• The GiftBot 2.0 Launch Giveaway Extravaganza has come to a close with an astounding 8073 games given away to the community by 696 members, a huge success thanks to you! The gifting now continues with more official prizes in the new Gaming Giveaways |OT|. Leftover Steam codes are also being given away to the PC Gaming Era community.

The Big Funding Update

Status
Not open for further replies.
Oct 25, 2017
12,047
I tried blocking cloudfront.net manually via an adblocker but that didn't help. It prevented the ad from loading, but something on reset still forced the intrusion. I definitely mainly see it when the washingtonpost ad displays but I can't get the extension loaded fast enough to try and grab the ad url for it before the cloudfront one overtakes the screen.
 

Coyote Starrk

The Fallen
Oct 30, 2017
19,946
DFW, Texas
Hey guys I was on my phone earlier today viewing the Florida shooting thread and had a VERY badly timed Ad and screenshot it. I sent it to BronsonLee and Slayven because I figured Era would want to avoid this kind of look if at all possible. BronsonLee suggested that I share it here so everyone could see it.



It appears to be an ad for a shooting range and obviously that is VERY not good given the context.
 
OP
OP
Cerium

Cerium

General Manager
Administrator
Oct 23, 2017
1,213
Hey guys I was on my phone earlier today viewing the Florida shooting thread and had a VERY badly timed Ad and screenshot it. I sent it to BronsonLee and Slayven because I figured Era would want to avoid this kind of look if at all possible. BronsonLee suggested that I share it here so everyone could see it.

It appears to be an ad for a shooting range and obviously that is VERY not good given the context.
You're absolutely right. Bronson passed it on and we're working on it right now.

We're also reporting these redirects as well.
 
Oct 25, 2017
12,047
Hooked my phone up to Safari dev tools and noticed when the ad triggers it's load adserver.js. I haven't been able to get the whole page ad since isolating out a few files. When I can I'll try to get the contents of each call happening and report back

Of course once I have a lead I can't get the damn thing to come back
 
Last edited:
Oct 25, 2017
12,047
Edit: Looks like manually blocking serving-sys.com did not help this. Sigh

Hopefully this helps in some way for y'all

----

I finally got it to trigger again and this is what I can offer:

On a typical page load where there is no hijack, the last file loaded is arj for playwire-d.openx.net

After this loaded a series of files/calls happened:
adServer.bs
containertag
Research.js
EB.js
adServer.bs
adServer.bs
imp
bs
adServer.bs

Then the cloudfront stuff loads

These pretty much load up bs.serving.sys which I'm assuming is the ad network being used?

Here's some contents from the various files:

