Malware redirect - Alfa Romeo Forum
You are currently unregistered, register for more features.    
The AO Bug Lounge
Find an image missing? A page you cannot access? Post it here.

 
Thread Tools
(Post Link) post #1 of 13 Old 12-01-18 Thread Starter
Status: bring back tapatalk
AO Silver Member
 
trashbat's Avatar
 
Join Date: Jun 2010
Location: United Kingdom
County: Manchester
Posts: 3,193
Malware redirect

I access this forum via Chrome for Android.

Every so often, when opening a thread, it will redirect to an 'rgshark.com' address that then displays some spam/fraud promotion about my phone either having won a prize or containing malware. It then wants me to install their Android app, which of course I'm not going to do.

This is specific to AO and either a bad ad or something worse that's been allowed in. Please sort it out.
trashbat is offline  
Sponsored Links
Advertisement
 
Status: Spider's asleepforwinter
testing
 
Admin_Support's Avatar
 
Join Date: Jul 2011
Location: united kingdom
County: Canada
Posts: 2,173
Garage

Member car:

Spider/GTA/

Quote:
Originally Posted by trashbat View Post
I access this forum via Chrome for Android.

Every so often, when opening a thread, it will redirect to an 'rgshark.com' address that then displays some spam/fraud promotion about my phone either having won a prize or containing malware. It then wants me to install their Android app, which of course I'm not going to do.

This is specific to AO and either a bad ad or something worse that's been allowed in. Please sort it out.
I'm assuming you're using the desktop skin to browse the forum?

Please grab a screen shot of the ad and the ad URL. we'll remove it.

Lee
Admin_Support is offline  
(Post Link) post #3 of 13 Old 12-01-18 Thread Starter
Status: bring back tapatalk
AO Silver Member
 
trashbat's Avatar
 
Join Date: Jun 2010
Location: United Kingdom
County: Manchester
Posts: 3,193
Quote:
Originally Posted by Admin_Support View Post
I'm assuming you're using the desktop skin to browse the forum?

Please grab a screen shot of the ad and the ad URL. we'll remove it.

Lee
Yes I'm using the desktop skin.

There is no ad as such, the page is redirected before anything is rendered. However I suspect the redirect is performed by some advert script on the page.

I could give you an example of the end URL if that helps.

You're not the only such forum with this problem - see for example https://airsoft-forums.uk/index.php?...ious-websites/ - this describes the problem.
trashbat is offline  
Status: Spider's asleepforwinter
testing
 
Admin_Support's Avatar
 
Join Date: Jul 2011
Location: united kingdom
County: Canada
Posts: 2,173
Garage

Member car:

Spider/GTA/

Hello there,

Yes so when that redirect happens, get a screenshot of the page and URL.

The next time you see these ads, we'd need the following:

1.What device you're using.

2.The OS/browser you're using.

3.Your general location.

4.The URL of the ad, you can get this by right clicking the ad and clicking "copy link address". You can also click "inspect" and copy the highlighted text.

5.Screenshot

Once we get that we can send it to our tech team and get them to investigate. Sorry for the inconvenience.

Ed
Admin_Support is offline  
(Post Link) post #5 of 13 Old 16-01-18 Thread Starter
Status: bring back tapatalk
AO Silver Member
 
trashbat's Avatar
 
Join Date: Jun 2010
Location: United Kingdom
County: Manchester
Posts: 3,193
Samsung S7
Android 7.0
Chrome for Android v63
Manchester, UK

I'll add in a specific link and a screenshot next time it happens, which won't be long.
trashbat is offline  
(Post Link) post #6 of 13 Old 16-01-18 Thread Starter
Status: bring back tapatalk
AO Silver Member
 
trashbat's Avatar
 
Join Date: Jun 2010
Location: United Kingdom
County: Manchester
Posts: 3,193
It attempts to redirect to http://www.rgshark.com/offer/gb/

Currently this site isn't working so I can't give you a screenshot.
trashbat is offline  
Status: Spider's asleepforwinter
testing
 
Admin_Support's Avatar
 
Join Date: Jul 2011
Location: united kingdom
County: Canada
Posts: 2,173
Garage

Member car:

Spider/GTA/

Hey there,

Before I get this blocked, is this what you saw when you get redirected?

Capture.PNG

Cheers,

Ed
Admin_Support is offline  
(Post Link) post #8 of 13 Old 17-01-18 Thread Starter
Status: bring back tapatalk
AO Silver Member
 
trashbat's Avatar
 
Join Date: Jun 2010
Location: United Kingdom
County: Manchester
Posts: 3,193
No, but only because something on your network has blocked it for you.

Without that, currently it redirects onwards to here, a broken website:

http://alitrk.com/?flux_fts=tcxlilll...aa&flux_cost=0

Had that a couple of times today. But prior to the last few days, it's been similar to the image in the thread I linked to further up.
Attached Images
File Type: jpg Screenshot_20180117-153650.jpg (11.3 KB, 5 views)
trashbat is offline  
Status: Spider's asleepforwinter
testing
 
Admin_Support's Avatar
 
Join Date: Jul 2011
Location: united kingdom
County: Canada
Posts: 2,173
Garage

Member car:

Spider/GTA/

Sent those up to get blocked. Thanks!
- JB
Admin_Support is offline  
(Post Link) post #10 of 13 Old 01-02-18 Thread Starter
Status: bring back tapatalk
AO Silver Member
 
trashbat's Avatar
 
Join Date: Jun 2010
Location: United Kingdom
County: Manchester
Posts: 3,193
I don't know whether you'd expect anything to have changed yet, but this is still happening.
trashbat is offline  
Status: Spider's asleepforwinter
testing
 
Admin_Support's Avatar
 
Join Date: Jul 2011
Location: united kingdom
County: Canada
Posts: 2,173
Garage

Member car:

Spider/GTA/

Hey, is it the same thing that you were getting previously or has it changed?

Niall
Admin_Support is offline  
(Post Link) post #12 of 13 Old 02-02-18 Thread Starter
Status: bring back tapatalk
AO Silver Member
 
trashbat's Avatar
 
Join Date: Jun 2010
Location: United Kingdom
County: Manchester
Posts: 3,193
It's still rgshark.

Someone needs to figure out what the source of the redirect is. I tried inspecting it in Chrome's debugger but I couldn't get it to actually happen during that time.
trashbat is offline  
Status: Spider's asleepforwinter
testing
 
Admin_Support's Avatar
 
Join Date: Jul 2011
Location: united kingdom
County: Canada
Posts: 2,173
Garage

Member car:

Spider/GTA/

Hey there,

I looked into it and it seems that the site hasn't been blocked yet.
It was reported to be blocked.
Please standby for updates.

Ed
Admin_Support is offline  
Reply

Go Back   Alfa Romeo Forum > The Official AO Problem Discussion Forum > Submit Your Questions / Bugs > The AO Bug Lounge

Thread Tools
Show Printable Version Show Printable Version
Email this Page Email this Page



Posting Rules  
You may post new threads
You may post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are Off
Pingbacks are Off
Refbacks are Off

 
For the best viewing experience please update your browser to Google Chrome