Freak: Bad redirect ad?

#1

Orange_Crush

I'm thankful.
Joined
Dec 1, 2004
Messages
25,435
Likes
20,019
#1
I'm posting this for Freak's attention, but also to ask if anyone else is seeing it?

Starting this morning, I am occasionally getting redirected from the forum to "performdevelopeduberapplication.cxm" (.com domain defanged for safety). It's making false claims about program problems and asking to install software.

Forum: If you're seeing this redirect, do NOT allow the installation it's requesting! It's most likely malicious!

I'm about to do some malware analysis on my own machine to see if it's local to me, but I don't think it is.

Freak, is it possible that you have a malicious ad in the cycle? Threat intel shows that this domain is tied to malicious ad redirects for other forums recently.
 
#2

GAVol

Super Moderator
Staff member
Joined
Oct 24, 2003
Messages
101,946
Likes
34,038
#2
I'm posting this for Freak's attention, but also to ask if anyone else is seeing it?

Starting this morning, I am occasionally getting redirected from the forum to "performdevelopeduberapplication.cxm" (.com domain defanged for safety). It's making false claims about program problems and asking to install software.

Forum: If you're seeing this redirect, do NOT allow the installation it's requesting! It's most likely malicious!

I'm about to do some malware analysis on my own machine to see if it's local to me, but I don't think it is.

Freak, is it possible that you have a malicious ad in the cycle? Threat intel shows that this domain is tied to malicious ad redirects for other forums recently.
@Freak

Thanks for bringing to our attention. Moving to the Help forum so it won’t get buried.
 
#3

Freak

VolNation's Grand Poobah
Staff member
Joined
Oct 22, 2003
Messages
87,638
Likes
59,443
#3
I'm posting this for Freak's attention, but also to ask if anyone else is seeing it?

Starting this morning, I am occasionally getting redirected from the forum to "performdevelopeduberapplication.cxm" (.com domain defanged for safety). It's making false claims about program problems and asking to install software.

Forum: If you're seeing this redirect, do NOT allow the installation it's requesting! It's most likely malicious!

I'm about to do some malware analysis on my own machine to see if it's local to me, but I don't think it is.

Freak, is it possible that you have a malicious ad in the cycle? Threat intel shows that this domain is tied to malicious ad redirects for other forums recently.
I haven’t seen anything but I’ll let you know if I do. What device are you using?
 
#6

Orange_Crush

I'm thankful.
Joined
Dec 1, 2004
Messages
25,435
Likes
20,019
#6
I just wasnt sure if you were on a phone, pc, Mac or tablet.
Sorry. PC today. Not a mobile platform.

The redirect is going to a webpage that vaguely looks like a MS system warning message (if you crossed your eyes and didn't focus. lol) I'd be willing to bet that the redirects would only be happening with MS OS.
 
#7

Freak

VolNation's Grand Poobah
Staff member
Joined
Oct 22, 2003
Messages
87,638
Likes
59,443
#7
Sorry. PC today. Not a mobile platform.

The redirect is going to a webpage that vaguely looks like a MS system warning message (if you crossed your eyes and didn't focus. lol) I'd be willing to bet that the redirects would only be happening with MS OS.
I’ll see if I can replicate it on my pc.
 
#8

Freak

VolNation's Grand Poobah
Staff member
Joined
Oct 22, 2003
Messages
87,638
Likes
59,443
#8
I've spent several hours on the site via PC this afternoon and haven't had any issues thus far. Just FYI.
 

VN Store




Sponsors
 

Top