I'm getting redirected to http:// eu.philosophizer242mb.xyz/DK_Altibox_11/index.html whenever i visit the front page of SG without adblocker...

I think SG has been compromised with some bad Javascript?

4 years ago*

Comment has been collapsed.

Hum it is your configuration which compromised...
😏Good luck 🤞

4 years ago
Permalink

Comment has been collapsed.

SteamGifts puts its ads out to bid for every page load. It's possible that one of the ad networks is compromised but only serving up the bad ads to certain clients depending on location/browser history/etc.

4 years ago
Permalink

Comment has been collapsed.

Stahp visiting pr0n websites, my dood.

4 years ago
Permalink

Comment has been collapsed.

This. heh.

4 years ago
Permalink

Comment has been collapsed.

Deleted

This comment was deleted 2 years ago.

4 years ago
Permalink

Comment has been collapsed.

I am curious, why not?

4 years ago
Permalink

Comment has been collapsed.

Same here, I don't use ad-blockers, and have never been redirected to any advert sites, so I would have to agree.

4 years ago
Permalink

Comment has been collapsed.

Could you please take out the link, I bet that someone is going to click and check the site and get something nasty from there... Also scan your computer for malware / viruses.

4 years ago
Permalink

Comment has been collapsed.

Not only has it historically been improper and put one at risk of penalty to do such, the updated guidelines explicitly prohibit the behavior:

Unsafe content. Products or services that are not credible or potentially dangerous, such as those that could lead to a user's Steam account being compromised, or their financial information stolen. Please do your due diligence prior to posting content or links, and if we have concerns about the safety of a product or service, we will try to remove it from our site or close the offending discussion.

Given that this is clearly deliberate [as they are fully aware of the nature of the link], it'd be a bit bizarre if the OP didn't get a suspension for it.

Honestly, posting such links so that they can be parsed is disgustingly irresponsible behavior, even if we don't take it as being deliberately malicious. [And, given their continued posting after your comment, alongside their failure to address your comment, it's now easier to assume the latter.] And it's not as though avoiding posting malware links isn't common sense to any net-familiar adult, either. The OP even mentions using their iPhone, so they should be well aware of the increased risk of accidentally following a posted link, when using a phone or tablet.

Regardless of the thoughts they may have had behind their action, they've deliberately made themselves an accomplice to the spread of the malware itself; Which, as per any accomplice to any illicit activity, means they've taken up a share in the responsibility for any damage caused. Frankly, given that, anyone engaging in such behavior should be grateful enough of not receiving a permanent suspension.

4 years ago
Permalink

Comment has been collapsed.

I’m sorry about the link. I did nothing for making it clickable - since you cannot edit the first post of a thread, there is nothing i can do. :-(

But i think people is clever enough, to not use the website. Herr i’m thinking of the title of the thread.

Also there is nothing dangerous (virusets, trojan etc.) on the website. It’s only a phishing site.

4 years ago
Permalink

Comment has been collapsed.

???
what makes you think you can't edit it your post? You can and should take out a bit so its not a clickable link. Take out the start or add some spaces or something. Or just remove that part of the post completely.

Click top right and edit post.

4 years ago
Permalink

Comment has been collapsed.

Damn it. Could not find the damn edit button. It’s always next to the timestamp...

Link updated.

4 years ago
Permalink

Comment has been collapsed.

not to worry. Someone had to tell me the first time as well. 😁

4 years ago
Permalink

Comment has been collapsed.

Someone had to tell me the first time, also. P

4 years ago
Permalink

Comment has been collapsed.

Maybe some UX should take a look at it? :P

4 years ago
Permalink

Comment has been collapsed.

Again, the issue is that it's super, super easy to accidentally misclick links, especially on certain devices. So it's always an issue- though, I suppose you're correct, that phishing can be less emphatic an issue [relative to other malware], given the additional steps it typically requires.

