upgrades.info
Thanks for tracking that down. We've had people reporting they can't access the site because of the ads. It's something we're trying to resolve.
rhiannon is offline   Reply With Quote
Old Yesterday, 02:49 AM   #8 (permalink)
Senior Member
 
Sea Mac's Avatar
 
Join Date: Apr 2008
Location: Body: San Diego | Mind: Lost | Heart: With You
Posts: 636
Thumbs down More attack ads Referring Domains

More attack domains we are referring folks to:

https://transparencyreport.google.co...e2updates.info

https://s3.amazonaws.com/helpful-cat...icu&bri=safari

https://managegreatly-therefinedfile...76&sid=3924060

https://www.wix.com/showyourart/intango-stores?utm_campaign=bd_intango_ecom&experiment_id= 85391808460^ixSrJXD4mN3NvzGrE8jh_g

https://s3.amazonaws.com/135878587/c...M0FFRDMzNDA%3d

https://transparencyreport.google.co...orupgrade.info
__________________
"Software Santa" owes a debt of thanks to Tech Support Alert. Thank You.
Sea Mac is offline   Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are Off
Pingbacks are Off
Refbacks are Off



All times are GMT +1. The time now is 09:56 PM.


Powered by vBulletin® Version 3.8.7
Copyright ©2000 - 2021, vBulletin Solutions, Inc.