• The GiftBot 2.0 Launch Giveaway Extravaganza has come to a close with an astounding 8073 games given away to the community by 696 members, a huge success thanks to you! The gifting now continues with more official prizes in the new Gaming Giveaways |OT|. Leftover Steam codes are also being given away to the PC Gaming Era community.

The Ad Reporting Thread

OP
OP
Cerium

Cerium

General Manager
Administrator
Oct 23, 2017
1,216
It looks like most of these latest reports are coming from a couple European countries. I've reached out to our ad agency so that they can investigate further. Thanks for the details.
 

Gentlemen

Member
Oct 25, 2017
4,105
Getting Trojan warnings from Malwarebytes on every page of Era now. Basically happens every time the banners reload.
 

Tovarisc

Member
Oct 25, 2017
7,763
FIN


Every time I loaded any ERA page with ad(s) in it it would force scroll to bottom of page, load for a bit and then force "ad" pictured above into the same tab where ERA page was open. Overtaking tab. Only website where this occurs is on ERA and ad blocking ERA "fixed" issue. Started to happen ~20 minutes ago.

I live in Finland.
 

Nordicus

Member
Oct 29, 2017
559
Finland


Every time I loaded any ERA page with ad(s) in it it would force scroll to bottom of page, load for a bit and then force "ad" pictured above into the same tab where ERA page was open. Overtaking tab. Only website where this occurs is on ERA and ad blocking ERA "fixed" issue. Started to happen ~20 minutes ago.

I live in Finland.
Getting the same issue every once in a while myself
 

TUFCfan

Member
Oct 27, 2017
243

Just had a redirect after leaving a resetera thread open for a few minutes whist popping away from my computer.

I'm using Firefox on Windows 10 (desktop).

It changes URL several times:


 

Woffls

Member
Nov 25, 2017
639
London
Just got directed to this URL after idling for a few seconds. It made some loud ass beeping sounds (far louder than I'd expect for my volume level, so might have been internal buzzer??) so I bailed without looking at anything. Usual "oh no your windows are virus" bullshit:


Edge 44.18362.1.0
Windows 10
London, UK
 

water_wendi

Member
Oct 25, 2017
1,823


i was typing a reply when the ad at the bottom cycled and then my browser was hijacked. i terminated the Firefox process quickly so i didnt get a chance to take screen shots of the page it went to but here is a snap of my history when it happened.

Firefox 67.0.4
Windows 10
US
 
OP
OP
Cerium

Cerium

General Manager
Administrator
Oct 23, 2017
1,216
Dispatched another email regarding these latest reports. Thanks as always.
 

Spence

Member
Oct 27, 2017
591
Sweden
Same here, gotten a fake claim that I won a phone from my ISP multiple times now which redirects to eu.theinsidemarket.top
 

skrskg

Member
Oct 27, 2017
192
Sweden
The laptop experience have been horrible here (Sweden) today. Using Edge (Windows 10), this ad has taken over my browser 8 out of 10 times I view Era (and it's not happening anywhere else).

 
Oct 27, 2017
388
Finland
I'm constantly receiving a very similar redirect as the ones mentioned above (the Telia redirect brought up Tovarisk and Famassu and the one brought up by skrskg, propably similar to test_account's too) with the advert claiming I won something.

For the me the the URL's start is eu.globalfundforwomen.icu
 
OP
OP
Cerium

Cerium

General Manager
Administrator
Oct 23, 2017
1,216
We believe the Scandinavian ad issues from earlier in the week should be resolved -- please let us know if the problems there persist.

I've contacted our partners again regarding the latest reports we've received which appear mainly to be from the UK.
 

Famassu

Member
Oct 27, 2017
6,809
Getting the same shit as before, except even more aggressively (I had to come back to this page for about 20 times to get this message written and even then only because I installed NoScript). Adress is different "eu.globalintegrativemedicalsolutions.top"
 

Spence

Member
Oct 27, 2017
591
Sweden
Yep it's back, hostname eu.globaljetservices.icu, I have to turn adblocker on or I can't even type here before it redirects.
 

Nitpicker_Red

Member
Nov 3, 2017
1,107
I'm getting a full screen takeover fitted to my internet provider and IP claiming that they are giving me free stuff

URL:
https://eu.moneysavingexpertregularsaver.icu/1fc6e87e3c9c14a98bf5a033fbc9b25b/index.html?ip=80.80.200.200&siteid=YjY0MTQxMTUwNTc4ODU3NzE5MTEjMTU2MzAxNjg1NEA0OTA3QF81Y2M3NjRjMGViMTJlMTljZjJhYmIwZDFiOGNmZmEwNw

(I changed the IP and removed the trackid in the url)

Browser: Chrome
OS: Windows 7


Kind of startled me, I'll still run an antivirus scan (Avast) to check if it's on my end but since it happened repeatedly on several Resetera pages that I opened in a row, and there's a thread for it, here goes.
Adblocker was set to disabled for Resetera, I guess I'll enable it for now...
 
Last edited:

Chocobo115

Member
Oct 27, 2017
947
Sweden
Getting thoose phishing ads as well (in Sweden). Happens so often that it makes me want to stay away from browsing resetera...

