• Welcome to ResetEra 2.0! Guests should now be able to save their dark or light theme preferences, found on the left sidebar.

The Big Funding Update

Status
Not open for further replies.
Oct 25, 2017
8,010
0
I tried blocking cloudfront.net manually via an adblocker but that didn't help. It prevented the ad from loading, but something on reset still forced the intrusion. I definitely mainly see it when the washingtonpost ad displays but I can't get the extension loaded fast enough to try and grab the ad url for it before the cloudfront one overtakes the screen.
 
Oct 25, 2017
1,285
0
Oct 30, 2017
11,737
0
DFW, Texas
Hey guys I was on my phone earlier today viewing the Florida shooting thread and had a VERY badly timed Ad and screenshot it. I sent it to BronsonLee and Slayven because I figured Era would want to avoid this kind of look if at all possible. BronsonLee suggested that I share it here so everyone could see it.



It appears to be an ad for a shooting range and obviously that is VERY not good given the context.
 
OP
OP
Cerium

Cerium

General Manager
Administrator
Oct 23, 2017
634
2
Hey guys I was on my phone earlier today viewing the Florida shooting thread and had a VERY badly timed Ad and screenshot it. I sent it to BronsonLee and Slayven because I figured Era would want to avoid this kind of look if at all possible. BronsonLee suggested that I share it here so everyone could see it.

It appears to be an ad for a shooting range and obviously that is VERY not good given the context.
You're absolutely right. Bronson passed it on and we're working on it right now.

We're also reporting these redirects as well.
 
Oct 25, 2017
8,010
0
Hooked my phone up to Safari dev tools and noticed when the ad triggers it's load adserver.js. I haven't been able to get the whole page ad since isolating out a few files. When I can I'll try to get the contents of each call happening and report back

Of course once I have a lead I can't get the damn thing to come back
 
Last edited:
Oct 25, 2017
8,010
0
Edit: Looks like manually blocking serving-sys.com did not help this. Sigh

Hopefully this helps in some way for y'all

----

I finally got it to trigger again and this is what I can offer:

On a typical page load where there is no hijack, the last file loaded is arj for playwire-d.openx.net

After this loaded a series of files/calls happened:
adServer.bs
containertag
Research.js
EB.js
adServer.bs
adServer.bs
imp
bs
adServer.bs

Then the cloudfront stuff loads

These pretty much load up bs.serving.sys which I'm assuming is the ad network being used?

Here's some contents from the various files:

Code:
https://bs.serving-sys.com/BurstingPipe/adServer.bs?cn=display&code=10&PluID=0&EyeblasterID=50796778&Page=&WebPageSource=0&ForceDisplay=0&Resolution=0&sessionid=1007103176289391267&Optout=0&usercookie=u2=a17824d5-4c69-426a-b76e-dc80dcacf70d&implog=$$a17824d5-4c69-426a-b76e-dc80dcacf70d%7f%5bMM_LOGTIME%5d%7f0%7f50796778%7f%07DIR%3d4352%07DiOrigin%3d65536%07CKDATE%3d4iF%07TASegments%3d%07MB%3d1%07TA%3d1415455%07DG%3d10188145%07SDG%3d15438416%07SID%3d1007103176289391267%07DCID%3d31%07Privacy%3d1%07IsNewUser%3d%5bIS_NEW_USER%5d%07IsAdRequest%3d0%07IsCrossDevice%3d0%7f0%7fwww.resetera.com%7c%7capple_iphone_ver11_2%7c1%7c1%7f7%7f10%7fUserIP%3d1814283638%07DBID%3d133357458%07UserAgent%3dMozilla%2f5.0%20(iPhone%3b%20CPU%20iPhone%20OS%2011_2_2%20like%20Mac%20OS%20X)%20AppleWebKit%2f604.4.7%20(KHTML%2c%20like%20Gecko)%20Version%2f11.0%20Mobile%2f15C202%20Safari%2f604.1%07ShouldAddUserAgent%3d1%07Referrer%3d%07VUrl%3dhttps%253A%252F%252Fwww.resetera.com%252Fforums%252Fq-era.13%252F%07VUrlEM%3d2%07SiteID%3d73299%07CampaingID%3d862202%07AdvertiserID%3d189991%07FlightID%3d23946078%07AgencyID%3d128129%07BrandID%3d336144%07MasterAdID%3d50796772%07Country%3d1000000000%07State%3d-2%07City%3d-1%07DMA%3d-1%07ZIP%3d0%07Area%3d0%7f%7f1$$&ta=1415455&dg=10188145&sdg=15438416&ord=0.34197447507086476
Code:
https://secure-ds.serving-sys.com/BurstingCachedScripts/Modules_1_46_0_0/Research.js
Code:
https://bs.serving-sys.com/BurstingPipe/adServer.bs?cn=int&iv=2&int=50796778~~0~1415455~10188145~~1007103176289391267^VsR~0~0~01020^AdStart~0~0~01020&usercookie=u2=a17824d5-4c69-426a-b76e-dc80dcacf70d&rnd=0.8812856549710057&res=0
Code:
https://secure-ds.serving-sys.com/BurstingCachedScripts/HTML5Res_2_93_1_0/EB.js
Code:
https://bs.serving-sys.com/BurstingPipe/adServer.bs?cn=int&iv=2&interactionsStr=$$50796778~~0~1415455~10188145~~1007103176289391267%5EAdParams~ifr%3D1%26loc%3D28x180%26vsbp%3D1%26size%3D320x50%26cb%3D2%26env%3D3%26idx%3D1~0~01020$$&usercookie=u2=a17824d5-4c69-426a-b76e-dc80dcacf70d&rnd=0.879113148796633&res=0
Code:
https://ds2a5662wdgn4.cloudfront.net/imp?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
 
