421 replies to this topic

[Kmot]

got redirected from here [i think]

 

http://vatoto.com/read/_/10372/alyosha_v1_ch8_by_project-bite-me-scanlations/12

 

to here

 

hxxp://www.dllprosoftx.com/RdOWQwNl/detection/j/?r=1118089060&affid=16438

 

 

edit1:

 

Another redirect to here

hxxp://www.lpmxp2042.com/4238732466593050344532435D526D4BF11E58E6C5EE7B6E290B39FA92CBEFC5EFA9C24005AFD67147C4CA9E838C2825?affid=13125&tgu_src_lp_domain=www.boxdllnew.com&r=1122176638

 

from here

http://vatoto.com/read/_/22002/kiss-x-sis_ch24_by_animesigma

 

This one pretends to be Google.

Edited by Kmot, 22 July 2014 - 04:46 PM.

[Yawgmoth]

is redirecting me to a malware page with self-installing flash-player

 

edit:

 

when i try to get there from my follow list 

Edited by Yawgmoth, 23 July 2014 - 03:23 PM.

[Grumpy]

Merged into annoying ads thread. Also, do you remember at what page that occured on?

 

is redirecting me to a malware page with self-installing flash-player

 

edit:

 

when i try to get there from my follow list 

[baroner]

http://vatoto.com/read/_/261281/masamune-kun-no-revenge_ch16_by_japanzai/24

 

there was redirect fake update thing figure i pass it along

[Acid3mon]

1. http://vatoto.com/read/_/137310/jojos-bizarre-adventure-part-5-vento-aureo_v54_ch500-508_by_ignition-one/94

 

2. Don't have a screenshot, sorry :/ First time posting here...

 

3. It was one of these fake google chrome ads where they tell you to upgrade your browser, i didn't clicked anything, the page was left untouched for a while and then the ad just popped and took over the whole page.

 

4. Windows 7 and Google Chrome

 

5. Well as for the advertiser i have no idea, it said google, but it was obviously a phishing attempt from something else...

 

6.

Spoiler

hxxp://www.lpmxp64.com/52564D5878493934717B685359755F7C2ABE3048C2F7DE484A6284024CFCA67057DCC5ED1563CBD5E9F8CB4126CF3604?affid=14321&tgu_src_lp_domain=www.listdwnl.com&r=1164285325

Edited by Grumpy, 01 August 2014 - 11:01 AM.
removed link

[Grumpy]

1. http://vatoto.com/read/_/137310/jojos-bizarre-adventure-part-5-vento-aureo_v54_ch500-508_by_ignition-one/94

 

2. Don't have a screenshot, sorry :/ First time posting here...

 

3. It was one of these fake google chrome ads where they tell you to upgrade your browser, i didn't clicked anything, the page was left untouched for a while and then the ad just popped and took over the whole page.

 

4. Windows 7 and Google Chrome

 

5. Well as for the advertiser i have no idea, it said google, but it was obviously a phishing attempt from something else...

 

6.

Spoiler

hxxp://www.lpmxp64.com/52564D5878493934717B685359755F7C2ABE3048C2F7DE484A6284024CFCA67057DCC5ED1563CBD5E9F8CB4126CF3604?affid=14321&tgu_src_lp_domain=www.listdwnl.com&r=1164285325

Sorry for kinda not believing on report... but are you sure it's that page? Had no other tabs of any sort? Like if it was the page after that, there's some chance... but the one linked is nearly impossible for that kind of stuff to come out because that page would only have like less than dozen different types of ads showing for you and I see none of them being an issue.

[Acid3mon]

Well it's not exactly on the page, what i mean is i got redirected to a different page and had to go back to the scan page to get rid of it

[Bobby W.]

http://vatoto.com/forums/topic/19612-is-the-company-still-alive/

 

Well, it's not really something like redirecting ads or stuff, but a malware infected url being constantly detected at the page.

By simply visiting the page won't trigger any malware alert, probably because it won't load yet. But when I click any link that redirects to another forum (such as links at the breadcrumb) from that page, the malware alert will appear.

Spoiler

I tried to reproduce this like 4 times (I tried visiting Scanlation Forums, The Company, and General Discussion links at the breadcrumb), and all of those times triggered malware notification warning to the same URL. Although, as I marked on the picture above, "that" part is constantly changing.

 

I tried other threads, but none of them appear to have that infected URL when I reproduce the same method. But whenever I get back to that thread, it will trigger malware alert to that link through the methods mentioned above.

