The Ad Reporting Thread

Cerium · Jun 18, 2019

It looks like most of these latest reports are coming from a couple European countries. I've reached out to our ad agency so that they can investigate further. Thanks for the details.

Gentlemen · Jun 21, 2019

Getting Trojan warnings from Malwarebytes on every page of Era now. Basically happens every time the banners reload.

Tovarisc · Jun 21, 2019

Every time I loaded any ERA page with ad(s) in it it would force scroll to bottom of page, load for a bit and then force "ad" pictured above into the same tab where ERA page was open. Overtaking tab. Only website where this occurs is on ERA and ad blocking ERA "fixed" issue. Started to happen ~20 minutes ago.

I live in Finland.

mjc · Jun 21, 2019

Gentlemen said:
Getting Trojan warnings from Malwarebytes on every page of Era now. Basically happens every time the banners reload.

Yup getting the same warnings off malwarebytes.

Nordicus · Jun 22, 2019

Tovarisc said:
Every time I loaded any ERA page with ad(s) in it it would force scroll to bottom of page, load for a bit and then force "ad" pictured above into the same tab where ERA page was open. Overtaking tab. Only website where this occurs is on ERA and ad blocking ERA "fixed" issue. Started to happen ~20 minutes ago.

I live in Finland.

Getting the same issue every once in a while myself

TUFCfan · Jun 24, 2019

Just had a redirect after leaving a resetera thread open for a few minutes whist popping away from my computer.

I'm using Firefox on Windows 10 (desktop).

It changes URL several times:

Woffls · Jun 24, 2019

Just got directed to this URL after idling for a few seconds. It made some loud ass beeping sounds (far louder than I'd expect for my volume level, so might have been internal buzzer??) so I bailed without looking at anything. Usual "oh no your windows are virus" bullshit:

Edge 44.18362.1.0
Windows 10
London, UK

water_wendi · Jun 28, 2019

i was typing a reply when the ad at the bottom cycled and then my browser was hijacked. i terminated the Firefox process quickly so i didnt get a chance to take screen shots of the page it went to but here is a snap of my history when it happened.

Firefox 67.0.4
Windows 10
US

Cerium · Jun 29, 2019

Dispatched another email regarding these latest reports. Thanks as always.

Spence · Jun 29, 2019

Same here, gotten a fake claim that I won a phone from my ISP multiple times now which redirects to eu.theinsidemarket.top

Woffls · Jun 29, 2019

As above but got a screenshot this time.

skrskg · Jun 29, 2019

The laptop experience have been horrible here (Sweden) today. Using Edge (Windows 10), this ad has taken over my browser 8 out of 10 times I view Era (and it's not happening anywhere else).

Famassu · Jun 30, 2019

I have the same issue as skrskg but it directs to a a Finnish ISP's "survey/competition" (Telia)

Famassu · Jun 30, 2019

Sorry for the dp but here's a screenshot with the address & shit:

test_account · Jun 30, 2019

Same here as above. I got redirected a few times today. I first thought maybe i had some malware, but didnt find anything on a scan, and now i'm on another computer and i got the same thing. This is the link i got now:

https://eu.moneysavingexpertjuniorsavings.top/AndAlotOfNumbersAndLettersAfterThis

AstralTurfWarrior · Jun 30, 2019

I'm constantly receiving a very similar redirect as the ones mentioned above (the Telia redirect brought up Tovarisk and Famassu and the one brought up by skrskg, propably similar to test_account's too) with the advert claiming I won something.

For the me the the URL's start is eu.globalfundforwomen.icu

eonden · Jul 1, 2019

Famassu said:
Sorry for the dp but here's a screenshot with the address & shit:

Same here in Sweden!

lazygecko · Jul 1, 2019

Can confirm this is happening to me as well.

Deleted member 10234 · Jul 1, 2019

Famassu said:
Sorry for the dp but here's a screenshot with the address & shit:

This but in a slightly different address:

TUFCfan · Jul 4, 2019

Woffls said:
As above but got a screenshot this time.

Got similar to this again, same as my previous one. Getting one a day on here most days (Windows 10, Firefox) but luckily most of the time it's blocked by my AV, just a couple have gone through to the actual spam site.

Latest address (which was followed by much larger string of seemingly random numbers and letters): https://do00ntf4du35a.cloudfront.net

Cerium · Jul 5, 2019

We believe the Scandinavian ad issues from earlier in the week should be resolved -- please let us know if the problems there persist.

I've contacted our partners again regarding the latest reports we've received which appear mainly to be from the UK.

