Potential WordAds Dangerous Redirect

boneorchards · Member · Oct 9, 2018 at 11:33 am
Copy link
@gemmacevans I also have reservations about clicking the ad, but my site is http://deadbell.com if support would like to (on a mobile device.) I uploaded a screenshot with my IP address to my media uploads as directed by another support person. I will upload one with the new ad across the top now.
mega901 · Member · Oct 9, 2018 at 12:01 pm
Copy link
@lizzierunning, I have got the same problem now. Redirect if that Asda dodgy website is gone but the banner ad at the top of my site keeps popping up. It goes when I clear the history but lit comes back later. This banner shows the image of NI Card (National Insurance Card)
torres126 · Member · Oct 9, 2018 at 12:13 pm
Copy link
@boneorchards

I also have reservations about clicking the ad

That’s completely understandable. You could find a URL by right clicking the image on a desktop, or holding it on a mobile device and then clicking “Copy Link Address”. The vast majority of devices will let you find the URL an image redirects to without requiring you to actually click it. :)
lizzierunning · Member · Oct 9, 2018 at 12:16 pm
Copy link
Thanks torres126. This is the link address from mine : https://adclick.g.doubleclick.net/pcs/click?xai=AKAOjsvDUok3xspeyGR-nxxYHVa6xP1Jq_jesCzBjBOg9AtonH4EK4_ISFPOD1BzFTsHx39E4Z_83pfXAHBZw_OrjRStJ-6xOcA1iYvQzwEyYEEsapKPQlSyjEdo-eibV3yoYagw2AvINfw9EacegK5j_VpS0A&sig=Cg0ArKJSzIgPrZSHd5M_&urlfix=1&adurl=https://ams1-ib.adnxs.com/click%3FeqLrwg_Ouz-VG1YCcz62PwAAAGBmZgJAGcbdIForuj_Qm4pUGFvAP7-bWA_4VmRw7xKb9ozli0rQm7xbAAAAAGnvvwBWHgAA3QoAAAIAAAD4BgIHmekTAAAAAABVU0QAVVNEAEABMgDDNAAAAAABAQUCAAAAALQAHiUH3QAAAAA./cnd%3D%2521SAv4TgiOnu0LEPiNiDgYmdNPIAAoADEAAAAAAAAAADoJQU1TMTozOTMxQGNJAAAAAAAA8D8./cca%3DMjc4MSNBTVMxOjM5MzE%3D/bn%3D84046/referrer%3Dhttps%253A%252F%252Flizzierunning.wordpress.com%252F2018%252F10%252F05%252Fgirls-running-wild-kayleigh-ralphs%252F/clickenc%3Dhttps://www.giffgaff.com/
mega901 · Member · Oct 9, 2018 at 12:30 pm
Copy link
This is an inlmage link of banner ad which pops up on top of my site.
lizzierunning · Member · Oct 9, 2018 at 12:40 pm
Copy link
I am getting the same as mega901. The content inside the banner ad keeps changing.
staff-zinnia · Staff · Oct 9, 2018 at 4:39 pm
Copy link
Thanks folks. We are still looking at this and I’ve passed along all of the details shared to the team investigating the ads.
torres126 · Member · Oct 10, 2018 at 9:50 pm
Copy link
Hi,

I wanted to ask about something still related to dangerous adverts, though not necessarily redirects. What’s the deal with adverts which most likely redirect to viruses or scams being shown? I’ll give you two examples which I received reports of today:

1. A PPI advert which redirected to an incredibly dodgy site, and wanted you to fill in a very dodgy survey
2. An advert which redirected to a website that had virus scanners ringing, not to mention it wasn’t even marked as secure in the browser

These adverts aren’t necessarily damaging on the home page, but if you click them, they do seem to be damaging. It’s the vast minority of adverts, so I’d just like to ask if there’s something which can be done about these, even if they don’t automatically redirect to another site.

Thanks. :)
supernovia · Staff · Oct 10, 2018 at 11:42 pm
Copy link
@torres126 I agree they’re bad… we block those advertisers.

Can you do us a huge favor and gather more information? If we can get all of this our developers are better able to ferret out the bad actors and get them off our ads platform. We often ask users for this but don’t get information. I’m confident you can send it for your system though:

– The device/browser and operating system.
– The IP address

(the above two can be gathered via https://supportdetails.com/ and sent in a screenshot or copied and pasted)

– The exact URL of the page/post that showed the ad.
– What was being advertised.
– The URL that the ad takes you to.
– If possible, a screenshot of the ad that hijacked the browser.