 

I tried enabling my ads block to see if it came from some random ads-related iframe, but it wasn't blocked. Or perhaps it's just my ads block is stupid or whatever.

[ChocolateKay]

1. http://vatoto.com/read/_/119292/sora-ga-haiiro-dakara_v1_ch1_by_sakugara/2 and http://vatoto.com/read/_/119292/sora-ga-haiiro-dakara_v1_ch1_by_sakugara/4

2. No screenshot as I was frustrated and realized way later in retrospect that I should have taken it. It was grey though, had plain text that said java updated needed, and was on the top, above the manga page. 
3. I would arrive on the page, instantly get a popup box telling me to update my java. I had the options to close it with the x or hit ok, closing it with the x redirected me to its page. A similar thing happened, then I got redirected to a final page. I could press the back button to go to the comic and try and go forward before it loaded again, but it kept on loading to the next pages. I had no other tabs up at the time. 
4. Windows 8.1 and Google Chrome Version 36.0.1985.125 m (latest)

5.  As far as I can tell, none, but Dopeboime is the url I was finally redirected to.

6. As the links have popups and are malicious, I have screenshots with the urls instead. I hope that's alright. The images are big so just links. I have adblock but it is disabled for Batoto, as evidenced by me reporting here lmao. 

http://imgur.com/KK8tvoI http://imgur.com/Kyhya9a

 

I also sent a PM with the HAR Data, as the link is still in my history so I can fuss with it as much as I want. 

[Zee Tee]

Decided to give turning addblock off on this site another go.

 

Five minutes ago while on this page  I got redirected to something my antivirus freaked out about and blocked.  Time to turn it back on for another week or so...

 

Edit:  Looks like the link didn't make it

Edited by Zee Tee, 14 August 2014 - 01:44 PM.

[Crowena]

1. http://vatoto.com/read/_/119292/sora-ga-haiiro-dakara_v1_ch1_by_sakugara/2 and http://vatoto.com/read/_/119292/sora-ga-haiiro-dakara_v1_ch1_by_sakugara/4

2. No screenshot as I was frustrated and realized way later in retrospect that I should have taken it. It was grey though, had plain text that said java updated needed, and was on the top, above the manga page. 
3. I would arrive on the page, instantly get a popup box telling me to update my java. I had the options to close it with the x or hit ok, closing it with the x redirected me to its page. A similar thing happened, then I got redirected to a final page. I could press the back button to go to the comic and try and go forward before it loaded again, but it kept on loading to the next pages. I had no other tabs up at the time. 
4. Windows 8.1 and Google Chrome Version 36.0.1985.125 m (latest)

5.  As far as I can tell, none, but Dopeboime is the url I was finally redirected to.

6. As the links have popups and are malicious, I have screenshots with the urls instead. I hope that's alright. The images are big so just links. I have adblock but it is disabled for Batoto, as evidenced by me reporting here lmao. 

http://imgur.com/KK8tvoI http://imgur.com/Kyhya9a

 

I also sent a PM with the HAR Data, as the link is still in my history so I can fuss with it as much as I want. 

 

 

I'm having this exact redirection while reading Kimi Ni Todoke. It automatically tries to download a setup file, but my computer is blocking it from doing so due to a virus detection (I love my computer). 

[A Nick that you dont know]

hxxp://69.162.91.230/us3/160-lp.php  @ http://vatoto.com/read/_/192741/cheonsaeng-yeonbun_ch8_by_moonflower-scans/4

 

It redirects and starts a download claiming I have an outdated Java plugin.

 

EDIT: Now every manga I try to read immediately gets this ad making it impossible to read.

Edited by A Nick that you dont know, 15 August 2014 - 10:05 PM.

[Count Grey]

Confirmation of above reports.

 

Add redirects me to a new page saying that I need to update Java, then tries to automatically download a file.

 

hxxp://69.162.91.230/us3/160-lp.php  @ http://vatoto.com/read/_/118310/haikyuu_ch18_by_u-prod-scanlations/4

 

Image of site:

Spoiler

 

I must be really dense. Happened more than 10 pages in a row before I realized I should report it.

 

Good luck, guys.

 

Edit: Running Windows 7, using Google Chrome version 36.0.1985.143. It breaks my heart, but I had to actually install AdBlock. I'll turn it off before I shut down tonight and see how tomorrow goes.

Edited by Count Grey, 15 August 2014 - 10:30 PM.

