The Browser Hijacking/Redirect Report Thread

Hope this isn't too presumptuous.


I can never locate the threads I've posted in about such issues due to the default sorting in this subforum (even trying to sort by last post doesn't seem to work), and this is a long ongoing issue, so...

Here is a thread to report browser hijackings/unexpected redirects.

If you experience the same, feel free to report it here. Try to include the URL of the thread where the issue occurred, the URL of the site you were redirected to*, and what device/operating system/browser you were using.

*(On Android tablets with Google Chrome, you should be able to safely retrieve the URL from your browser "History" by pressing and holding on the link (DO NOT do a quick tap!) until options appear, tapping the three dots that appear at the top of the page, and choosing "Copy link." Users with other devices/browsers, feel free to describe how to safely retrieve an offending link. DO NOT TRY TO REVISIT THE LINK, AND DO NOT CLICK ON OFFSITE LINKS POSTED HERE!)

It's my hope that this thread can help admins minimize dangerous ads on the site.

*****

I was just visiting newest posts in this thread...

http://www.socialanxietysupport.com/...idone-2040137/

...and suddenly, without tapping on anything, found myself on one of these pages (URLs copied from my history):

https://remodelwithscott.com/lp/?u=e...fb8c3a4625d524
https://remodelwithscott.com/lp/?u=e...5d524#Congrats

I tried tapping the "back" arrow repeatedly on my tablet (not the Google Chrome back button, because a popup message had appeared as well--I didn't read what it said, but it made using the Chrome buttons impossible), without success, so had to close the tab.

Device/OS/browser: Samsung Galaxy Tab S2, Android 7.0, Google Chrome

Yeah, I don't really like how this forum sorts threads either. An easy way to find your posts is putting your name in the search bar and then clicking the Board Feedback forum. Doing that will only display your posts from this forum.

For more recent stuff, you could scroll to the bottom where the display options are and change the threads showing from the beginning to the last day, two days or however long you need to go back.

I think NoScript on Firefox and ScriptSafe on Chrome will stop that from happening. But I don't know if anyone would want to use those extensions because of how inconvenient they can be to use at first. Some websites won't load properly until you manually allow their script to run, but at least they have some popular website scripts white listed.

I have a really poor sense of time and it seems like whenever I think I recently posted somewhere in this subforum, in fact it was like months ago. I also think my previous posts have been either in threads devoted to numerous site issues, or individual complaint threads...it's so hard to track them down and they get so cluttery.

I hadn't known about that search option, though often immediately after this happens, I just want to report and then get the hell out of here.

Yeah, ad blocking and such for tablets sounds kind of dysfunctional from what I've heard, too. :/ Apparently there's no Adblock for Android, just an Adblock browser. The only places I've been hijacked so far are Tumblr (once), and here. On my laptop I would never dare use this site without Adblock.

It isn't the same issue, but all the ads constantly loading here (even when I press stop) often make my tablet painfully hot to touch, so I can never stay long...it's scary. I don't get that on other sites.

This is a good idea. I have made this thread a sticky.

I'll post all of the redirect/hijack links from my iPad's history tomorrow. There will be a lot because it happens every few seconds sometimes, or at least once a minute.

Hmm never happened to me. Do you guys use ad block?

Thanks!

And sorry about all the hijackings you're experiencing. :/ Frustrating.


I use it on my laptop (which I'm on right now), but it doesn't seem compatible with some tablets. (I haven't used the Adblock Android browser, so I don't know how well or not it works.) I strongly recommend people use it when it's available/compatible, though.

iPad mini/iOS 9.35/Safari.

