The Ad Reporting Thread

Cerium

General Manager
Administrator
Oct 23, 2017
935
It looks like most of these latest reports are coming from a couple European countries. I've reached out to our ad agency so that they can investigate further. Thanks for the details.
 

Gentlemen

Member
Oct 25, 2017
3,457
Getting Trojan warnings from Malwarebytes on every page of Era now. Basically happens every time the banners reload.
 

Tovarisc

Member
Oct 25, 2017
6,477
FIN


Every time I loaded any ERA page with ad(s) in it it would force scroll to bottom of page, load for a bit and then force "ad" pictured above into the same tab where ERA page was open. Overtaking tab. Only website where this occurs is on ERA and ad blocking ERA "fixed" issue. Started to happen ~20 minutes ago.

I live in Finland.
 

Nordicus

Member
Oct 29, 2017
493
Finland


Every time I loaded any ERA page with ad(s) in it it would force scroll to bottom of page, load for a bit and then force "ad" pictured above into the same tab where ERA page was open. Overtaking tab. Only website where this occurs is on ERA and ad blocking ERA "fixed" issue. Started to happen ~20 minutes ago.

I live in Finland.
Getting the same issue every once in a while myself
 

TUFCfan

Member
Oct 27, 2017
133

Just had a redirect after leaving a resetera thread open for a few minutes whist popping away from my computer.

I'm using Firefox on Windows 10 (desktop).

It changes URL several times:


 

Woffls

Member
Nov 25, 2017
516
London
Just got directed to this URL after idling for a few seconds. It made some loud ass beeping sounds (far louder than I'd expect for my volume level, so might have been internal buzzer??) so I bailed without looking at anything. Usual "oh no your windows are virus" bullshit:


Edge 44.18362.1.0
Windows 10
London, UK
 

water_wendi

Member
Oct 25, 2017
1,557


i was typing a reply when the ad at the bottom cycled and then my browser was hijacked. i terminated the Firefox process quickly so i didnt get a chance to take screen shots of the page it went to but here is a snap of my history when it happened.

Firefox 67.0.4
Windows 10
US
 

Cerium

General Manager
Administrator
Oct 23, 2017
935
Dispatched another email regarding these latest reports. Thanks as always.
 

Spence

Member
Oct 27, 2017
485
Sweden
Same here, gotten a fake claim that I won a phone from my ISP multiple times now which redirects to eu.theinsidemarket.top
 

skrskg

Member
Oct 27, 2017
66
Sweden
The laptop experience have been horrible here (Sweden) today. Using Edge (Windows 10), this ad has taken over my browser 8 out of 10 times I view Era (and it's not happening anywhere else).

 
Oct 27, 2017
305
Finland
I'm constantly receiving a very similar redirect as the ones mentioned above (the Telia redirect brought up Tovarisk and Famassu and the one brought up by skrskg, propably similar to test_account's too) with the advert claiming I won something.

For the me the the URL's start is eu.globalfundforwomen.icu
 

Cerium

General Manager
Administrator
Oct 23, 2017
935
We believe the Scandinavian ad issues from earlier in the week should be resolved -- please let us know if the problems there persist.

I've contacted our partners again regarding the latest reports we've received which appear mainly to be from the UK.
 

Famassu

Member
Oct 27, 2017
5,961
Getting the same shit as before, except even more aggressively (I had to come back to this page for about 20 times to get this message written and even then only because I installed NoScript). Adress is different "eu.globalintegrativemedicalsolutions.top"
 

Spence

Member
Oct 27, 2017
485
Sweden
Yep it's back, hostname eu.globaljetservices.icu, I have to turn adblocker on or I can't even type here before it redirects.
 

Nitpicker_Red

Member
Nov 3, 2017
975
I'm getting a full screen takeover fitted to my internet provider and IP claiming that they are giving me free stuff

URL:
https://eu.moneysavingexpertregularsaver.icu/1fc6e87e3c9c14a98bf5a033fbc9b25b/index.html?ip=80.80.200.200&siteid=YjY0MTQxMTUwNTc4ODU3NzE5MTEjMTU2MzAxNjg1NEA0OTA3QF81Y2M3NjRjMGViMTJlMTljZjJhYmIwZDFiOGNmZmEwNw

(I changed the IP and removed the trackid in the url)

Browser: Chrome
OS: Windows 7


Kind of startled me, I'll still run an antivirus scan (Avast) to check if it's on my end but since it happened repeatedly on several Resetera pages that I opened in a row, and there's a thread for it, here goes.
Adblocker was set to disabled for Resetera, I guess I'll enable it for now...
 
Last edited:

Chocobo115

Member
Oct 27, 2017
928
Sweden
Getting thoose phishing ads as well (in Sweden). Happens so often that it makes me want to stay away from browsing resetera...

I’m browsing on Safari through my iPad
 

Cerium

General Manager
Administrator
Oct 23, 2017
935
Seems like a issue affecting a lot of ad networks at the moment. I've contacted our partners to track down the problem.
 

Firebrand

Member
Oct 25, 2017
1,706
In my case it's always the same seemingly unrelated ad appearing before the redirect, for something called "Braze".
 

Box

Avenger
Oct 27, 2017
3,512
Lancashire
Code:
http://adclick.g.doubleclick.net/pcs/click?adurl=https%3A%2F%2Fadschip.com%2Fpage%2F%3FRSSg31Kzr86PidL5GIPtxjMeX
Getting the above blocked by Ublock's filter. Randomly pops up when browsing Era. Good chance of coming back to it if off to make a cuppa.
 

Spyware

Member
Oct 26, 2017
881
Sweden
Got the hijacked page ad about my ISP just now. Dunno if it matters that more people report it, seems to be a known issue.

Safari in iOS and this was the beginning of the URL
Code:
https://eu.moneysavingexpertvwemissions.top