Page 1 of 1

Getting kicked over to what seems to be scam pages

Posted: Sun Apr 28, 2024 9:05 pm
by Frosty
This is happening on Apple and PC. I’ll get taken from Realgm to a series of pages that appear to be scams.

Re: Getting kicked over to what seems to be scam pages

Posted: Sat May 11, 2024 4:44 pm
by disoblige
Me too, I made a post right now.

Re: Getting kicked over to what seems to be scam pages

Posted: Sat May 11, 2024 4:45 pm
by disoblige
It redirected me to this. FAKE/PHISHING MCFEE website.
Image

Also my firewall goes crazy when I go to your website.
Image
korean smileys

It does this on realgm. I have no spyware/malware
Image

Re: Getting kicked over to what seems to be scam pages

Posted: Sat May 11, 2024 4:48 pm
by disoblige
Frosty wrote:This is happening on Apple and PC. I’ll get taken from Realgm to a series of pages that appear to be scams.


Should be a priority to fix this. And yet no reply since April 28.

Re: Getting kicked over to what seems to be scam pages

Posted: Thu May 16, 2024 5:17 pm
by CR Reina
Wow, sorry for the issue. Our ad partner is looking into it and will report back immediately.

Re: Getting kicked over to what seems to be scam pages

Posted: Sat May 18, 2024 6:27 pm
by CR Reina
Is this still occurring for anyone?

Re: Getting kicked over to what seems to be scam pages

Posted: Sat May 25, 2024 1:23 am
by Bobbymcgee
Yes, it is occurring for me right now. Just got taken to the McAfee fake sight twice using Google Chrome via my Android phone. I am also getting a ton of ads on Google Chrome via my PC as well. The site is becoming unusable.

Re: Getting kicked over to what seems to be scam pages

Posted: Sat May 25, 2024 2:57 pm
by fleet
Also constantly reloading the page while reading and typing. Erasing posts. Phone use.

Re: Getting kicked over to what seems to be scam pages

Posted: Tue May 28, 2024 12:09 am
by Frosty
Still happening, I'm surprised Mcafee hasn't warned me I'm going to an unsafe sight yet.

Re: Getting kicked over to what seems to be scam pages

Posted: Thu May 30, 2024 2:35 pm
by Johnny Bball
disoblige wrote:It redirected me to this. FAKE/PHISHING MCFEE website.
Image

Also my firewall goes crazy when I go to your website.
Image
korean smileys

It does this on realgm. I have no spyware/malware
Image


There are days that Bitdefender shows me the max 800 warnings in the lower right. Its always because THIS site is trying to redirect me somewhere unsafe, but Bitdefender stops it. Its likely just massive data collection intrusive sites. I asked about this issue last JULY, got no answer.

viewtopic.php?p=107804976#p107804976

Maybe I needed to post screenshots. I'm unsure why the question is not answered or why this isn't taken more seriously.

Re: Getting kicked over to what seems to be scam pages

Posted: Thu May 30, 2024 3:53 pm
by disoblige
Johnny Bball wrote:
There are days that Bitdefender shows me the max 800 warnings in the lower right. Its always because THIS site is trying to redirect me somewhere unsafe, but Bitdefender stops it. Its likely just massive data collection intrusive sites. I asked about this issue last JULY, got no answer.

viewtopic.php?p=107804976#p107804976

Maybe I needed to post screenshots. I'm unsure why the question is not answered or why this isn't taken more seriously.


dd7ihopnvjirc.cloudfront.net is actually a blank file, probably a old code script. Seems like its flag as dangerous by bitdefender. False positive.

Code: Select all

   <script type="text/javascript" src="//dd7ihopnvjirc.cloudfront.net./script.js"></script>


Is flag as dangerous. Phishing /social engineering

Code: Select all

https://cs.ffbtas.com

because it redirects to

Code: Select all

https://ouroborosbrowse.com

Image

Re: Getting kicked over to what seems to be scam pages

Posted: Thu May 30, 2024 4:02 pm
by Johnny Bball
disoblige wrote:
Johnny Bball wrote:
There are days that Bitdefender shows me the max 800 warnings in the lower right. Its always because THIS site is trying to redirect me somewhere unsafe, but Bitdefender stops it. Its likely just massive data collection intrusive sites. I asked about this issue last JULY, got no answer.

viewtopic.php?p=107804976#p107804976

Maybe I needed to post screenshots. I'm unsure why the question is not answered or why this isn't taken more seriously.


dd7ihopnvjirc.cloudfront.net is actually a blank file, probably a old code script. Seems like its flag as dangerous by bitdefender. False positive.

Code: Select all

   <script type="text/javascript" src="//dd7ihopnvjirc.cloudfront.net./script.js"></script>


Is flag as dangerous. Phishing /social engineering

Code: Select all

https://cs.ffbtas.com

because it redirects to

Code: Select all

https://ouroborosbrowse.com

Image


I can confirm getting the same address warning and addresses fwiw. I just don't currently get redirected. It is flagged. But is it phishing for advertising information, or worse. That's what I was trying to figure out.

That first address hammers at my firewall multiple times per minute so it can't be helping their servers much either.

Re: Getting kicked over to what seems to be scam pages

Posted: Thu May 30, 2024 4:05 pm
by disoblige
Johnny Bball wrote:
disoblige wrote:
Johnny Bball wrote:
There are days that Bitdefender shows me the max 800 warnings in the lower right. Its always because THIS site is trying to redirect me somewhere unsafe, but Bitdefender stops it. Its likely just massive data collection intrusive sites. I asked about this issue last JULY, got no answer.

viewtopic.php?p=107804976#p107804976

Maybe I needed to post screenshots. I'm unsure why the question is not answered or why this isn't taken more seriously.


dd7ihopnvjirc.cloudfront.net is actually a blank file, probably a old code script. Seems like its flag as dangerous by bitdefender. False positive.

Code: Select all

   <script type="text/javascript" src="//dd7ihopnvjirc.cloudfront.net./script.js"></script>


Is flag as dangerous. Phishing /social engineering

Code: Select all

https://cs.ffbtas.com

because it redirects to

Code: Select all

https://ouroborosbrowse.com

Image


I can confirm getting the same address warning and addresses fwiw. I just don't currently get redirected. It is flagged. But is it phishing for advertising information, or worse. That's what I was trying to figure out.

That first address hammers at my firewall multiple times per minute so it can't be helping their servers much either.


Ouroboros ransomware has been around for more than a year in various forms, operated by different cybercrime groups. Ouroboros, known to spread via Remote Desktop Protocol bruteforce attacks and deceptive downloads, has claimed a significant number of victims worldwide. We’re now happy to announce the availability of a new decryptor that can restore the .Lazarus, and .Lazarus+ file extensions to their original, unencrypted form.