Jump to content

Primary: Sky Slate Blackcurrant Watermelon Strawberry Orange Banana Apple Emerald Chocolate Marble
Secondary: Sky Slate Blackcurrant Watermelon Strawberry Orange Banana Apple Emerald Chocolate Marble
Pattern: Blank Waves Squares Notes Sharp Wood Rockface Leather Honey Vertical Triangles
Photo

Annoying ads? (v3)


  • This topic is locked This topic is locked
421 replies to this topic

#21
harhar

harhar

    Potato Sprout

  • Members
  • 6 posts

I think I might have caught that ad that shows the fake Flash Player update in action. Here's proof that it was the right ad:

 

http://i.imgur.com/GkIjmYG.png (translated, the text says: "Page can't be displayed! Please update Flash Player to the newest version!")

 

Here's what the web console looked like in this particular moment:

 

http://i.imgur.com/TA4pD2w.png

http://i.imgur.com/bSpcB3a.png


Edited by harhar, 30 April 2014 - 08:55 PM.


#22
Volandum

Volandum

    Potato Spud

  • Donator
  • 18 posts

I was reading this exact page: http://vatoto.com/read/_/241546/gate-thus-the-jsdf-fought-there_ch36_by_ak-scanlations/14 when I was redirected to this "Java install" thingy

hxxp://www.sdfgjkh.com/GB/index.php?dv1=11486828&dv2=&dv3=&dv4=Yep-GB&sec_id=qWJ8vBQjIEzEzre8v0g6vEtHv0i6zTekD38jf34jv3OR7aMaNrCHvZuRNksE7ku0Y0odfAO8PAY8PM%EB%EB&marketing_fid=MTM5ODg5ODI3My1hZmY0NDZlM2VlY2ZjMWYzODllM2RhZjFiZmVlY2ZkZQ==

by Firefox 29.0 (automatic updates) under Windows 7 (fully updated) using fully private browsing. I went to Firefox because Chrome was blanking out most of the pages in the chapter after loading them briefly, possibly because of other redirects but I don't dare comment.

 

EDIT: later from this page: http://vatoto.com/read/_/241546/gate-thus-the-jsdf-fought-there_ch36_by_ak-scanlations/16 I was redirected to

hxxp://www.desertops.co.uk/?loginbox_show_register=1

EDIT: And from the same page (p16 of gate ch36) now to

hxxp://www.latestsoftpro.com/yJMA0a51/videoupdater/c/?r=641206953&affid=15693http://www.latestsoftpro.com/yJMA0a51/videoupdater/c/?r=641206953&affid=15693

still using firefox

 

EDIT: And now from http://vatoto.com/read/_/241546/gate-thus-the-jsdf-fought-there_ch36_by_ak-scanlations/21 to

hxxp://www.dodsfkh.com/GB/index.php?dv1=11803734&dv2=51803&dv3=GB&dv4=51803-GB&sec_id=qWJ8vBQjIEzEzre8Clgmv3eHvTekD38jfEtafAXrNBV0D0OR7aNa7kO0z3gafAuEPAs3NrCbqlNRhnhazoRazlvrfAw0qlebz9JOfAs%EB&marketing_fid=MTM5ODg5OTAzMS05NWRhZDM4M2UzMzkzMzI4YmYxMDE4NDFiZjY1ODkxNA==

This is a very inauspicious chapter

 

EDIT: And now from http://vatoto.com/read/_/241546/gate-thus-the-jsdf-fought-there_ch36_by_ak-scanlations/26 to

hxxp://www.dodsfkh.com/GB/index.php?dv1=11803734&dv2=51803&dv3=GB&dv4=51803-GB&sec_id=qWJ8vBQjIEzEzre8Clgmv3eHvTekD38jfEtafAv37ks0D0ORNaMePBN0z3gafAXdNkY872CbqlNRhnhazoRazlvrfAw0qlebz9JOfAs%EB&marketing_fid=MTM5ODg5OTEzMy03NDJlNDg0MzlmNjUzOWIyMmZjZjE2NDVkNzNiNzM1Nw==

Edited by Naizumi, 30 April 2014 - 11:55 PM.


#23
Grumpy

Grumpy

    RawR

  • Administrators
  • 4,078 posts
  • LocationHere of course!

