Jeff - one of the ads being fed from your ad provider is serving up malware/scams

[Anonymous]

jsteele wrote:

Anonymous wrote:I just got a weird microsoft 365 malware warning popup (and I don't have microsoft 365). Twice within 5 mins actually.

What browser are you using?

Chrome

[Anonymous]

Been getting it for a few days now. On Chrome. This is what pops

This site can’t be reached
The webpage at https://gifts.modanova.shop/dailynews.php?key=c30bc6c714242b411c0f&siteId=untracked&domain=untracked&exchange=outbrain-dsp-pc-wcd-first-key-in-url-dftgvb&dd=www.dcurbanmom.com&ao=%7B"0"%3A"https%3A%2F%2Fwww.dcurbanmom.com"%2C"1"%3A"https%3A%2F%2Fwww.dcurbanmom.com"%2C"2"%3A"https%3A%2F%2Fwww.dcurbanmom.com"%7D&hardware=%5Bcpu%5DWin32%5B-%5D8%20Cores%5Bgpu%5DGoogle%20Inc.%20(Intel)%5B-%5DANGLE%20(Intel%2C%20Intel(R)%20Iris(R)%20Xe%20Graphics%20(0x00009A49)%20Direct3D11%20vs_5_0%20ps_5_0%2C%20D3D11)&timezone=America%2FNew_York&screen=1920-1080&info=binom&redirect=topRedirect might be temporarily down or it may have moved permanently to a new web address.
ERR_TUNNEL_CONNECTION_FAILED

[Anonymous]

Same here. Started today.

[Anonymous]

Just now. Two of them.

Microsoft Edge Version Version 137.0.3296.93 (Official build) (64-bit)



On the plus side, I won a prize as I am the 5-Billionth search!!


https://viruswarning0623us03a.z13.web.core.windows.net/




https://gifts.modanova.shop/dailynews.php?key=freegifts&siteId=untracked&domain=untracked&exchange=outbrain-dsp-pc-wcd-first-key-in-url-dftgvb&dd=www.dcurbanmom.com&ao=%7B%220%22%3A%22https%3A%2F%2Fwww.dcurbanmom.com%22%2C%221%22%3A%22https%3A%2F%2Fwww.dcurbanmom.com%22%2C%222%22%3A%22https%3A%2F%2Fwww.dcurbanmom.com%22%7D&hardware=%5Bcpu%5DWin32%5B-%5D16%20Cores%5Bgpu%5DGoogle%20Inc.%20(Intel)%5B-%5DANGLE%20(Intel%2C%20Intel(R)%20Iris(R)%20Xe%20Graphics%20(0x000046A6)%20Direct3D11%20vs_5_0%20ps_5_0%2C%20D3D11)&timezone=America%2FNew_York&screen=1920-1080&info=binom&redirect=topRedirect

[Anonymous]

https://viruswarning0623us07a.z13.web.core.windows.net/

[jsteele]

Just FYI, our ad partner blocked the modanova.shop site. But, that ad is not being served through DCUM. Rather, what happens is that one ad is served and then redirects to another side. After multiple redirects of that sort, the modanova.shop site gets served. But that is all happening outside of DCUM. We have to trace that series of redirects to the ad that is initially served on DCUM. However, to do that, I have to capture the traffic of the redirects which means I have to get the ad myself. So far, I have never seen the ad, let alone captured it.

I am still working on it, however.

[Anonymous]

I'm getting this a lot this morning. Same one I got before. Using Chrome. https://viruswarning0623us10a.z13.web.core.windows.net/

[Anonymous]

Just got this one again, using Chrome

https://viruswarning0623us21a.z13.web.core.windows.net/

[Anonymous]

jsteele wrote:Just FYI, our ad partner blocked the modanova.shop site. But, that ad is not being served through DCUM. Rather, what happens is that one ad is served and then redirects to another side. After multiple redirects of that sort, the modanova.shop site gets served. But that is all happening outside of DCUM. We have to trace that series of redirects to the ad that is initially served on DCUM. However, to do that, I have to capture the traffic of the redirects which means I have to get the ad myself. So far, I have never seen the ad, let alone captured it.

I am still working on it, however.

Yep still getting modanova shop

[Anonymous]

I'm still getting it too. I tried to put my browser in dveloper mode to track it, but I guess due to all the ads on your site, it's a huge number of requests like over 700 in under 1 minute. Is it supposed to be that way? It's a huge amount of web traffic just for sitting on the Recent Topics page and not clicking a thing.

[Anonymous]

FYI, got it again just now. I guess the problem still isn't solved. But better than yesterday in terms of frequency.

[Anonymous]

I got it yesterday and today.

[Anonymous]

I have gotten it several times today on chrome

https://gifts.modanova.shop/dailynews.php?key=c30bc6c714242b411c0f&siteId=untracked&domain=untracked&exchange=outbrain-dsp-pc-ceisk-first-key-in-url-qwpkmjdww&dd=www.dcurbanmom.com&ao=%7B%220%22%3A%22https%3A%2F%2Fwww.dcurbanmom.com%22%2C%221%22%3A%22https%3A%2F%2Fwww.dcurbanmom.com%22%2C%222%22%3A%22https%3A%2F%2Fwww.dcurbanmom.com%22%7D&hardware=%5Bcpu%5DWin32%5B-%5D12%20Cores%5Bgpu%5DGoogle%20Inc.%20(Intel)%5B-%5DANGLE%20(Intel%2C%20Intel(R)%20Iris(R)%20Xe%20Graphics%20(0x000046A8)%20Direct3D11%20vs_5_0%20ps_5_0%2C%20D3D11)&timezone=America%2FNew_York&screen=2752-1152&info=binom&redirect=topRedirect

[Anonymous]

Still getting it on Chrome when I'm on my laptop.

Of note, I use chrome on my phone and haven't had this issue at all.

[jsteele]

Anonymous wrote:Still getting it on Chrome when I'm on my laptop.

Of note, I use chrome on my phone and haven't had this issue at all.

Do you only use your laptop in one location? It could be that only certain ISPs are being targeted. If you are in an adventurist mood, you might trying using your phone as a personal hotspot and see if you get the redirects then.