That aside, overlooking a site's auto-parsing and being unaware of the inability to edit threads is a legitimate enough excuse for the circumstance in question, so I apologize for overlooking that possibility in my previous post. Again, sorry: I stand by my perspective outside of your circumstance, but your circumstance does not fall under that perspective, and it was a shortcoming on my part to overlook it.

4 years ago*
Permalink

Comment has been collapsed.

[blabla wall of hate]
Frankly, given that, anyone engaging in such behavior should be grateful enough of not receiving a permanent suspension.

Wow, are you having trouble at home or something? As someone who used to collect viruses (without getting infected by them...), I'm amazed to see how some people go postal just for seeing someone talking about malware/phishing/whatever with a harmless link to the material being talked about. There's not exploit, it's only inert data as long as you don't do something stupid with it.
What I find silly on the other hand, is people talking about malware without actually providing a way to see the bloody thing they're talking about. Works for a philosophical discussion, not so much for a technical one.

4 years ago
Permalink

Comment has been collapsed.

If you have a problem with site policies and "common sense regarding the handling of malware", take it up with Khalaq, who states the exact same thing below, on top of the quote of the site rules above. If you have anything else you wish to discuss, that can also be taken over to him.

4 years ago
Permalink

Comment has been collapsed.

You could have pointed out that OP shouldn't post raw links (which are auto-parsed by the silly parser to which we don't ask to do so - for instance a smart thing to do could be to only autoparse internal links or links to whitelisted domains) without being so insanely rude. Since you're mentioning Khalaq's comment, this could be an inspiration to you.

4 years ago
Permalink

Comment has been collapsed.

There's nothing wrong with the SG frontpage. Its Either your dns got hack or you got some script that running in the background. try clearing your cache/history of your browser. If fail try using browser safe mode or something similar to that.

4 years ago
Permalink

Comment has been collapsed.

I'm sure it's an Ad that has some malicious javascript. Only happens when Ad-blocker is disabled. Also happens on my iPhone from time to time... So when the right ad is is displayed, then i'm getting redirected. I'm using Cloudflare DNS 1.1.1.1.

The macicious ad could be only targeting Denmark and maybe also only customers with the right ISP, as Altibox is my ISP in Denmark.

4 years ago
Permalink

Comment has been collapsed.

4 years ago
Permalink

Comment has been collapsed.

yeah u are correct. i also noticed this happening to me sometime where steamgifts just automatically started downloading some strange txt file every 2 minutes when i turned adblock off. Pretty sure they have some weird ads sometimes

4 years ago
Permalink

Comment has been collapsed.

If it's f.txt, I don't think it's specific to SG, just Chrome in general (and the ads service websites choose):
https://stackoverflow.com/questions/28535603/google-chrome-forcing-download-of-f-txt-file

4 years ago
Permalink

Comment has been collapsed.

Happy cake day.

4 years ago
Permalink

Comment has been collapsed.

Thx ^^

4 years ago
Permalink

Comment has been collapsed.

Deleted

This comment was deleted 11 months ago.

4 years ago
Permalink

Comment has been collapsed.

Thx ^^

4 years ago
Permalink

Comment has been collapsed.

This is actually plausible. You could also reach out to the ad network that serves SG. No idea who that would be.

If you have a small ISP, might be worth contacting them so they are aware. There’s some network things they can do to protect other subscribers. I don’t know how large Altibox is or what their support is like.

Your router might also be infected. Might be worth a factory reset and firmware upgrade. You could wire you desktop directly to your internet connection to test.

4 years ago
Permalink

Comment has been collapsed.

AdwCleaner is your friend OP, https://www.malwarebytes.com/adwcleaner/

4 years ago
Permalink

Comment has been collapsed.

+1
((´Θ`*)

4 years ago
Permalink

Comment has been collapsed.

VirusTotal →SteamGifts
https://www.virustotal.com/gui/url/295081ee7f197707ef47b3ad447adfe8f5595d7a555e19fb0688554f5d26e7cb/summary

There is no particular abnormality.
There is no history of past abnormalities.
Worry about contamination by your PC add-ons or malware. ( ;'Θ`)Hmm...

buszmen201
AdwCleaner is your friend OP, https://www.malwarebytes.com/adwcleaner/

You'd better use this that he posted.