Code:
https://bs.serving-sys.com/BurstingPipe/adServer.bs?cn=display&code=10&PluID=0&EyeblasterID=50796778&Page=&WebPageSource=0&ForceDisplay=0&Resolution=0&sessionid=1007103176289391267&Optout=0&usercookie=u2=a17824d5-4c69-426a-b76e-dc80dcacf70d&implog=$$a17824d5-4c69-426a-b76e-dc80dcacf70d%7f%5bMM_LOGTIME%5d%7f0%7f50796778%7f%07DIR%3d4352%07DiOrigin%3d65536%07CKDATE%3d4iF%07TASegments%3d%07MB%3d1%07TA%3d1415455%07DG%3d10188145%07SDG%3d15438416%07SID%3d1007103176289391267%07DCID%3d31%07Privacy%3d1%07IsNewUser%3d%5bIS_NEW_USER%5d%07IsAdRequest%3d0%07IsCrossDevice%3d0%7f0%7fwww.resetera.com%7c%7capple_iphone_ver11_2%7c1%7c1%7f7%7f10%7fUserIP%3d1814283638%07DBID%3d133357458%07UserAgent%3dMozilla%2f5.0%20(iPhone%3b%20CPU%20iPhone%20OS%2011_2_2%20like%20Mac%20OS%20X)%20AppleWebKit%2f604.4.7%20(KHTML%2c%20like%20Gecko)%20Version%2f11.0%20Mobile%2f15C202%20Safari%2f604.1%07ShouldAddUserAgent%3d1%07Referrer%3d%07VUrl%3dhttps%253A%252F%252Fwww.resetera.com%252Fforums%252Fq-era.13%252F%07VUrlEM%3d2%07SiteID%3d73299%07CampaingID%3d862202%07AdvertiserID%3d189991%07FlightID%3d23946078%07AgencyID%3d128129%07BrandID%3d336144%07MasterAdID%3d50796772%07Country%3d1000000000%07State%3d-2%07City%3d-1%07DMA%3d-1%07ZIP%3d0%07Area%3d0%7f%7f1$$&ta=1415455&dg=10188145&sdg=15438416&ord=0.34197447507086476
Code:
https://secure-ds.serving-sys.com/BurstingCachedScripts/Modules_1_46_0_0/Research.js
Code:
https://bs.serving-sys.com/BurstingPipe/adServer.bs?cn=int&iv=2&int=50796778~~0~1415455~10188145~~1007103176289391267^VsR~0~0~01020^AdStart~0~0~01020&usercookie=u2=a17824d5-4c69-426a-b76e-dc80dcacf70d&rnd=0.8812856549710057&res=0
Code:
https://secure-ds.serving-sys.com/BurstingCachedScripts/HTML5Res_2_93_1_0/EB.js
Code:
https://bs.serving-sys.com/BurstingPipe/adServer.bs?cn=int&iv=2&interactionsStr=$$50796778~~0~1415455~10188145~~1007103176289391267%5EAdParams~ifr%3D1%26loc%3D28x180%26vsbp%3D1%26size%3D320x50%26cb%3D2%26env%3D3%26idx%3D1~0~01020$$&usercookie=u2=a17824d5-4c69-426a-b76e-dc80dcacf70d&rnd=0.879113148796633&res=0
Code:
https://ds2a5662wdgn4.cloudfront.net/imp?MTUxODcxMDMzNzc2NzY2OS4yNTQyNzM5ODA0LjIwMzcuY2xpY2trd2FsYXx8Rk1YfHwxNTQ0ODU2fHxNVEE0TGpNMUxqRTVOeTR4TVRnPSwlN0IlMjJsb2NhdGlvbiUyMiUzQSU3QiUyMmhyZWYlMjIlM0ElMjJodHRwcyUzQS8vc2VjdXJlLWRzLnNlcnZpbmctc3lzLmNvbS9CdXJzdGluZ1Jlcy9TaXRlLTEyODEyOS9XU0ZvbGRlcnMvMTE4ODkwNzAvL2luZGV4Lmh0bWwlM0Z2JTNEXzJfOTNfMV8wJTI2biUzRDElMjZyJTNEXzFfNDZfMF8wJTIyJTJDJTIycHJvdG9jb2wlMjIlM0ElMjJodHRwcyUzQSUyMiUyQyUyMmhvc3QlMjIlM0ElMjJzZWN1cmUtZHMuc2VydmluZy1zeXMuY29tJTIyJTJDJTIyaG9zdG5hbWUlMjIlM0ElMjJzZWN1cmUtZHMuc2VydmluZy1zeXMuY29tJTIyJTJDJTIycG9ydCUyMiUzQSUyMiUyMiUyQyUyMnBhdGhuYW1lJTIyJTNBJTIyL0J1cnN0aW5nUmVzL1NpdGUtMTI4MTI5L1dTRm9sZGVycy8xMTg4OTA3MC8vaW5kZXguaHRtbCUyMiUyQyUyMnNlYXJjaCUyMiUzQSUyMiUzRnYlM0RfMl85M18xXzAlMjZuJTNEMSUyNnIlM0RfMV80Nl8wXzAlMjIlMkMlMjJoYXNoJTIyJTNBJTIyJTIyJTJDJTIyb3JpZ2luJTIyJTNBJTIyaHR0cHMlM0EvL3NlY3VyZS1kcy5zZXJ2aW5nLXN5cy5jb20lMjIlMkMlMjJhbmNlc3Rvck9yaWdpbnMlMjIlM0ElN0IlMjIwJTIyJTNBJTIyaHR0cHMlM0EvL3d3dy5yZXNldGVyYS5jb20lMjIlMkMlMjIxJTIyJTNBJTIyaHR0cHMlM0EvL3d3dy5yZXNldGVyYS5jb20lMjIlN0QlN0QlN0QsMTM5MjA1LEFwcGxlJTIwQTExJTIwR1BV
 