Last edited:
Oct 25, 2017
142
0
Here’s one I just got

Code:
http://congratulations.prize-hub.stream/click/71137138/index.html?syn=240&ver=27&cc=US&td=open.trustclick.pro&ep2=1&sr=1&model=iPhone&brand=Apple&city=Los%20Angeles&salt=JgDZ9gG&voluumdata=deprecated&eda=deprecated&cep=6uME7Lcz9ul92-h6LyYH7GZ2b7z0jijqBoZaWpA9rJoxqqF5eI0aP897uk-X_6ZO6_bDLNKenLIt-Dp9hyG1uZ1tYRJMrfYD-iV3DlbQahUPUa_vJs4GaGRMYutxvRih4LZZlOFeB7S6oWtvAqUQ4g_76qhQP5BqoGyoPjb5OfQZjKWX7xrB6ipNjgIEDjhRb9A-TK7XuDaEdWjZGGSv2g-b9VCpFhye81-xsHfYrhW9wwkW_Fxmvxj7s6hzEDLa&pid=114_US_114&clickid=5a85ca39f5629a0001cae8b9#
 
Oct 26, 2017
3,902
0

I'm getting these types of ads for some reason. Tried the other site and I'm getting them there too but absolutely nowhere else. Had to temporarily turn adblock on.
 
OP
OP
Cerium

Cerium

General Manager
Administrator
Oct 23, 2017
634
2
I'm getting these types of ads for some reason. Tried the other site and I'm getting them there too but absolutely nowhere else. Had to temporarily turn adblock on.
This is the first we're hearing of something like this -- desktop ads have been solid for a long time now. Are you sure you haven't picked up some kind of malware that might be the cause?
 
Oct 26, 2017
3,902
0
This is the first we're hearing of something like this -- desktop ads have been solid for a long time now. Are you sure you haven't picked up some kind of malware that might be the cause?
I thought so too but I looked at other sites and my Chrome activity and there's nothing like it. I have no idea where I would have picked a supposed malware either. I have adblock running on every site except whitelisted sites. I'll run a malware check real quick and come back to you.
 

ZhugeEX

诸葛亮 - 卧龙
Administrator
Oct 24, 2017
2,536
0
I thought so too but I looked at other sites and my Chrome activity and there's nothing like it. I have no idea where I would have picked a supposed malware either. I have adblock running on every site except whitelisted sites. I'll run a malware check real quick and come back to you.
The ads say "Powered by counterflix".

I had a quick look and it seems to be some sort of adware program - https://malwaretips.com/blogs/remove-counterflix-ads/
 
Oct 26, 2017
3,902
0
The ads say "Powered by counterflix".

I had a quick look and it seems to be some sort of adware program - https://malwaretips.com/blogs/remove-counterflix-ads/
I ran a quick scan and there were no threats found:


These are all my Chrome extensions, so I have no idea what would prompt these types of ads to appear:



Haven't pirated anything for years now and the ads popped up a few minutes ago so I'm really dumbfounded.
 
OP
OP
Cerium

Cerium

General Manager
Administrator
Oct 23, 2017
634
2
From the page Zhuge linked:
Counterflix is commonly bundled with other free programs that you download off of the Internet. Unfortunately, some free downloads do not adequately disclose that other software will also be installed and you may find that you have installed Counterflix without your knowledge.
Removal instructions can also be found on that page. While unfortunate, this has nothing to do with us.
 

Ferny

FutureERA
Member
Oct 23, 2017
657
0
out of curiosity, can i ask how much does it cost to keep the site up monthly/quarterly/yearly ?
If you’re asking for exact figures, that’s not something we will be providing. But, I’m sure you can imagine serving over 10k+ people at time, any given time on a normal day is quite costly.
 