I’m browsing on Safari through my iPad
 
OP
OP
Cerium

Cerium

General Manager
Administrator
Oct 23, 2017
1,216
Seems like a issue affecting a lot of ad networks at the moment. I've contacted our partners to track down the problem.
 

Firebrand

Member
Oct 25, 2017
2,081
In my case it's always the same seemingly unrelated ad appearing before the redirect, for something called "Braze".
 

Box

Avenger
Oct 27, 2017
4,236
Lancashire
Code:
http://adclick.g.doubleclick.net/pcs/click?adurl=https%3A%2F%2Fadschip.com%2Fpage%2F%3FRSSg31Kzr86PidL5GIPtxjMeX
Getting the above blocked by Ublock's filter. Randomly pops up when browsing Era. Good chance of coming back to it if off to make a cuppa.
 

Spyware

Member
Oct 26, 2017
1,385
Sweden
Got the hijacked page ad about my ISP just now. Dunno if it matters that more people report it, seems to be a known issue.

Safari in iOS and this was the beginning of the URL
Code:
https://eu.moneysavingexpertvwemissions.top
 

shuno

Banned
Oct 28, 2017
441
There is a ad for congstar. It's an animated gif or something. It changes its size every 10 seconds or so. Can't use the board on mobile anymore because of that, since every few seconds the content jumps around like crazy.
 

Apathy

Member
Oct 25, 2017
5,054
Just got a redirect to
Code:
https://mobilecustomer.club/?u=552307233860#
This is unacceptable. This was on mobile using Android and Chrome

Happened a second time this time it went here
Code:
https://www.adioco.com/spin/yg/index_en98121.html?cep=qbJ5GRL9JzwPiI33w8eer_6h73SVQ2CwnOVueMGaSh7_vGgx18OTXWX4aNE325fk4HbiV1CEDyH5xoFETsKP5SDUVDoTayHYcPzmNEOiJyEO_UBBYtyGBLJvx4Lcn3hryVmGv6CQ3G5lWuiG8wQqeEg3kosuJGovEurf4kXsNPjRiL96GAx85uiQK5xkOi5TqVX--Z_-2xneDMCiTLsFoXLdAL78w8TNSjM0N3ynFGuPGPCHAz5pTlz8mwA4S_xHQnQuS8BSzzLj7Kz27Lg-gfm6qfg7G-09Gu-A_mfPJaopM0k2ImNLuyN0nmtsCG-EKkQjnKB2hNsK6b_xr56idPw9fKPdKJlHmoR5YbLO6Yu48mgUqL_S4H1A4s4hwpcJLEWd1tSJHHEUZRJLODVMmpv4a4vpzDF2SEs7TMJ9rNy1YAJM0q1wtCBl4N97MiAXrYVmPCxAUQbzMJ5UNp8M55W8P_ojexAjIXaGjfOkrxRlzaVf8sBIGviIW4yVTQId&lptoken=1548641300ab25570023#
I
 
Last edited:

take_marsh

Member
Oct 27, 2017
2,091
Platform: Windows 10

Oddly, I didn't get redirected but while browsing, my anti-virus flagged a trojan-infected file:


Trojan.GenericKD.3016333 is ransomware that encrypts files stored on the affected device and demands payment of a ransom.
Thought it'd be important to give a heads up since it's extremely bad. I was only browsing ResetEra when it got detected. Showed up in destination C:\Users\Mozilla\Firefox\Profiles\
 

MrPhiliasfrog

Member
Oct 25, 2017
263
I'm getting a lot of redirects today.

I'm using Chrome on Android.

Code:
https://mobilecustomer.club/?u=532507184633
 
OP
OP
Cerium

Cerium

General Manager
Administrator
Oct 23, 2017
1,216
Seems to be an issue affecting certain parts of Canada. I've notified our partners.
 

Apathy

Member
Oct 25, 2017
5,054
Code:
https://www.adioco.com/spin-now/index_yg_en17743.html?cep=hfR6C85wec-o7vWTgIEw6U2T02QZxKYYYsWEhD4RnVYXEzgvJzvOX_0RI9LIFO6nURIL3H0c6Nv6p7KkoIvv9SyAYhUr51CwG-NHfh-ZGp0IS56p7VFSnWASJ-yWN7uoP9dA_8oBZ5z3EfFq7gDUMK4j2hpqYy-Jem_1tKngoGenV3434YwxPy4Wx5VTxeiNQ0xfEO2HE1jQ3PIJ6G-SXEZw08v76uQfLhZHgWlsCbLSiRIyC7-j6vk9y63hJe0ppEr9vwx-_gjO8PTCqr4Qhnq-EHYwje3LKD62apqJNseToRJsTGRzp5Ob6Q6eE9z9niYBz8-aW9me9h3kqfqcrH14voazlTaMPQE8mtoEMZvYYk57dtHpLeQgy14pRy_Ssw0fwcF3fRKupunnvhA4Bf_MG6X_dqilhVf8O1sc0A0&lptoken=1544643e19b5429a5941#
So how soon is this going to get rectified cause I need to see if I need to download something to protect myself from these ads
 

Magyscar

Member
Oct 25, 2017
566
I'm in the UK and getting immediate redirects to some scam fake competition stuff on Android with Chrome. Happening constantly now.