Last edited:

DammitLloyd

Member
Oct 25, 2017
214
Here’s one I just got

Code:
http://congratulations.prize-hub.stream/click/71137138/index.html?syn=240&ver=27&cc=US&td=open.trustclick.pro&ep2=1&sr=1&model=iPhone&brand=Apple&city=Los%20Angeles&salt=JgDZ9gG&voluumdata=deprecated&eda=deprecated&cep=6uME7Lcz9ul92-h6LyYH7GZ2b7z0jijqBoZaWpA9rJoxqqF5eI0aP897uk-X_6ZO6_bDLNKenLIt-Dp9hyG1uZ1tYRJMrfYD-iV3DlbQahUPUa_vJs4GaGRMYutxvRih4LZZlOFeB7S6oWtvAqUQ4g_76qhQP5BqoGyoPjb5OfQZjKWX7xrB6ipNjgIEDjhRb9A-TK7XuDaEdWjZGGSv2g-b9VCpFhye81-xsHfYrhW9wwkW_Fxmvxj7s6hzEDLa&pid=114_US_114&clickid=5a85ca39f5629a0001cae8b9#
 
OP
OP
Cerium

Cerium

General Manager
Administrator
Oct 23, 2017
1,213
Thanks for all the details guys. If this continues into tonight we'll take drastic measures.
 

Deleted member 8112

User requested account closure
Banned
Oct 26, 2017
4,101

I'm getting these types of ads for some reason. Tried the other site and I'm getting them there too but absolutely nowhere else. Had to temporarily turn adblock on.
 
OP
OP
Cerium

Cerium

General Manager
Administrator
Oct 23, 2017
1,213
I'm getting these types of ads for some reason. Tried the other site and I'm getting them there too but absolutely nowhere else. Had to temporarily turn adblock on.
This is the first we're hearing of something like this -- desktop ads have been solid for a long time now. Are you sure you haven't picked up some kind of malware that might be the cause?
 

Deleted member 8112

User requested account closure
Banned
Oct 26, 2017
4,101
This is the first we're hearing of something like this -- desktop ads have been solid for a long time now. Are you sure you haven't picked up some kind of malware that might be the cause?
I thought so too but I looked at other sites and my Chrome activity and there's nothing like it. I have no idea where I would have picked a supposed malware either. I have adblock running on every site except whitelisted sites. I'll run a malware check real quick and come back to you.
 

ZhugeEX

Senior Analyst at Niko Partners
Verified
Oct 24, 2017
3,035
I thought so too but I looked at other sites and my Chrome activity and there's nothing like it. I have no idea where I would have picked a supposed malware either. I have adblock running on every site except whitelisted sites. I'll run a malware check real quick and come back to you.
The ads say "Powered by counterflix".

I had a quick look and it seems to be some sort of adware program - https://malwaretips.com/blogs/remove-counterflix-ads/
 

Deleted member 8112

User requested account closure
Banned
Oct 26, 2017
4,101
OP
OP
Cerium

Cerium

General Manager
Administrator
Oct 23, 2017
1,213
From the page Zhuge linked:
Counterflix is commonly bundled with other free programs that you download off of the Internet. Unfortunately, some free downloads do not adequately disclose that other software will also be installed and you may find that you have installed Counterflix without your knowledge.
Removal instructions can also be found on that page. While unfortunate, this has nothing to do with us.
 

ViviOggi

Member
Oct 25, 2017
354
I am now getting these dreadful ads on top of embedded video on mobile:



(Example from the FFXII writing thread)
 

isual

Banned
Oct 27, 2017
667
out of curiosity, can i ask how much does it cost to keep the site up monthly/quarterly/yearly ?
 

Ferny

FutureERA
Member
Oct 23, 2017
657
out of curiosity, can i ask how much does it cost to keep the site up monthly/quarterly/yearly ?
If you’re asking for exact figures, that’s not something we will be providing. But, I’m sure you can imagine serving over 10k+ people at time, any given time on a normal day is quite costly.
 

