Website infected

[tabletguy]

Website infected with pop up redirect to a video site. I went through the source (in dev mode) and deleted maybe 8+ different script injections to get the site to actually work long enough to report it.

Tried several browsers as well. Site blockers also didn't work.

[MidnightCowboy]

Originally Posted by tabletguy

Website infected with pop up redirect to a video site.

Please provide links so we can check this out.

[Sea Mac]

It is the Ad service we are using ... they sell Ad Banner space to ANYBODY Without vetting anything ...

If I'm NOT Logged in: I instantly see Malware Downloads offered as "Needed Updates" on Almost ALL of our pages. The ADS Are the Source of the script injections and the last week has been particularly bad.

I strongly suggest a Different Ad Provider because the Current one doesn't know or doesn't CARE about 3/4 of their Ad Clients being BOT Owners always looking to recruit new suckers to their Zombie armies.

Sea Mac

[Sea Mac]

https://upgulpinon.com/12?rnd=305729...AflIchwCWrmXQ=

Redirects to:
https://2update.yourtechplace4upgrad...37&sub=3924060


https://upgulpinon.com/12?rnd=295914...AflIchwCWrmXQ=

Redirects To:
https://livecheck.yourtechplace4upgr...88&sub=3924060

Every page I'm not Logged in on gets a pop under that INSISTS I download and Install "Player Update" - and that download pops over and Blocks access to our pages! The site is useless if you are not logged in - all of our gullible guests that download the update are getting infected ... won't be long before Google lists us as a malware distribution site and blocks us.

https://upgulpinon.com/12?rnd=336514...AflIchwCWrmXQ=

Redirects to:
https://versionsupport.legendarysite...0&sid=4f85346b

There. 3 Different Ad URLs that direct to 2 different attack domains in 3 minutes on 3 pages ... I could go on getting different attack site malware URLs All day ... but I'm leaving for the day now ... I have a life. Our Ad server is serving Malware EXCLUSIVELY ... between Rev Content and ads from https://upgulpinon.com/12 it is ALL Infected.

Really, I'd rather we shut the site down than be forced to serve drive by malware payloads to unsuspecting guests who turn to us for HELP. Please ditch this scammy crooked Ad revenue source: as it HAS Ruined the site.

PS Firefox Blocks the Ads from Showing ... If I browse with SAFARI and I'm not logged in then EVERY Page has an attack. SAFARI is a W H O R E for Ads

[Sea Mac]

Google Safe Browsing confirms that those 2 domains I was redirected to ARE Malware Domains!

https://transparencyreport.google.co...grades.work%2F

https://transparencyreport.google.co...4upgrades.info

[Jojo Yee]

Originally Posted by Sea Mac

Google Safe Browsing confirms that those 2 domains I was redirected to ARE Malware Domains!

https://transparencyreport.google.co...grades.work%2F

https://transparencyreport.google.co...4upgrades.info

Thanks, C Mc. The links have been sent to the ad network for filtering out.

[rhiannon]

Originally Posted by Sea Mac

Google Safe Browsing confirms that those 2 domains I was redirected to ARE Malware Domains!

https://transparencyreport.google.co...grades.work%2F

https://transparencyreport.google.co...4upgrades.info

Thanks for tracking that down. We've had people reporting they can't access the site because of the ads. It's something we're trying to resolve.

[Sea Mac]

More attack domains we are referring folks to:

https://transparencyreport.google.co...e2updates.info

https://s3.amazonaws.com/helpful-cat...icu&bri=safari

https://managegreatly-therefinedfile...76&sid=3924060

https://www.wix.com/showyourart/intango-stores?utm_campaign=bd_intango_ecom&experiment_id= 85391808460^ixSrJXD4mN3NvzGrE8jh_g

https://s3.amazonaws.com/135878587/c...M0FFRDMzNDA%3d

https://transparencyreport.google.co...orupgrade.info