If you bump into threads like this and wouldn’t mind asking for those details, that would be helpful, too. (Still modlook them so we can note them.)
torres126 · Member · Oct 11, 2018 at 6:09 am
Copy link
Hi @supernovia,

It’s the same issue which I sent to @kokkieh earlier in this thread (reply #3183482), I’m not exactly comfortable asking users for information of an IP address. That being said, I also got the first advert myself today. I know that the viewer yesterday reported it using the “Report Ad” button, but this might give a clearer description of what I’m talking about.

1. A PPI advert which redirected to an incredibly dodgy site, and wanted you to fill in a very dodgy survey. An advert which redirected to a website that had virus scanners ringing, not to mention it wasn’t even marked as secure in the browser

So let me show you what this was: https://prnt.sc/l4pemk

This was being displayed on the home page of clubpenguinmountains.com. It redirected to:

(Left one) http://articles.comparisons.org/go/5bb4f6d3d0ad7a3d457234ed?aff=1561&sub=MFRB_UK_PPI&xcode=0f51f00c-ec4f-4ede-b514-d6e2e02d9fd1
(Right one) http://articles.comparisons.org/go/5bb4f6d3d0ad7a3d457234ed?aff=1561&sub=MFRB_UK_PPI&xcode=9eb4531b-1462-44cf-8681-1b630e2dcdc7

This is a minor one, but I was shown that clicking these adverts leads to a page where you have to enter personal details. And honestly, does it not really look like a phising scam? I’ve got a couple of messages about this (and one very simular to the advert where it’d post a town and then say “If you have no life insurance, you must read this!”) , and I agree with them, but I guess the final judgement is up to you guys.

I’m not exactly comfortable posting my IP address and all here (although I was on Puffin like usual) but I took a screenshot and uploaded into the media library of Club Penguin Mountains, will that do?

2. An advert which redirected to a website that had virus scanners ringing, not to mention it wasn’t even marked as secure in the browser

Regarding example two, it’s an advert though I’ve not/can’t gathered the details, these were the screenshots I was shown: https://prnt.sc/l4pkfa

It leads (note: not automatically redirects) to this site if you click it: https://prnt.sc/l4pkbs

And I was sent this by a reader last night: “I reported your adverts with malware. I’m pretty sure it’s dodgy, download links and my virus scanner was wary””

The advert does look familiar and I’m pretty certain I’ve seen it in the past, but I’m not aware of the details of the device it was displayed on yesterday. I’ll also modlook any other similar threads and ask for those details. :)

Thank you!
mega901 · Member · Oct 11, 2018 at 9:10 am
Copy link
Ad banner still popping up on top of my website. This banner ad is about Quote Search for life insurance with NI Card image on it.

An image link is:
boneorchards · Member · Oct 11, 2018 at 9:18 am
Copy link
I was just stopping by to see if there are any updates/solutions. I’m still getting the banner ads across the top. Like someone else said, they change with every click on my site.
lizzierunning · Member · Oct 11, 2018 at 7:16 pm
Copy link
Banner ad is now back on my blog again. This is the link it is trying to send me to. https://adclick.g.doubleclick.net/pcs/click?xai=AKAOjstshFNc5Gmw6sRezK8odTvezafWV5LaVCmXkMRjIgdcahfGQhnIyqKsGgnV1aeIepoBdwKX3XiFtT9gB_jxEBcYv1am0ncXwh-0pljO66pKaCUbr_xYFmeOZO72sCV8bH–tRgi_MiqCufSrS-MY5HC7A&sig=Cg0ArKJSzEGxtkbl9Oku&urlfix=1&adurl=https://fra1-ib.adnxs.com/click%3FJAuYwK271z-DonkAi_zSPwAAAKBwPf4_g6J5AIv80j8kC5jArbvXP5ahsIJX4NIOKDWNt0_HrkUtob9bAAAAAGnvvwBWHgAA3QoAAAIAAAD4BgIHmekTAAAAAABVU0QAVVNEAEABMgCN1QAAAAABAQUCAAAAAL4AlyeB1wAAAAA./bcr%3DAAAAAAAA8D8%3D/cnd%3D%2521SAvGTgiOnu0LEPiNiDgYmdNPIAAoADEAAAAAAAAAADoJRlJBMTozODI0QGpJAAAAAAAA8D8./cca%3DMjc4MSNGUkExOjM4MjQ%3D/bn%3D77555/referrer%3Dhttps%253A%252F%252Flizzierunning.wordpress.com%252F2018%252F10%252F05%252Fgirls-running-wild-kayleigh-ralphs%252F/clickenc%3Dhttps://www.giffgaff.com/
supernovia · Staff · Oct 12, 2018 at 9:44 pm
Copy link
@torres126 an IP address from the screenshot of supportdetails.com would work just fine.