Thanks for the reports. I've disabled one of the ad networks.



#24
epitope

epitope

    Potato Spud

  • Members
  • 13 posts

I was redirected to the link below when I went directly to the "My Follows" page (it's bookmarked) on Firefox 29.0, Windows 7. The advert shows a page asking the user to "update" Java. Because I already shared the image on the first page of this thread, I didn't bother to retake another screenshot.

 

Spoiler



#25
rbspihp

rbspihp

    Potato Sprout

  • Members
  • 4 posts

its the java thing again I got this on the front page of batoto.

 

Spoiler

Edited by rbspihp, 02 May 2014 - 10:03 AM.


#26
Bloodkite

Bloodkite

    Potato Sprout

  • Members
  • 1 posts

I get the same java update thing since a few days: I was redirected from the front page and from a few chapters. This already happened several times.

 

 

hxxp://www.doivndj.com/DE/index.php?dv1=11847092&dv2=&dv3=&dv4=&sec_id=qWJ8vBQjIE7QDEw6zEzoI07jDARuCZNRNaYeNrCnvEXRNANrPBY0qnHafAMKPANaPcCQCW7kfcCrvEC5vEt8fAN%EB&marketing_fid=MTM5OTAxNzMzOS00MDkyMzU3YzQ5ZjRiYzg2ZWQxYTQxZTUyYWVkMTFmYg==

 

This one is really bad :-(


Edited by Bloodkite, 02 May 2014 - 08:26 AM.


#27
Infset

Infset

    Potato Spud

  • Members
  • 28 posts

Hey Grumpy,

 

I have a problem in the main page.

There's an ad that clears the entire page.

When the ad starts to load the html turns into this:

<html><head></head><body><font color="#FFFFFF">adlfw</font><div id="simple_overlay"></div></body></html>

The browser is Chrome and the OS is OS X.

 

Hey Grumpy,

 

I'm still having this problem.

There's another user with the same problem -> http://vatoto.com/forums/topic/18195-adlfw/

 

I added a screenshot from the console (it seems an ad with bad script)

Attached File  Screen Shot 2014-05-03 at 03.31.30 .png   132.16KB   0 downloads



#28
Grumpy

Grumpy

    RawR

  • Administrators
  • 4,078 posts
  • LocationHere of course!

Might be a bit better now? Maybe... hopefully... 

._.



#29
epitope

epitope

    Potato Spud

  • Members
  • 13 posts

Nope, not better. Redirection to the "update your java" page has gotten more frequent. I now see it on the "My Follows" page and on http://vatoto.com/read/_/241399/prison-school_v12_ch109_by_utopia, when I use Firefox 29.0 on Windows 7. I didn't bother to take a screenshot again because it's on the front page. 

 

Spoiler

 

Edit: Grammar.


Edited by epitope, 03 May 2014 - 07:52 PM.


#30
JRave

JRave

    Potato Spud

  • Members
  • 18 posts

I tested out epitope's linked page and also got it..  However it only seems to have a chance to come up with a b.scorecardresearch . com set of ad's are on the page.  After cycling through multiple pages and refreshes that was the only common thing I could notice.  In fact it seems that most pages on the site do not have that "ad network" showing up.   Just unsure where the scorecard stuff is being inserted from.



#31
Dynamisx

Dynamisx

    Potato Sprout

  • Members
  • 2 posts

Clicked on my usual bookmark (www.batoto.net) and was taken immediately to the following URL (batoto did not load):

http://www.doivndj.com/GB/index.php?dv1=11847092&dv2=&dv3=&dv4=&sec_id=qWJ8vBQjIE7QDEw6zEzoI07jDARuCZNRNksbPcCnvEXRNaVa7kV0qnHafAVaNBVrPcCQCW7kfcCrvEC5vEt8fAN%EB&marketing_fid=MTM5OTIxMjY3NS04ZjM2MGQxZjNiNjgxODVjMWIyNzNkYmM1NDU2Y2UzNQ==

 

The URL was prompting me to update Java.

