Joined Aug 2015
L2: Beginner
Forum Thread
site serving phishing attempt in the last hour (probably from ad network)
Yesterday at
01:59 AM
Just fyi I had a deals page serve a phishing link on click to go to deal.
The page I was on:
https://slickdeals.net/f/18749977-cooler-master-mf120-lite-pc-case-fan-black-6-99-free-shipping-w-prime-or-on-35?src=SDSearchv3&attrsrc=Thread%3AExpired%3AFalse%7CSearch%3AType%3Anormal%7CSearch%3ASort%3Arelevance%7CSearch%3AHideExpired%3Afalse
The phishing link that was served on click "Get Deal at Amazon":
https://8.html-load.cc/player/slickdeals.net/70/575/201/a/ybfqz9i9iul9ru3ssu6u6u64urunuru2u7uj4u8u7unsdulsu09p9qua9eufij95u4su9okuc9r9ruluruid92uiu7kk9rc9ioui9rouru9u8zui959e9k9593ul9ru89nu49q9e9n65ururlc9i929nu49q9pi9eddiu8uxi9ek55kduxu8u4i6d6uxux9k6i95ioio9n659iuruy9nu49q9rupcu892dourup9r9pi9b69p9n65ur9ru89rqp9 iuruy9nu49qd9kopdux9p9pp5u49e9e9ek9p9kut9e9pu4opu89ku4uxdu4di9k9p7ruhucgf9b97rxub9q979q9buagj9yur9r9bol9iu9uruc9nutu09n66c9rxu9u79r9rubu9cuycujufodcu9ou89iod9n669nu4g9iu9qo9n6x9n66u8u7ujkcuy7ujdol9n669nu4g9p9nut9q
It's no longer occurring, but I saw at one point through Chrome Devtools it had injected a fair bit of javascript into the page with the same #.html-load.cc domains.
Please check any logs you may have for ad networks and specifically the "html-load.cc" domain. I'm just relaying this information along. I've done everything I can exclude my devices or networking from being the issue. I experienced this issues on two separate devices (windows pc and ipad) and i'm not running any adblock or dns rewriting rules on my network.
The page I was on:
https://slickdeals.net/f/18749977-cooler-master-mf120-lite-pc-case-fan-black-6-99-free-shipping-w-prime-or-on-35?src=SDSearchv3&attrsrc=Thread%3AExpired%3AFalse%7CSearch%3AType%3Anormal%7CSearch%3ASort%3Arelevance%7CSearch%3AHideExpired%3Afalse
The phishing link that was served on click "Get Deal at Amazon":
https://8.html-load.cc/player/slickdeals.net/70/575/201/a/ybfqz9i9iul9ru3ssu6u6u64urunuru2u7uj4u8u7unsdulsu09p9qua9eufij95u4su9okuc9r9ruluruid92uiu7kk9rc9ioui9rouru9u8zui959e9k9593ul9ru89nu49q9e9n65ururlc9i929nu49q9pi9eddiu8uxi9ek55kduxu8u4i6d6uxux9k6i95ioio9n659iuruy9nu49q9rupcu892dourup9r9pi9b69p9n65ur9ru89rqp9 iuruy9nu49qd9kopdux9p9pp5u49e9e9ek9p9kut9e9pu4opu89ku4uxdu4di9k9p7ruhucgf9b97rxub9q979q9buagj9yur9r9bol9iu9uruc9nutu09n66c9rxu9u79r9rubu9cuycujufodcu9ou89iod9n669nu4g9iu9qo9n6x9n66u8u7ujkcuy7ujdol9n669nu4g9p9nut9q
It's no longer occurring, but I saw at one point through Chrome Devtools it had injected a fair bit of javascript into the page with the same #.html-load.cc domains.
Please check any logs you may have for ad networks and specifically the "html-load.cc" domain. I'm just relaying this information along. I've done everything I can exclude my devices or networking from being the issue. I experienced this issues on two separate devices (windows pc and ipad) and i'm not running any adblock or dns rewriting rules on my network.
About the OP
0 Comments
Your comment cannot be blank.