4 years ago
Permalink

Comment has been collapsed.

It looks like it is directed at your isp to hurt their business.

4 years ago
Permalink

Comment has been collapsed.

So it could be on their end or on the route. But still check your PC.

4 years ago
Permalink

Comment has been collapsed.

Deleted

This comment was deleted 4 years ago.

4 years ago
Permalink

Comment has been collapsed.

Yes. This is a solution. But sometimes i turn off adblocker on sites i like :-)

4 years ago
Permalink

Comment has been collapsed.

Simply dont like any sites. Problem solved.

4 years ago
Permalink

Comment has been collapsed.

You are right, lol :-D

4 years ago
Permalink

Comment has been collapsed.

Everything's working perfectly fine for me. Loaded up multiple times just to see if I'd get ads that may cause the issue and nothing, so... I'm gonna have to agree with others that the issue may be on your end.

4 years ago
Permalink

Comment has been collapsed.

You saw the SAME ad he displayed?

4 years ago
Permalink

Comment has been collapsed.

No clue, he never specified the ads he's getting, just said he believes they're malicious and redirecting him to the site listed the moment he gets on steamgifts, even without clicking them. I've gotten ads for GameKit, some clothing ads, plus size bras, Alienware, Call of Duty Warzone, Games on sale on Steam, or for Steam, and so on. Never once have I been redirected to another site without clicking an ad.

4 years ago
Permalink

Comment has been collapsed.

He specified it very clear. It's just a redirection so this works very fast
This is very simple: Steamgifts displayed ads that are aggressive - it's redirected the user to another page. It can be delayed or act immediately.
This is a risk when you have enabled ads on ANY site.

google for this: "ads redirect"

https://headerbidding.co/forced-ad-re-directs/

When a user tries to access a webpage (known), he/she will be redirected to the unknown site(s) and infected with malware or shown a fake ad to collect personal information.
The redirect could be via links, disturbing pop-ups or through a webpage overloaded with display ads. In fact, fraudsters develop trust with publishers by posing as a legitimate ad network for a certain period of time and then start dropping in malware through ad creative in order to forcibly redirect destinations for the users.

4 years ago
Permalink

Comment has been collapsed.

Specified it very clearly where exactly? I see a link to a site he was redirected too, not the description or name of an ad he thinks may be responsible, therefor I can't say if I got the same ad, and I'm sure as hell not clicking the link, so get where I'm coming from now? I'm well aware of the fact ads can redirect without clicking, I was simply saying that I myself have not encountered this issue, therefor, and read this carefully, because it was indicated in my initial post... The issue "MAY" be on his end. I never stated it was in fact on his end, I never stated it wasn't possible an ad could be responsible, I just gave an opinion based on my personal experience.

You done trying to make an argument out of nothing?

4 years ago
Permalink

Comment has been collapsed.

Yes, I see you don't understand modern technology. It's just how web browsers work.
You just don't know how your computer works.

He described what happened. It's enough for me, not for you - you're not understood this. I've given you the phrase "ads redirect" - you can google for it and read articles. It's well explained.
In short: you don't need to click anything. If you will get the same ad, you will don't have to react because after 1 sec after page load (or even BEFORE you will see steamgifts your browser will immediately load another page.
There is no need to click anything.

Simple example (don't click on anything, look what is displayed on right - and later - what is a result?)
https://www.w3docs.com/tools/code-editor/1878
A similar thing exists in those ads.

4 years ago*
Permalink

Comment has been collapsed.

I'll put this into words you can easily understand... You're a complete and utter moron.

Nowhere has he specified which ad is redirecting him to said other site. Therefore nobody could know which ad it is thats redirecting him or whether or not we have got this ad in the past. Which would then make it an assumption that this redirection is being caused by something on his end.

It's simple. Now stop arguing with people above your intellectual stature.

4 years ago
Permalink

Comment has been collapsed.

iOzone - you're answering to me or him?

