Gelbooru

Notice: Please claim your Patreon rewards for January! We now offer a new perk (disable all advertising) to Patreon users who supported our project! (Read More and Contribute!). We are currently working on a mobile layout. Pardon the dust.

Now Viewing: I Had a Malicious Advert Open up in a New Tab

Keep it civil, do not flame or bait other users. If you notice anything illegal or inappropriate being discussed, contact an administrator or moderator.

Retropretzel Group: Member - Total Posts: 83
user_avatar
I Had a Malicious Advert Open up in a New Tab
Posted on: 11/11/16 06:21PM
Here's the URL that it led me to: lastversion.newupgradesys...TirJyi5Sfp3S9PzfC5zOZpccI. (POSSIBLY NOT SAFE)

Here's a screenshot: i.imgur.com/quo9lOF.png (This is the original result. Resulting page changes sometimes.)

In the webpage source it also has various links to a website named www.searchtabnew.com: (searchtabnew.com/partner/coinis/tr-inline-installv1.06.js) (ALSO POSSIBLY NOT SAFE)


Just wanted to let you know.

littlemikey001 Group: Member - Total Posts: 1
user_avatar
Malicious tabs
Posted on: 11/11/16 06:39PM
I have been getting these a lot on here, almost every other time i click on a tag or link or even just a blank spot on the tab, everything from a fake microsoft page telling me they are going to delete everything on my hard drive to fake adobe flash things asking me to download the latest version,(which i already have from the legit page) im not sure if its some new ad thing that gelbooru is doing or what, it happens whether i use adblocker or not.

lozertuser Group: Administrator - Total Posts: 1389
user_avatar
Posted on: 11/11/16 10:45PM
I'll assume you are not using adblock? I need your country and IP address you were using at the time via PM.

Jerl Group: Administrator's Pet - Total Posts: 4009
user_avatar
Posted on: 11/13/16 01:32AM
We're not the ones selecting these ads, which is why we need your location information so that we can report them to the ad network and have them pulled. We can't directly pull them ourselves; the ad network serving them has to do it.

The ad network serves different ads based on your geographic location, so having that information enables them to identify which actual ad campaign it comes from. Even different locations in the US get wildly different ads, so without more specific information it can be difficult for them to narrow it down. Those links are useful for identifying the specific ad once it's been narrowed down, but since it's easy and common for such malicious ads to redirect you, those domains probably aren't the ones used in the actual ad campaign, so they can't really just search for that campaign in their database - they have to actually visit all the ads and see where the redirects take them before they find the one that you got.

Retropretzel Group: Member - Total Posts: 83
user_avatar
Posted on: 11/13/16 11:26PM
Jerl said:
We're not the ones selecting these ads, which is why we need your location information so that we can report them to the ad network and have them pulled. We can't directly pull them ourselves; the ad network serving them has to do it.

The ad network serves different ads based on your geographic location, so having that information enables them to identify which actual ad campaign it comes from. Even different locations in the US get wildly different ads, so without more specific information it can be difficult for them to narrow it down. Those links are useful for identifying the specific ad once it's been narrowed down, but since it's easy and common for such malicious ads to redirect you, those domains probably aren't the ones used in the actual ad campaign, so they can't really just search for that campaign in their database - they have to actually visit all the ads and see where the redirects take them before they find the one that you got.


Yeah, I sent the location info to Lozer.

I don't know how these kinds of ads work, I just wanted to give you all the info that I had. I'll make sure to send the correct stuff in the future.

lozertuser Group: Administrator - Total Posts: 1389
user_avatar
Posted on: 11/15/16 02:46AM
I haven't gotten a response from the network yet, but ever since I got a new account manager they've been a bit slow in responding to messages, but tend to take action quickly. I guess they just forgot to reply to me.

add_replyAdd Reply

1