wcf.daily-sweepstakes.info
wit.daily-sweepstakes.info
wgo.daily-sweepstakes.info
wdu.daily-sweepstakes.info
wae.daily-sweepstakes.info
wBv.daily-sweepstakes.info
w7r.daily-sweepstakes.info
wkg.daily-sweepstakes.info
wo1.daily-sweepstakes.info
w-q.daily-sweepstakes.info
wnf.daily-sweepstakes.info
w_i.daily-sweepstakes.info
wqm.daily-sweepstakes.info
w_n.daily-sweepstakes.info
w7g.daily-sweepstakes.info
wrr.daily-sweepstakes.info
w9y.daily-sweepstakes.info
w4n.daily-sweepstakes.info
wkt.daily-sweepstakes.info
wtb.daily-sweepstakes.info
w2e.daily-sweepstakes.info
wav.daily-sweepstakes.info
w3_.daily-sweepstakes.info
w2k.daily-sweepstakes.info
wxp.daily-sweepstakes.info
wuq.daily-sweepstakes.info
wu_.daily-sweepstakes.info
wdd.daily-sweepstakes.info
w8h.daily-sweepstakes.info
wzu.daily-sweepstakes.info
wxc.daily-sweepstakes.info
wvz.daily-sweepstakes.info
wpc.daily-sweepstakes.info
wvl.daily-sweepstakes.info
wzv.daily-sweepstakes.info
wi6.daily-sweepstakes.info
wfa.daily-sweepstakes.info
wti.daily-sweepstakes.info
weh.daily-sweepstakes.info
wak.daily-sweepstakes.info
wt8.daily-sweepstakes.info
wrg.daily-sweepstakes.info
w5i.daily-sweepstakes.info
w2c.daily-sweepstakes.info
w_e.daily-sweepstakes.info
w26.daily-sweepstakes.info
wbk.daily-sweepstakes.info
wik.daily-sweepstakes.info
w-y.daily-sweepstakes.info
wyr.daily-sweepstakes.info
wix.daily-sweepstakes.info
wsq.daily-sweepstakes.info
wb_.daily-sweepstakes.info
waj.daily-sweepstakes.info
wso.daily-sweepstakes.info
wfc.daily-sweepstakes.info
wss.daily-sweepstakes.info
won.daily-sweepstakes.info
wz9.daily-sweepstakes.info
wek.daily-sweepstakes.info
wt1.daily-sweepstakes.info
w0z.daily-sweepstakes.info
wpy.daily-sweepstakes.info
wqo.daily-sweepstakes.info
wwc.daily-sweepstakes.info
wmx.daily-sweepstakes.info
wbs.daily-sweepstakes.info
wke.daily-sweepstakes.info
web.daily-sweepstakes.info
w4u.daily-sweepstakes.info
wh1.daily-sweepstakes.info
wug.daily-sweepstakes.info
wyf.daily-sweepstakes.info
wau.daily-sweepstakes.info
wi8.daily-sweepstakes.info
wcm.daily-sweepstakes.info
w_c.daily-sweepstakes.info
wkr.daily-sweepstakes.info
wff.daily-sweepstakes.info
wzg.daily-sweepstakes.info
wiz.daily-sweepstakes.info
w8z.daily-sweepstakes.info
wwa.daily-sweepstakes.info
wos.daily-sweepstakes.info
wlw.daily-sweepstakes.info
wm7.daily-sweepstakes.info
wdb.daily-sweepstakes.info
wbh.daily-sweepstakes.info
w95.daily-sweepstakes.info
wa4.daily-sweepstakes.info
wcy.daily-sweepstakes.info
wzd.daily-sweepstakes.info
wfs.daily-sweepstakes.info
wdn.daily-sweepstakes.info
wbp.daily-sweepstakes.info
wnh.daily-sweepstakes.info
wcz.daily-sweepstakes.info
wwu.daily-sweepstakes.info
w6_.daily-sweepstakes.info
wqu.daily-sweepstakes.info
wy3.daily-sweepstakes.info
w2f.daily-sweepstakes.info
wux.daily-sweepstakes.info
wyz.daily-sweepstakes.info
wnh.daily-sweepstakes.info
wmf.daily-sweepstakes.info
wg7.daily-sweepstakes.info
wem.daily-sweepstakes.info
wgo.daily-sweepstakes.info
wqs.daily-sweepstakes.info
wfo.daily-sweepstakes.info
wdn.daily-sweepstakes.info
wbs.daily-sweepstakes.info
w4k.daily-sweepstakes.info
wjk.daily-sweepstakes.info
wq9.daily-sweepstakes.info
whi.daily-sweepstakes.info
wfn.daily-sweepstakes.info

this seems to be isolated mostly to ipad/iphone users.

ipad using safari browser were the site is set to desktop view and iphone users using desktop mode instead of the simplified mobile skin.

Lee

Holy yikes.

Mine isn't an Apple device or Safari browser, though when I visit SAS on my tablet, I do use the desktop view and not the mobile view. (Mobile sites are difficult for me to navigate fully.)

I can't recall the thread I was in, but just got this. Similar to my previous report, it brought a popup message (something about "Congratulations, you won, etc. etc.!" or some such) which prevented me from using the browser back button, and pressing the back arrow repeatedly on my tablet did nothing, I had to close the browser. In this case, I may have accidentally tapped on an ad, not sure.

https://jlftt.com/lp/?visit=a975ce99...8842272e396d59
https://jlftt.com/lp/?visit=a975ce99...96d59#Congrats

Samsung Galaxy Tab S2, Android 7.0, Google Chrome

Today's offering:

I was browsing this thread...

http://www.socialanxietysupport.com/...post1090369145

...when I was suddenly redirected. Happened so fast I didn't even know that was what happened at first, I didn't even see the redirect load, just BAM it was there. I did not tap on anything before this happened.

http://us.84392.site/am2/amz.php?bra...Communications

http://us.84392.site/am2/amz.php?bra...ommunications#

Creepy, it detected my device, browser, and all. Got my city wrong, at least. Since my IP address was included in the URL, I've omitted this part.