 

Windows 7

Google Chrome Version 34.0.1847.131m  (with NotScript enabled, but batoto.com whitelisted)

 

Edit, also occurred just now on: http://vatoto.com/read/_/76854/papa-no-iukoto-wo-kikinasai_v1_ch1.5_by_japanzai/20

 

Honestly, I don't think this is ad related, and there is more likely some malicious javascript injected into the site's core code. I block all external sites running scripts, so the redirect is happening from batoto.com not somewhere else.


Edited by Dynamisx, 04 May 2014 - 02:54 PM.


#32
Rhymenoise

Rhymenoise

    Fingerling Potato

  • Members
  • 80 posts
  • LocationThe Earth
http://seth.avazutracking.net/tracking/redirect/redirect.php?id=8890907&czid=YXZhenU4ODkwOTA3MQ==&pub=1011876&source=$http://ax-d.pixfuture.net/w/1.0/afr?auid=338511&cb=insert_random_number_here&vurl=0&buyerid=7262233&campaignid=5709228&usrid=MTY5NGF2Y&categoryid=0&creativeid=21817519&filepath=http://content.yieldmanager.edgesuite.net/&price=0&pricingtype=CPA&rgid=Xp1Njcy&sellerid=7093543&sectionid=5426574&siteid=&usercity=Point%20Cook&kw=AAAAAI7NUgCv6EwBAAAAAKwdVwAAAAAAAgAEAAYAAAAAAP8AAAACE8j3jAAAAAAAJz1sAAAAAAAZ0G4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACfERsAAAAAAAIAAwAAgD8A1liGy0UBAAAAAAAAADQzNmY2ZTU0LWQ0MzAtMTFlMy1hMzE2LTc4MmJjYjcxNmNkZAAAAAAAAAA=,eJyrMrJMDTd3TM.NC3GODEvMNDANDTApTi3JjQjLDDSKrHJxSdcFANyvC-w=

popped up and went to:

http://www.supermarket-voucher.com/?aid=AVAZ&subid=5650793047

While I was reading http://vatoto.com/read/_/242359/dr-duo_v2_ch11_by_fried-squid-scans

Spoiler


Edited by Rhymenoise, 05 May 2014 - 08:47 AM.


#33
ThomasterXXL

ThomasterXXL

    Potato Spud

  • Members
  • 20 posts

I started my chrome with batoto.net (home page) being the only pinned tab and it immediately upon starting redirected to

http://http://update.flash-palys.us/Player/Warning-de.php?installer=Flash_Player_11_for_Other_Browsers&browser_type=KHTML&dualoffer=false
and instantly forced my browser to download some malicious setup.exe. (The first time chrome didn't recognize it as malicious like in the screenshot)
 
Screenshot
 
What bothers me is that this happened despite ABP being on.

 

I have to add that it isn't the ads fault that it worked despite ABP being turned on. I'm still new to the pinned tab thing, but apparently Adblock Plus doesn't block Ads for pinned Tabs.
That's how those malicious ads keep getting through.

 

Just thought I'd mention that.


Edited by ThomasterXXL, 05 May 2014 - 12:41 PM.

abafh.


#34
Amplify

Amplify

    Potato

  • Members
  • 135 posts
  • LocationEngland
hxxp://www.downsain.com/GB/index.php?dv1=564852&dv2=&dv3=&dv4=Webisaba-GB&sec_id=qWJ8vBQjIEzEzreaqZRoI978DEhoI0eozT1%3gq0J0fAve7kY0CW70fAVKNAN4&marketing_fid=MTM5OTMxMzIwMC05MzkwNGQ4NTQ0MzRiOThmYWY2YWNhZTFmOWJmNzNiOQ==
hxxp://www.doivndj.com/GB/index.php?dv1=11122617&dv2=&dv3=&dv4=&sec_id=qWJ8vBQjIE7QDEw6zEzoI07jDARuCZNR7kOENTCnvEXRPAu3NAX0qnHafAseNkwKN2CQCW7kfcCrvEC5vEt8fAN%EB&marketing_fid=MTM5OTIwNTE1Ny0wZjA1NjI0OTI5Mzk3NjRhN2VmNDc0YTY5NWFjYjdiMg==

From this page

http://vatoto.com/read/_/242521/karate-shoukoushi-kohinata-minoru_v25_ch264_by_deadbeat-scans

 

Had to re-open it entirely. Went to it, got redirected to the first one, hit back, ended up on the second one with no way back to the manga itself.