Timppis · Jul 7, 2019

Browser: Firefox
Platform: Desktop
Offending Ad: https://eu.globalhempgroup.icu/1b53...TI3OGMwOTIwODk4M2Ri&trackid=20190707113225256

(Several other addresses sometimes)

Famassu · Jul 8, 2019

Getting the same shit as before, except even more aggressively (I had to come back to this page for about 20 times to get this message written and even then only because I installed NoScript). Adress is different "eu.globalintegrativemedicalsolutions.top"

Smang · Jul 9, 2019

Browser: Firefox
Platform: Windows 10
Offending Ad: https://buzzcpm.com/click?node=6&ti...=13344&rank=0&ad=eyJ0aXRsZSI6IiIsInVybCI6IiJ9

I'm not sure whether the offending ad's URL is the one of the page I end up on or the URL of the page inbetween that redirects me there. Either way, above is the inbetween URL and below is the URL and a screenshot of the page I end up on.

http://cusummary.online/ln/sgpcJuw....o.C.6aTY4cDG3n9LIsBknCO1MDbRzH7gr5fYnDA0qq.qq

Spence · Jul 13, 2019

Yep it's back, hostname eu.globaljetservices.icu, I have to turn adblocker on or I can't even type here before it redirects.

Firebrand · Jul 13, 2019

Spence said:
Yep it's back, hostname eu.globaljetservices.icu, I have to turn adblocker on or I can't even type here before it redirects.

Getting this on every two pages as well. It's not just ERA though, Reddit as well.

Nitpicker_Red · Jul 13, 2019

I'm getting a full screen takeover fitted to my internet provider and IP claiming that they are giving me free stuff

URL:

https://eu.moneysavingexpertregularsaver.icu/1fc6e87e3c9c14a98bf5a033fbc9b25b/index.html?ip=80.80.200.200&siteid=YjY0MTQxMTUwNTc4ODU3NzE5MTEjMTU2MzAxNjg1NEA0OTA3QF81Y2M3NjRjMGViMTJlMTljZjJhYmIwZDFiOGNmZmEwNw

(I changed the IP and removed the trackid in the url)

Browser: Chrome
OS: Windows 7

Kind of startled me, I'll still run an antivirus scan (Avast) to check if it's on my end but since it happened repeatedly on several Resetera pages that I opened in a row, and there's a thread for it, here goes.
Adblocker was set to disabled for Resetera, I guess I'll enable it for now...

test_account · Jul 13, 2019

I've also been getting those ads lately. This time from this domain: eu.attractionslexingtonky.icu

Timppis · Jul 13, 2019

Timppis said:
Browser: Firefox
Platform: Desktop
Offending Ad: https://eu.globalhempgroup.icu/1b53...TI3OGMwOTIwODk4M2Ri&trackid=20190707113225256

(Several other addresses sometimes)

This returned again, more aggresively.

Chocobo115 · Jul 13, 2019

Getting thoose phishing ads as well (in Sweden). Happens so often that it makes me want to stay away from browsing resetera...

I'm browsing on Safari through my iPad

Cerium · Jul 13, 2019

Seems like a issue affecting a lot of ad networks at the moment. I've contacted our partners to track down the problem.

Firebrand · Jul 14, 2019

In my case it's always the same seemingly unrelated ad appearing before the redirect, for something called "Braze".

Box · Jul 17, 2019

Code:

http://adclick.g.doubleclick.net/pcs/click?adurl=https%3A%2F%2Fadschip.com%2Fpage%2F%3FRSSg31Kzr86PidL5GIPtxjMeX

Getting the above blocked by Ublock's filter. Randomly pops up when browsing Era. Good chance of coming back to it if off to make a cuppa.

Spyware · Jul 17, 2019

Got the hijacked page ad about my ISP just now. Dunno if it matters that more people report it, seems to be a known issue.

Safari in iOS and this was the beginning of the URL

Code:

https://eu.moneysavingexpertvwemissions.top

shuno · Jul 22, 2019

There is a ad for congstar. It's an animated gif or something. It changes its size every 10 seconds or so. Can't use the board on mobile anymore because of that, since every few seconds the content jumps around like crazy.

Apathy · Jul 23, 2019

Just got a redirect to

Code:

https://mobilecustomer.club/?u=552307233860#

This is unacceptable. This was on mobile using Android and Chrome

Happened a second time this time it went here

Code:

https://www.adioco.com/spin/yg/index_en98121.html?cep=qbJ5GRL9JzwPiI33w8eer_6h73SVQ2CwnOVueMGaSh7_vGgx18OTXWX4aNE325fk4HbiV1CEDyH5xoFETsKP5SDUVDoTayHYcPzmNEOiJyEO_UBBYtyGBLJvx4Lcn3hryVmGv6CQ3G5lWuiG8wQqeEg3kosuJGovEurf4kXsNPjRiL96GAx85uiQK5xkOi5TqVX--Z_-2xneDMCiTLsFoXLdAL78w8TNSjM0N3ynFGuPGPCHAz5pTlz8mwA4S_xHQnQuS8BSzzLj7Kz27Lg-gfm6qfg7G-09Gu-A_mfPJaopM0k2ImNLuyN0nmtsCG-EKkQjnKB2hNsK6b_xr56idPw9fKPdKJlHmoR5YbLO6Yu48mgUqL_S4H1A4s4hwpcJLEWd1tSJHHEUZRJLODVMmpv4a4vpzDF2SEs7TMJ9rNy1YAJM0q1wtCBl4N97MiAXrYVmPCxAUQbzMJ5UNp8M55W8P_ojexAjIXaGjfOkrxRlzaVf8sBIGviIW4yVTQId&lptoken=1548641300ab25570023#

I

take_marsh · Jul 23, 2019

Platform: Windows 10

Oddly, I didn't get redirected but while browsing, my anti-virus flagged a trojan-infected file:

https://www.f-secure.com/v-descs/trojan_w32_generickd_3016333.shtml

Trojan.GenericKD.3016333 is ransomware that encrypts files stored on the affected device and demands payment of a ransom.

