Slickdeals is community-supported.  We may get paid by brands for deals, including promoted items.
Forum Thread

Anyone else get a Malicious Ad / Link Hijack today?

328 129 August 4, 2026 at 06:02 PM
I was just browsing the "Sonic Drive-In, rewards members BOGO burger 1x/week through August 30th" deal, clicked the giant blue "Get Deal at Sonic Drive-In" button, and got redirected to a "codevectornet.co.in" website with a fake CAPTCHA telling me to click "Allow" on a notification setting prompt. Tested on my other browsers (Firefox, Edge) but couldn't replicate it anymore. I'm guessing there's a malvertising ad in rotation that may be hijacking links to dupe users into accepting the notification.

I've never seen this type of attack before, but some quick research came back with "codevectornet.co.in is a domain registered exclusively for malicious intent. It operates purely as a host for scareware, malvertising, and social engineering infrastructure."
About the OP
Joined May 2013 L4: Apprentice
129 Reputation Points
10 Deals Posted
443 Votes Submitted
328 Comments Posted

Your comment cannot be blank.

Sign up for a Slickdeals account to remove this ad.

Joined Jul 2007
Living Ghost
> bubble2 4,910 Posts
5,247 Reputation
Global Mod
SpaceCallahan | Staff
Yesterday at 01:36 AM.
Yesterday at 01:36 AM.
Quote from spartanvi :
I was just browsing the "Sonic Drive-In, rewards members BOGO burger 1x/week through August 30th" deal, clicked the giant blue "Get Deal at Sonic Drive-In" button, and got redirected to a "codevectornet.co.in" website with a fake CAPTCHA telling me to click "Allow" on a notification setting prompt. Tested on my other browsers (Firefox, Edge) but couldn't replicate it anymore. I'm guessing there's a malvertising ad in rotation that may be hijacking links to dupe users into accepting the notification.

I've never seen this type of attack before, but some quick research came back with "codevectornet.co.in is a domain registered exclusively for malicious intent. It operates purely as a host for scareware, malvertising, and social engineering infrastructure."

Thank you for reporting this. I have passed this information along to our ad team to block them
Reply
Page 1 of 1
Start the Conversation
 
Link Copied

The link has been copied to the clipboard.