Edited by Naizumi, 07 May 2014 - 10:52 PM.


#35
JRave

JRave

    Potato Spud

  • Members
  • 18 posts

I found what seems to be one source of possible malware. Different ad, as it didn't open a popup and instead used the ad frame to "lure" you into clicking it.  The screenshot is what I see when I right click the ad and select block image. Prior to this ad I also got a video ad from the same network in the same spot. The video ad autoplayed with sound, although it was at half volume.  I also did an "inspect element" of the frame to see what is going on in that ad spot, that is the 2nd screenshot.

 

http://i.imgur.com/JJ9CQGd.png

http://i.imgur.com/mbgXCAO.png

 

This isn't the redirecting one, but might be linked to it.  Also I forgot to mention before, but I have about:blank pages open in a new window, which seems to be how that redirect works.  If anyone else is getting it fairly often, see if you can change that behavior in your browser somewhere.  I use a Firefox based browser(Pale Moon), so I can use the TabMixPlus addon for it.


Edited by JRave, 06 May 2014 - 05:43 AM.


#36
rbspihp

rbspihp

    Potato Sprout

  • Members
  • 4 posts

The Java update thing has a new form. I got it on the 2nd page of chapter 100 of silver spoon

 

which is this page http://vatoto.com/read/_/242786/silver-spoon_ch100_by_red-hawk-neo/2

hxxp://www.sushareliy.com/CA/index.php?dv1=2014565&dv2=&dv3=&dv4=ZG0506-CA&sec_id=qWJ8vBQjIEzEzre0v0gnv0g6Y3idI07jDc1jf3guCB887AO3h0JoCnMR7ksr7aV0v0RKfAsd7aNeNrCSvEJjzB80vE70CaKehnJevZORPw%EB%EB&marketing_fid=MTM5OTM5OTgxMy00M2UxZmEzZTkxNDQwNmU4MWRiY2RiNDRhZDRiMTIyZA==

Edited by Naizumi, 07 May 2014 - 10:51 PM.


#37
Kami

Kami

    Fingerling Potato

  • Members
  • 67 posts
  • LocationGermany

Just enabled my adblocker for batoto because I sometimes can't even use the "previous page" function after being redirected by the flash update ad.

Also there is still the java update redirect ad, a popup one and a video (or multiple videos?) with sound on the main page.

Sorry for not providing more info on these ads, i usually close them instantly.

Please update if it gets better so i can whitelist batoto again.



#38
OchaMeido❣

OchaMeido❣

    The Head Maid

  • Contrib Mods
  • 1,728 posts
  • Location@ the Greenhouse Tea Party~

Just enabled my adblocker for batoto because I sometimes can't even use the "previous page" function after being redirected by the flash update ad.

Also there is still the java update redirect ad, a popup one and a video (or multiple videos?) with sound on the main page.

Sorry for not providing more info on these ads, i usually close them instantly.

Please update if it gets better so i can whitelist batoto again.

 

dont think that will be possible as the ads are random. Grumpy may ask the advers. to remove them or he may block some , but there is too many different ads. '

The best ways is to either report which or,  click Donate on top menu. It will help the ads to disappear. 


ןן Tea Party~ ןן "THE BAR" ןן

ןןGuide to Uploading/deltin/sortin ןן

ןן[Must read] COMMENT SECTIONS RULES ן

Follow the comment sections' rules or else, you will be hanging at the edge of an cliff ^^
It maybe one step closer to death's door or an extension of your life's time.

#39
Hughinja

Hughinja

    Potato Sprout

  • Members
  • 4 posts
  • LocationGermany

Well, it seems to have stopped. I have not encountered the Java update thing for 3 days now, so I have no problem with disabling Adblock. Therefore I want to say thanks to whoever managed to solve this issue, that made it almost impossible to read one single chapter without getting redirected



#40
Kami

Kami

    Fingerling Potato

  • Members
  • 67 posts
  • LocationGermany

Thanks for the update, it improved a lot. (only 1 audio video on homepage and 1 java redirect since yesterday)

Thanks for fixing.

 

edit: looks like all the bad ads are still there, it's just the encounter-rate that went down. (which is due to new non-bad ads joining the collection i think)


Edited by Kami, 12 May 2014 - 08:14 PM.