Thought it'd be important to give a heads up since it's extremely bad. I was only browsing ResetEra when it got detected. Showed up in destination C:\Users\Mozilla\Firefox\Profiles\

MrPhiliasfrog · Jul 25, 2019

I'm getting a lot of redirects today.

I'm using Chrome on Android.

Code:

https://mobilecustomer.club/?u=532507184633

Alavard · Jul 25, 2019

MrPhiliasfrog said:
I'm getting a lot of redirects today.

I'm using Chrome on Android.

Code:

https://mobilecustomer.club/?u=532507184633

Same here, same browser and platform.

Apathy · Jul 25, 2019

MrPhiliasfrog said:
I'm getting a lot of redirects today.

I'm using Chrome on Android.

Code:

https://mobilecustomer.club/?u=532507184633

Same one I posted about a few days ago and yup, still here and no response from the staff.

Cerium · Jul 25, 2019

Seems to be an issue affecting certain parts of Canada. I've notified our partners.

MrPhiliasfrog · Jul 25, 2019

Cerium said:
Seems to be an issue affecting certain parts of Canada. I've notified our partners.

Thank you

Dice · Jul 26, 2019

https://yourselectednews.com/japanese-saving-method-kakeibo/

Getting this a Lot (Canada too)

Apathy · Jul 26, 2019

Code:

https://www.adioco.com/spin-now/index_yg_en17743.html?cep=hfR6C85wec-o7vWTgIEw6U2T02QZxKYYYsWEhD4RnVYXEzgvJzvOX_0RI9LIFO6nURIL3H0c6Nv6p7KkoIvv9SyAYhUr51CwG-NHfh-ZGp0IS56p7VFSnWASJ-yWN7uoP9dA_8oBZ5z3EfFq7gDUMK4j2hpqYy-Jem_1tKngoGenV3434YwxPy4Wx5VTxeiNQ0xfEO2HE1jQ3PIJ6G-SXEZw08v76uQfLhZHgWlsCbLSiRIyC7-j6vk9y63hJe0ppEr9vwx-_gjO8PTCqr4Qhnq-EHYwje3LKD62apqJNseToRJsTGRzp5Ob6Q6eE9z9niYBz8-aW9me9h3kqfqcrH14voazlTaMPQE8mtoEMZvYYk57dtHpLeQgy14pRy_Ssw0fwcF3fRKupunnvhA4Bf_MG6X_dqilhVf8O1sc0A0&lptoken=1544643e19b5429a5941#

So how soon is this going to get rectified cause I need to see if I need to download something to protect myself from these ads

Magyscar · Jul 27, 2019

I'm in the UK and getting immediate redirects to some scam fake competition stuff on Android with Chrome. Happening constantly now.

Menome · Jul 27, 2019

As of this morning, I'm unable to browse ERA at all on mobile because of pop-up adverts:

Browser: Chrome Mobile
Platform: Android
Offending Ad: https://2019-samsung-giveaway.live and https://super-giftcard.life

Hasney · Jul 27, 2019

Getting redirected to the below every single page view. Took me 20 efforts just to even reply with this.

https://samsung-2019-rewards.xyz/lp...aHQiOjF9XQ== &campaignId=444&times=1&index=6#
[

Browser: Chrome Mobile
Platform: Android
Offending Ad: https://2019-samsung-giveaway.live and https://super-giftcard.life

Shugdaddy · Jul 27, 2019

I'm have the same issue as magyscar and menome. Started yesterday.

IDreamOfHime · Jul 27, 2019

Menome said:
As of this morning, I'm unable to browse ERA at all on mobile because of pop-up adverts:

Browser: Chrome Mobile
Platform: Android
Offending Ad: https://2019-samsung-giveaway.live and https://super-giftcard.life

Me too

Stop It · Jul 27, 2019

Hasney said:
Getting redirected to the below every single page view. Took me 20 efforts just to even reply with this.

Browser: Chrome Mobile
Platform: Android
Offending Ad: https://2019-samsung-giveaway.live and https://super-giftcard.life

This, reporting also as not a one off and affecting multiple users.

The Ad Reporting Thread

The Former

The Former

User requested account closure

The Former

The Former

The Former

One Winged Slayer

Bad Cat