Yet again, tapping the back arrow on my device did no good and I had to close the tab, though there was no popup message this time.

Samsung Galaxy Tab S2, Android 7.0, Google Chrome

Just happened again with the very next thread I visited. Exact same details as all the above.

Thread:

http://www.socialanxietysupport.com/...post1090367769

Hijacker:

http://us.84392.site/am2/amz.php?bra...Communications

http://us.84392.site/am2/amz.php?bra...ommunications#

Looks like the exact same culprit...

This time I tried both the tablet back arrow and the browser back button. No go.

This is starting to get frustrating. For some weeks there had been no hijackings (for me, at least), just that occasional gibberish popup. Something seems to have changed recently.

From today:

wpv.daily-sweepstakes.info
wj9.daily-sweepstakes.info
wgy.daily-sweepstakes.info
w21.daily-sweepstakes.info
wyn.daily-sweepstakes.info
w93.daily-sweepstakes.info
wtd.daily-sweepstakes.info
wuh.daily-sweepstakes.info
wtp.daily-sweepstakes.info
wbs.daily-sweepstakes.info
wbu.daily-sweepstakes.info
wjg.daily-sweepstakes.info

The back button wasn't working for any of these (sometimes it works and sometimes it doesn't).

Yeah getting lots of problems on ios, same websites as above. It's easier for me to keep desktop view on because the mobile view has some features missing.

In this thread:

http://www.socialanxietysupport.com/...post1090379657

Hijacker (same guys as last night but mildly different URL):

http://us.43691.site/am2/amz.php?bra...Communications

http://us.43691.site/am2/amz.php?bra...ommunications#

IP address omitted from links. Same device specifications as before.

Today's offering, the second page I loaded after I got to the homepage...

http://www.socialanxietysupport.com/...ocrite-851073/

I had viewed this user profile and then I believe I opened the Recent Discussions sidebar when I got the same hijacker as yesterday and the day before...

http://us.19845.site/am2/amz.php?bra...Communications

http://us.19845.site/am2/amz.php?bra...ommunications#

IP address omitted, device specs the same as before.

C'mon, get rid of whatever this advertiser is. :/

These are all from today, except for the first six. The last one was offering an iPhone 8 instead of an iPhone 7.

wtp.daily-sweepstakes.info
w21.daily-sweepstakes.info
w7h.daily-sweepstakes.info
wqu.daily-sweepstakes.info
wum.daily-sweepstakes.info
w4h.daily-sweepstakes.info
wzz.daily-sweepstakes.info
wmc.daily-sweepstakes.info
who.daily-sweepstakes.info
whu.daily-sweepstakes.info
wcf.daily-sweepstakes.info
wxy.daily-sweepstakes.info
wbv.daily-sweepstakes.info
wf0.daily-sweepstakes.info
wty.daily-sweepstakes.info
wge.daily-sweepstakes.info
wbe.daily-sweepstakes.info
wl-.daily-sweepstakes.info
w4a.daily-sweepstakes.info
wsl.daily-sweepstakes.info
wep.daily-sweepstakes.info
wpw.daily-sweepstakes.info
w0d.daily-sweepstakes.info

Again... :/

I had just gone to the forum homepage http://www.socialanxietysupport.com/forum/ and got the same hijacker as previously...

http://us.19845.site/am2/amz.php?bra...Communications

http://us.19845.site/am2/amz.php?bra...ommunications#

IP address omitted. Same device specs as before.

In about the last hour, and mostly from trying to use Advanced Search:

w5f.daily-sweepstakes.info
wck.daily-sweepstakes.info
wm1.daily-sweepstakes.info
w8v.daily-sweepstakes.info
wjm.daily-sweepstakes.info
w90.daily-sweepstakes.info
wcn.daily-sweepstakes.info
wt3.daily-sweepstakes.info
wli.daily-sweepstakes.info
wmi.daily-sweepstakes.info
w5y.daily-sweepstakes.info

I noticed that there was a different URL while the website was redirecting. It only shows for a few seconds, so I had to screenshot it. In the two screenshots I got, it was the same website, so I think this is being caused by d3r68oj92b.com