Thread "SUSPICIOUS ACTIVITY - REPORT IT HERE" in forum "Comic Talk and General Discussion *"

Posted at 8:01PM, Jan. 2, 2014

We've been getting reports of some pretty bad ads and stuff recently. See the newspost about it HERE.
If you've seen an adult ad, had your browser redirected to another site, or saw anything on The Duck that seemed just plain sketchy please report it to us in this thread.
Alternatively, you can send a PQ to myself or ozoneocean, or email me at hippievannews@gmail.com

Please do your best to provide us with the following:
1. Any evidence you can gather: screenshot, url, source code of the ad.
2. What type of machine is being used (PC/Mac/Tablet/Phone/whatever)
3. Browser
4. Country/State (we suspect this may be a regional issue, but we’re not sure)
And any other info you think might be useful!

If you can't get all of that, please let us know anyways. The more evidence we can gather on this issue, the better.

Posted at 9:01PM, Jan. 2, 2014

Common ones that show up:

I should not really complain about this one. They finally got my orientation correct at least!

iPad2/Safari and Google Chrome

Posted at 11:01PM, Jan. 2, 2014

I got a load of stuff come up on my phone, to the point I couldn' visit the site without being redirected to download some alleged anti malware stuff.

Posted at 9:01AM, Jan. 3, 2014

Thanks for the info Genjoke. Any specifics though? If you could give us even a few names of the antimalware stuff?
:)

So far We've had reported in that vien: Java update, Firefox update, Flash update, and PChealthboost update.

On this site and no other normal site. This site is etting exactly as dodgey as video streaming and song lyric sites. I would bet $100 USD that most free porn tube sites are cleaner than here.

Posted at 9:01AM, Jan. 3, 2014

Just collecting these here to make things a little bit easier…

I'm not getting these on my PC where I have adblock, but on my iphone I'm continually getting redirected to this game:

…as well as another one called Clash of Clans. I've also been redirected to explicit adult websites a few times, and see the same ads as kawaii does.

Posted at 12:01PM, Jan. 3, 2014

And here's the source code (I've also just been booted to the "War Games" site Hippy mentioned above.
Windows XP, mozilla firefox

Posted at 2:01PM, Jan. 3, 2014

I had the same problem as Genejoke - a popup with only an "OK" button overlaid the screen so I couldn't go forward and back. I'm on Android.
One of the links in question was lovelinks.us/red/mobo/360lp.php

Posted at 6:01PM, Jan. 3, 2014

Reposting from Locoma's newspost comment:

–
I caught this screenshot of a redirect yesterday. The search bar specifically names nym1.ib.adnxs.com and when I looked it up, it is a type of malware.

——
UPDATE: You know, this is a crapshoot, but I just disabled Java on my safari browser then cleaned out the history and cache. I know Java can be a source of really bad malware. I am now not seeing any ads, but I also cannot see the featured comics on the front page. I will keep my fingers crossed that this can be a temporary solution.

——
After disabling JavaScript, I have not been bothered with any ads for hours (and counting). This is how I now see the welcome page:

Posted at 9:01AM, Jan. 4, 2014

Copying this here from the newspost:

Also, don't know if this is useful, but the url before I get redirected to whatever crazy site appears to be this: http://tracking.msales.com/incoming/click.php?b=153&rc=3

Posted at 2:01AM, Jan. 5, 2014

Just got it again. This one:http://lovelinks.us/wang/mobo/360.php

Posted at 7:01AM, Jan. 5, 2014

OK! It just happened at 4pm sharp. This url "http://www.updating-your-browser.org/Firefox-DE/" opened itself in a new tab while I was reading the latest updates of "Demons Mirror".

If anyone is really curious, I'll be happy to provide a full translation, but I think the short version "Click OK to prove you're an idiot" should be sufficient. ;)
It doesn't seem to be linked to the comic or certain pages though - it didn't do this when I went back and forth to reload the page. (btw. I'm using Firefox 26, German version "für Yahoo Deutschland yahoode 1.8" and the help screen assures me it's up to scratch).

Posted at 7:01AM, Jan. 5, 2014

Sorry! The first screenshot didn't work.

Posted at 8:01AM, Jan. 5, 2014

This one seems to have run in the background, keeping the comic I wanted to see from loading. It only appeared when I hit the "stop" button.

They're telling me in very broken German (Google Translate?) that I am (sic!) currently an outdated Java Plugin. This is the URL: http://www.autopartswarehousei.com/DE/?s1=HmXxDNLCMADdfHMBAAAAALvybwAAAAAAAgAQAAoAAAAAAP8AAAABEXf6RwAAAAAAb8J4AAAAAADhj4kAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABmlhUAAAAAAAIAAwAAgD8A-90gY0MBAAAAAAAAADQ3MGY3Yzk2LTc2MjItMTFlMy1iOGU4LWVmNGUwNTQzYmEzYQAAAAAAAAA=&s2;=26109&s3;=DE&s4;=264382&s5;=24345821
and this is its source code:

Erkennt veralteten Java Plug-Institle>

Posted at 1:01PM, Jan. 5, 2014

Is this what were looking for?

Posted at 2:01PM, Jan. 5, 2014

@Call Me Tom: Yep! Anything like that…DD isn't supposed to have any popups or redirects. Any ads that seem inappropriate should be reported, too.

Anything else you can tell us like your browser/device you're using? Thanks!

Posted at 12:01AM, Jan. 6, 2014

I keep getting redirected by love links? I get a pop up that says my app store needs updating or some such then takes me to movie genie on the play store.

Posted at 11:01AM, Jan. 7, 2014

I came across this article today, which I suspect is at least a part of what's happening here. http://techcrunch.com/2014/01/06/shady-app-install-ads-are-automatically-redirecting-mobile-users-to-app-store-google-play/

Posted at 8:01AM, Jan. 10, 2014

Had a good chuckle just now. Instead of a comic page I wanted to see, I got redirected to this link: http://adobe.softpoor.pw/FlashPlayer3/C/DE/update.php?installer=Flash_Player_11_for_Other_Browsers&browser_type=KHTML&dualoffer=false
.
So far so good. This is nothing new, but can you guess what it said on that page?
.
      502
   Bad Gateway
_________________
         nginx
.
Now that's finally something we're all familiar with, aren't we? ;)

Posted at 2:01PM, Jan. 13, 2014

I haven't been redirected to any weird sites in the last couple days, although I'm still being forced into the app store. And my banner ads seem to have gone back to normal (ie no dating ads). Are other people still having issues?