Thanks for the continued reports, folks.

Again, if you can get the link you were on, the link it was sending you to, a screenshot of the ad, and a screenshot from supportdetails.com from the device, that will help us get this resolved. Thanks!
torres126 · Member · Oct 12, 2018 at 9:48 pm
Copy link
@supernovia I believe that the screenshot is on my Media Library and you should be able to view it, but let me know if there’s still an issue. :)
supernovia · Staff · Oct 12, 2018 at 10:18 pm
Copy link
Yup, got that and sent it in. Our team is taking another look.
torres126 · Member · Oct 13, 2018 at 12:29 pm
Copy link
By the way, found out the URL of the second example, in case it’s of any use to you. It’s this:

https://adclick.g.doubleclick.net/pcs/click?xai=AKAOjsuJDjQcbMnLYfrxO_DjZOa5Jn_W5ALeJgkA8oYyDoas8m2u-CRr8TYI_7zRWyZ5FhMb9xxJdJ2DuC1LP0CIMFATDorj76cNhxd0nnJXkWyFL-8E-3dbqanFgyh27vXHM9X-jwVJkqXZySTHTp1uMPjYC2_hwSW7ETGqfJWikJNo9Z3zmycZqSkOE8hAwh2aGv2X9mbnNOQHPsvQX1xDsrktGRFy_mSvQ4YILEYvFszHOjTQPSOerooi2jT2st-hEI9T0p8UxN-LamdpUvl39zgSzx2ofTjryO3NeIOBMcnSHvpMxV3mqsdX3WLZPABxj-zLam12aQgG3uI8lGikIoo9Hp61XGO20Ncbyu0IqWIlnaz4gQC6KJIP0IICMeRnHGBo2GNheP8FHzuzyYbHGJOCzSMUlNTUQWEDiMoZOVlg0zLBBe1vePyfjLdGFiOOzPvEetFYiVk8kAgMea22y00ok9XIB0SIGm2AA4pEKugqbs8V6ovJKZror5KcbxrRNqaprd0PogQ-L-BS0hQkpiHO3HDiesiYdLrfYFYWVDIbwicB07Zm4tvKXQMXCEs2ScN1y5wihVjBLMrVCQ1m4iSvVCaWI8w7GNkId40EHAJp8sdlgfoqCan8JCV32nQ8gPx5_x16R9jhtfpO2NrB44cFYtbAGED2RhTHovKgT4H6uCOzFfY9SoKlVhhfzECvUkT-sd15BS5-YWLh46v04Z-fXxfMeUz5ciGwDaLCUWXKxxUBYgCM_UqiR1Ghn3rPTsbiecsp1UEQTRxTPiCwsnMCXZESLfivjDkO8HeIiqtSYzTSP80XbCpmCrp52ddHkbw6bOwo7TOTpWjBckrD2Dk0RM-ept4xOL0TpJHxjrpCqpmx4AACLsfW_pDfOXpyc_qROr9dlRvyp2hGGvG1Ozr7-V0AcE4t2-mfi84p5I62nzS3LKIP8SYQvtP7TBWpkVgKYCO0GLvXUd2guzDXKhhEBwjm_gDBUiNE&sai=AMfl-YQyw-5jhfMHOd52tFPqal1ThIvNIWhJMOdgjmQxnDPtobLJFR6rVNn6HW-ofZwevuk2bzS7mvQ3Wk6uBT4yCFGrRB4A-fBxy3tFLolpDhlifLNudrkMNbjVgTaKd7npM6gSYC_ItKumhXg&sig=Cg0ArKJSzGGEQsuE7CFHEAE&urlfix=1&adurl=http://www.oyunlar1.net/

Thanks for looking into this. :)
supernovia · Staff · Oct 13, 2018 at 10:08 pm
Copy link
Thank you. I’ll let you know what we find.
torres126 · Member · Oct 14, 2018 at 3:11 pm
Copy link
Thank you!
mega901 · Member · Oct 17, 2018 at 1:36 pm
Copy link
Hi,
I am still getting the banner ads on top of my website and now this is happening on my laptop also. Does anyone still have this problem? Or is there anyone found out the solution yet?

No items found.