Oct 25, 2017
794
0
Tennessee
reporting back in - still getter no full page redirect ads constantly every day. I just got an Amazon one immediately on loading Restera. Then i closed out, reloaded the page, and clicked on Video Gabe’s section and immediately got a redirect to some Youtube thing. These are all “ YOU ARE THE 1000th person to visit you are a winner click here to claim a prize!!!!” stuff. I am on mobile. Any word on whether this is going to be addressed? I want you all to get revenue so I will not use Adblock out of respect but would really appreciate getting rid of these horrible terrible ads.
 
OP
OP
Cerium

Cerium

General Manager
Administrator
Oct 23, 2017
634
2
reporting back in - still getter no full page redirect ads constantly every day. I just got an Amazon one immediately on loading Restera. Then i closed out, reloaded the page, and clicked on Video Gabe’s section and immediately got a redirect to some Youtube thing. These are all “ YOU ARE THE 1000th person to visit you are a winner click here to claim a prize!!!!” stuff. I am on mobile. Any word on whether this is going to be addressed? I want you all to get revenue so I will not use Adblock out of respect but would really appreciate getting rid of these horrible terrible ads.
We haven't had any reports of this in a while. The next time it happens can you get a screenshot and/or save the link that it redirects you to? That'll make it easier to track it down.

Also is this the only site you're getting these on?
 
Oct 25, 2017
794
0
Tennessee
We haven't had any reports of this in a while. The next time it happens can you get a screenshot and/or save the link that it redirects you to? That'll make it easier to track it down.

Also is this the only site you're getting these on?
Sure thing will do - this is the only site that it happens on yeah - we’ll i mean i get them on Metacritic but that’s happened for a couple years to me
 
Oct 25, 2017
2,758
0
Thanks for the details, we've informed the ad provider.
NP...Lmao this is getting ridiculous. got two within 30 seconds. These may be new links maybe not:

Upon loading up era: http://d2v4k5rx3i4kdj.cloudfront.ne...&pubid=1544856&ctype=2&classid=a1&subid1=web#

From opening this thread:
http://d2v4k5rx3i4kdj.cloudfront.ne...bid=1539780769&ctype=2&classid=a1&subid1=web#

LA chase thread XD:
http://d2v4k5rx3i4kdj.cloudfront.ne...&pubid=1544856&ctype=2&classid=a1&subid1=web#
 
Last edited:
Oct 25, 2017
5,509
0
[/IMG]


Mouse over into full screen. No clicking.

I had just used the Fry's website to order my groceries (I do that online and just do pickup since that's a lot easier).

It came up during maintenance when I was checking. I haven't seen it since, but I figured it was best to post it regardless.
 
Oct 25, 2017
457
0
I got a full screen “YouTube” pop-up ad telling me I was the 1000th winner today too. I get these Amazon ads all over the place on iOS safari, but this was my first time seeing a “YouTube” one.
 
OP
OP
Cerium

Cerium

General Manager
Administrator
Oct 23, 2017
634
2
I got a really weird thing just while replaying on a thread. I dunno if it's ad related or anything, but I had to confirm I'm not a robot before it would post and after that it threw me onto a JSON error page. Anyone ever see anything like this?
I believe that is a rare Cloudflare issue and not anything ad related. We'll try to find a permanent fix.
 
Oct 25, 2017
5,509
0
Reporting in another video ad as well. I didn't quite catch what it was unfortunately because it started playing just as I hit the next page link. I'll keep an eye out and try and catch it again.
 
Oct 25, 2017
9,921
0
Sweden
I had a redirect ad on mobile today :/

Considering using ad block on my work computer now. If redirect ads are getting through, who knows what else is getting through, and I don't want shit to infect my work PC
 
OP
OP
Cerium

Cerium

General Manager
Administrator
Oct 23, 2017
634
2
I had a redirect ad on mobile today :/

Considering using ad block on my work computer now. If redirect ads are getting through, who knows what else is getting through, and I don't want shit to infect my work PC
Desktop has been perfectly clean since launch, but we do get the occasional issue on mobile. Did you happen to save the URL? That'll make it easier to track it down.
 
Oct 25, 2017
9,921
0
Sweden
Desktop has been perfectly clean since launch, but we do get the occasional issue on mobile. Did you happen to save the URL? That'll make it easier to track it down.
i did not unfortunately

it happened when i went to edit this post if that is any help :)

the page i was getting redirected to was something about being the lucky winner of vouchers at a swedish grocery chain or something like that
 

shira

Community Resetter
Member
Oct 25, 2017
7,326
0
My EUR community telling me they were getting mobile/full screen popups "you won an iphone" ads that leads to "your iphone is hacked" today

No way to reproduce or capture. Sorry.
 
Status
Not open for further replies.