Dismiss Notice
Guest, I have a big favor to ask you. We've been working very hard to establish ourselves on social media. If you like/follow our pages it would be a HUGE help to us. SoSH on Facebook and Inside the Pylon Thanks! Nip

Site Infection?

Discussion in 'SoSH Support & FAQ' started by adam42381, Oct 25, 2017.

  1. adam42381

    adam42381 Well-Known Member Silver Supporter SoSH Member

    Messages:
    4,254
    I’ve been getting random redirects to a site saying my iPhone may be infected when I click on the main board. This doesn’t happen every time, but it’s only happening on my iPhone (iPhone 8 running iOS 11.0.3) using Safari. Anyone else having this problem? I can provide links if needed.
     
  2. RIrooter09

    RIrooter09 Member SoSH Member

    Messages:
    3,523
    It's been happening to me as well. Only on mobile.
     
  3. DrewDawg

    DrewDawg Dorito Dink SoSH Member

    Messages:
    24,465
    I had a few issues earlier today when I used my laptop--said site was down and sent me to a cached version.
     
  4. bostonbeerbelly

    bostonbeerbelly Member SoSH Member

    Messages:
    1,547
    Same here on mobile - been happening sporadically the past few days.
     
  5. DontTauntOrtizMe

    DontTauntOrtizMe Member SoSH Member

    Messages:
    87
    Me too. I have been getting these messages on mobile.
     
  6. bsj

    bsj Renegade Crazed Genius SoSH Member

    Messages:
    16,068
    I don't get this via the app. Worth trying?
     
  7. Frito Tankona

    Frito Tankona Well-Known Member Silver Supporter SoSH Member

    Messages:
    301
    I get them as well
     
  8. Boston Brawler

    Boston Brawler Member SoSH Member

    Messages:
    6,118
    I received a few yesterday when on mobile. Doesn't happen with the app or desktop.
     
  9. Investor 11

    Investor 11 Plobbably the greatest videographer ever Gold Supporter SoSH Member

    Messages:
    2,235
    Same here. always a CloundFront redirection.
     
  10. InsideTheParker

    InsideTheParker Member SoSH Member

    Messages:
    19,105
    It happened to me once today on my laptop, at home. There was a message the gist of which was that it was not my computer, not my network, but originated with the website. It was brief, and next click brought it up.
     
  11. AlNipper49

    AlNipper49 Huge Member Dope

    Messages:
    40,369
    It's probably the server being cranky. I'll reboot.
     
  12. canderson

    canderson Well-Known Member Gold Supporter SoSH Member

    Messages:
    19,250
    Lots of timeouts this evening, Nip.
     
  13. adam42381

    adam42381 Well-Known Member Silver Supporter SoSH Member

    Messages:
    4,254
    Just happened again. I’m not on Wi-Fi. Screenshot:
     

    Attached Files:

  14. SumnerH

    SumnerH Malt Liquor Picker Dope

    Messages:
    23,947
    That looks like a scammy ad to me.
     
  15. TFP

    TFP Dope Dope

    Messages:
    15,102
    I've been getting that exact thing a lot on mobile. I just close out and re-load and it's fine.

    Any way to figure out which ad is doing it? It's quite annoying.
     
  16. AlNipper49

    AlNipper49 Huge Member Dope

    Messages:
    40,369
    I think it is part scammy ad part server. I’ll reboot later
     
  17. AlNipper49

    AlNipper49 Huge Member Dope

    Messages:
    40,369
    I think ti was part a security agent that I had on the server. Changed things around a bit and rebooted. If things happen more than once for you can you report back here?

    Thanks all!
     
  18. TFP

    TFP Dope Dope

    Messages:
    15,102
    Just happened to me twice on two different threads.
     
  19. adam42381

    adam42381 Well-Known Member Silver Supporter SoSH Member

    Messages:
    4,254
    Still happening.
     

    Attached Files:

  20. SumnerH

    SumnerH Malt Liquor Picker Dope

    Messages:
    23,947
    That's definitely an ad trying a phishing attack. Note that the URL is an amateurish phishing attempt: "app1e-secur1ty . com".
     
  21. Comfortably Lomb

    Comfortably Lomb Koko the Monkey SoSH Member

    Messages:
    8,690
    Same happening here. Frequently too.
     
  22. notfar

    notfar Well-Known Member Lifetime Member Silver Supporter SoSH Member

    Messages:
    2,018
    Happening for me too.
     
  23. canderson

    canderson Well-Known Member Gold Supporter SoSH Member

    Messages:
    19,250
    Is it feasible to donate enough to have ads removed? I’d gladly help the cause if the ads are messing with everyone.
     
  24. luckiestman

    luckiestman Son of the Harpy SoSH Member

    Messages:
    6,655

    To second this, I don't get any problems with the Tapatalk app.
     
  25. AlNipper49

    AlNipper49 Huge Member Dope

    Messages:
    40,369
    Originally they were hidden for subscribers. About 1% of our traffic is from people logged in so we wanted a way to make the unwashed masses pay. Then we had huge issues with the subscription system and also got a new skin/software where it was more difficult to selectively hide things.

    My guess is that google cleans up the bad ads being displayed, if it’s a bad ad we’re not the only one complaining (and I did). If you guys get a bad ad is there a way to identify what the actual ad is?
     
    #25 AlNipper49, Oct 28, 2017
    Last edited: Oct 28, 2017
  26. SumnerH

    SumnerH Malt Liquor Picker Dope

    Messages:
    23,947
    Yeah, if you could see what add is at the bottom of the page when it triggers that might help track it down. I just tried spoofing an iphone user-agent and refreshed the main board a few dozen times, but I couldn't get it to happen (I don't have an actual iphone to test with).
     
  27. Curtis Pride

    Curtis Pride Well-Known Member Bronze Supporter SoSH Member

    Messages:
    1,031
    I think it's mainly a problem with iOS 11 and Safari. The pop -up may come from a site put a cookie on your phone and then prompts a site redirection. To fix it (mostly):

    1. Quit Safari by double-pressing the home button and swiping Safari up. That stops Safari from running in the background.
    2. Clear your website history by going to Settings -> Safari -> Clear History and Website Data and tapping "Clear History and Data."

    That may solve the problem for now, but because the pop-ups are triggered by a file in the "Website Data" section of iOS I cannot guarantee that the problem will not recur.. Hope this helps.
     
  28. j44thor

    j44thor Member SoSH Member

    Messages:
    7,530
    I'm getting the Cloudfront redirection on Android 7.0 once per day.
    Pop up giving a $100 Amazon gift cert. Easy to get around but a lay person might get stuck.
    It only happens on SOSH and only happens once per day.
     
  29. Jimbodandy

    Jimbodandy Member SoSH Member

    Messages:
    1,378
    Same.
     
  30. Couperin47

    Couperin47 Well-Known Member Silver Supporter SoSH Member

    Messages:
    10,599
    There is a posting in the Ridiculously Cute Animals thread that links to the site www.bite.ca. ESET reports:

    Time;Scanner;Object type;Object;Threat;Action;User;Information;Hash;First seen here
    11/16/2017 9:22:32 AM;HTTP filter;file;http://www.bite.ca;HTML/ScrInject.B trojan;connection terminated;UP\Jeff;Threat was detected upon access to web by the application: C:\Program Files\Pale Moon\palemoon.exe (571638FB5FB0042782409C8BC0977A27B0B5AD5F).;B940B20513E219D81654B6D9B9742E9B940FB794;

    That link should be deleted.
     

Share This Page