[Hailburn]

1. http://vatoto.com/read/_/119292/sora-ga-haiiro-dakara_v1_ch1_by_sakugara/2 and http://vatoto.com/read/_/119292/sora-ga-haiiro-dakara_v1_ch1_by_sakugara/4

2. No screenshot as I was frustrated and realized way later in retrospect that I should have taken it. It was grey though, had plain text that said java updated needed, and was on the top, above the manga page. 
3. I would arrive on the page, instantly get a popup box telling me to update my java. I had the options to close it with the x or hit ok, closing it with the x redirected me to its page. A similar thing happened, then I got redirected to a final page. I could press the back button to go to the comic and try and go forward before it loaded again, but it kept on loading to the next pages. I had no other tabs up at the time. 
4. Windows 8.1 and Google Chrome Version 36.0.1985.125 m (latest)

5.  As far as I can tell, none, but Dopeboime is the url I was finally redirected to.

6. As the links have popups and are malicious, I have screenshots with the urls instead. I hope that's alright. The images are big so just links. I have adblock but it is disabled for Batoto, as evidenced by me reporting here lmao. 

http://imgur.com/KK8tvoI http://imgur.com/Kyhya9a

 

I also sent a PM with the HAR Data, as the link is still in my history so I can fuss with it as much as I want. 

I've experienced this happening while on http://vatoto.com/read/_/8985/witch-craft-works_ch7_by_animexis/24

 

My OS is Windows 7, browser is Google Chrome Version 36.0.1985.143

 

http://imgur.com/sey3uwd

Edit: Sent a PM to Grumpy with HAR data.

Edited by Hailburn, 15 August 2014 - 10:26 PM.

[notquiteotakuyet]

1. http://vatoto.com/read/_/4449/change-1-2-3_v9_ch42_by_snoopycool/11
2. screenshot album including chrome developer network info http://imgur.com/a/o0nSe
3. I would arrive on the page, instantly get a popup box telling me to update my java. I had the options to close it with the x or hit ok, closing it with the x redirected me to its page. A similar thing happened, then I got redirected to a final page. I could press the back button to go to the comic and try and go forward before it loaded again, but it kept on loading to the next pages. I had no other tabs up at the time.
4. Windows 8.1 w/ Update 1, Chrome Version 36.0.1985.125 m
5. some fake java update site meant to install malware
6. derp:// 69 .162 .91.23 0/us3/728-lp.php (spaces added so no one clicks on it accidently

Edited by notquiteotakuyet, 16 August 2014 - 12:17 AM.

[mitojee]

1. http://vatoto.com/read/_/57278/saikyou-densetsu-kurosawa_v1_ch1-8_by_hox/5

2.same as other Java redirect problems above, caused by banner ad. Blocking ad solves it.

3. Windows 7, Chrome Version 36.0.1985.143 m

[tengokujin]

Pages in Jojo keep redirecting to this:

hxxp://69.162.91.230/us3/160-lp.php
Screenshot of page I'm redirected to: http://i.imgur.com/f5ZhjkU.png
Latest page I was redirected from: http://vatoto.com/read/_/115228/jojos-bizarre-adventure-part-2-battle-tendency_v7_ch63_by_ignition-one/17
Screencap: http://i.imgur.com/2H2cDl9.png

 

Addendum: http://i.imgur.com/d5G34mv.png

I'm checking to see if adblock will prevent this.

 

Adblock *is* preventing the java fakeware site from popping up, but now I feel bad.

Edited by tengokujin, 16 August 2014 - 02:33 AM.

[Gendalph]

report over IRC
Redirect to malicious download
From: http://vatoto.com/read/_/240903/sachiusu_ch1_by_wonderland-translations/3
To: hxxp://69.162.91.230/us3/160-lp.php
started a few minutes ago

[SlipTrick]

I'm getting the fake Java update redirect. It's happening for any page I go to with top and right side ads. As it is, I can't read anything.

[Aionym]

Same as above.

http://vatoto.com/read/_/210047/haru-no-houtai-shoujo_ch9_by_psylocke-scans/4

 

Also... has happened with the following pages:

http://vatoto.com/read/_/237443/haru-no-houtai-shoujo_ch10_by_psylocke-scans/2

http://vatoto.com/read/_/237443/haru-no-houtai-shoujo_ch10_by_psylocke-scans/3

 

Etc. No screenies.

 

Edit: Auto malware download.

Edited by Aionym, 16 August 2014 - 01:05 AM.