Mudo

Member
Oct 25, 2017
1,770
Tennessee
reporting back in - still getter no full page redirect ads constantly every day. I just got an Amazon one immediately on loading Restera. Then i closed out, reloaded the page, and clicked on Video Gabe’s section and immediately got a redirect to some Youtube thing. These are all “ YOU ARE THE 1000th person to visit you are a winner click here to claim a prize!!!!” stuff. I am on mobile. Any word on whether this is going to be addressed? I want you all to get revenue so I will not use Adblock out of respect but would really appreciate getting rid of these horrible terrible ads.
 
OP
OP
Cerium

Cerium

General Manager
Administrator
Oct 23, 2017
1,213
reporting back in - still getter no full page redirect ads constantly every day. I just got an Amazon one immediately on loading Restera. Then i closed out, reloaded the page, and clicked on Video Gabe’s section and immediately got a redirect to some Youtube thing. These are all “ YOU ARE THE 1000th person to visit you are a winner click here to claim a prize!!!!” stuff. I am on mobile. Any word on whether this is going to be addressed? I want you all to get revenue so I will not use Adblock out of respect but would really appreciate getting rid of these horrible terrible ads.
We haven't had any reports of this in a while. The next time it happens can you get a screenshot and/or save the link that it redirects you to? That'll make it easier to track it down.

Also is this the only site you're getting these on?
 

Mudo

Member
Oct 25, 2017
1,770
Tennessee
We haven't had any reports of this in a while. The next time it happens can you get a screenshot and/or save the link that it redirects you to? That'll make it easier to track it down.

Also is this the only site you're getting these on?
Sure thing will do - this is the only site that it happens on yeah - we’ll i mean i get them on Metacritic but that’s happened for a couple years to me
 

KojiKnight

Member
Oct 25, 2017
9,351
[/IMG]


Mouse over into full screen. No clicking.

I had just used the Fry's website to order my groceries (I do that online and just do pickup since that's a lot easier).

It came up during maintenance when I was checking. I haven't seen it since, but I figured it was best to post it regardless.
 

Luke_wal

Member
Oct 25, 2017
671
I got a full screen “YouTube” pop-up ad telling me I was the 1000th winner today too. I get these Amazon ads all over the place on iOS safari, but this was my first time seeing a “YouTube” one.
 
OP
OP
Cerium

Cerium

General Manager
Administrator
Oct 23, 2017
1,213
I got a really weird thing just while replaying on a thread. I dunno if it's ad related or anything, but I had to confirm I'm not a robot before it would post and after that it threw me onto a JSON error page. Anyone ever see anything like this?
I believe that is a rare Cloudflare issue and not anything ad related. We'll try to find a permanent fix.
 

KojiKnight

Member
Oct 25, 2017
9,351
Reporting in another video ad as well. I didn't quite catch what it was unfortunately because it started playing just as I hit the next page link. I'll keep an eye out and try and catch it again.
 
Oct 25, 2017
12,892
Sweden
I had a redirect ad on mobile today :/

Considering using ad block on my work computer now. If redirect ads are getting through, who knows what else is getting through, and I don't want shit to infect my work PC
 
OP
OP
Cerium

Cerium

General Manager
Administrator
Oct 23, 2017
1,213
I had a redirect ad on mobile today :/

Considering using ad block on my work computer now. If redirect ads are getting through, who knows what else is getting through, and I don't want shit to infect my work PC
Desktop has been perfectly clean since launch, but we do get the occasional issue on mobile. Did you happen to save the URL? That'll make it easier to track it down.
 
Oct 25, 2017
12,892
Sweden
Desktop has been perfectly clean since launch, but we do get the occasional issue on mobile. Did you happen to save the URL? That'll make it easier to track it down.
i did not unfortunately

it happened when i went to edit this post if that is any help :)

the page i was getting redirected to was something about being the lucky winner of vouchers at a swedish grocery chain or something like that
 

shira

Community Resetter
Member
Oct 25, 2017
14,958
My EUR community telling me they were getting mobile/full screen popups "you won an iphone" ads that leads to "your iphone is hacked" today

No way to reproduce or capture. Sorry.
 
Status
Not open for further replies.