4 years ago
Permalink

Comment has been collapsed.

You.. and clearly utter moron would be a step up.

4 years ago
Permalink

Comment has been collapsed.

He wrote it clearly. Maybe you don't read it correctly. This is how the internet works.

You're a complete and utter moron.

Only one moron is here - you. I just explained and don't call anyone an idiot as you did it...

4 years ago*
Permalink

Comment has been collapsed.

You make absolutely no fucking sense.

You're reading nothing correctly, obviously.

Once again, moron would be a few steps up for you. Have a good one.

4 years ago
Permalink

Comment has been collapsed.

Be patient. Patience always rewards.

4 years ago
Permalink

Comment has been collapsed.

LOL, there might be a chance that those Canadian memes are exaggerated.

4 years ago
Permalink

Comment has been collapsed.

Yah, I'm done bothering with this conversation. You don't seem to be understanding what I'm trying to say. Seems more like you just want to insult me, so... Good day.

4 years ago
Permalink

Comment has been collapsed.

Deleted

This comment was deleted 3 years ago.

4 years ago
Permalink

Comment has been collapsed.

got it for some minutes too.. target countrys BE-DE-DK-ES-SE

heres the link

http:// eu.dialyze772jp.xyz/de_amazon_750/index.html?mod=Desktop&brand=Desktop&osversion=Windows%2010&ip=MYIP&city=Dresden&os=Windows&lang=de&server=Tele%20Columbus%20AG&cep=seazAx8u9ExrXC_fyTNgNyfxbgvzpRk7rXbDR3ePXVdgvUrL7VyfZGPtCPjSJxPAhsK-QuCO_pPDsniuqkCJnFpHl301bsMDTUwEfuW7qtZ2tMUd7mWL5ntRe76UwkztcOOiqetMiiG7JiQ-Qor5jrKsgwVIofD0SzfEb2qU2upW2PZD8It7NdyGWawaj3Pmqkm1jHcE8tR3Q8ZOzdJ81d7hc78Zfn5ZbvXY58-4iVCjRQSVZXzBX509m-6RWW-XCZ0GtKQCJ1yYOrjKQxz5O7yB0HQgTwyJon84GVUtW7vbhY4MsuRKOmxC7zTP7I61VJ4_F0V5WFa3F1IlG4L_NyY_oKZo52z6HTdFy6IJK-aqJ1I08blG5hUrwLpgJMMrxIyY0PzDR83bKPsFh0vF7pvhpRM37Twma2N-dfrZrnsZ_O_4FvrclAl6W4CB39lCKg8TLmvjGk9ODsZGHXwE5__aIEIJjUjAYVwWzx2OAKGuuSrHiXvLul5qyUZvjtkHozLkBWOdASezVSCgaZdTDGS2Uf1ydSk8NJhy1OOZqhw&lptoken=157a840a20cd00b31960&clickid=yszlaeyedx5qfwoq&channel_id=no+pub&rtb_source=BE-DE-DK-ES-SE-2-capitalone-windows72890&campaign_id=177598&sizeid=300&ref=%7Bref%7D&mediaid=no%20Media

( i deleted my ip above [ link changed so that you cant click it] )

4 years ago*
Permalink

Comment has been collapsed.

Good to hear i’m not the only one.

4 years ago
Permalink

Comment has been collapsed.

Same ISP?

4 years ago
Permalink

Comment has been collapsed.

Not the same ISP. He lives in Germany, where my ISP does not operate.

4 years ago
Permalink

Comment has been collapsed.

no..its not isp related but country.

BE-DE-DK-ES-SE are the targeted countrys

4 years ago
Permalink

Comment has been collapsed.

This happens to me every now and again if I load the SG main page and do nothing for a minute. Definitely no adware on my system.

4 years ago
Permalink

Comment has been collapsed.

almost the same thing happened to me some time ago and i just adblock this website now

4 years ago
Permalink

Comment has been collapsed.

Definitely a malicious ad. This is why you never turn adblock off even if you like a site.

4 years ago
Permalink

Comment has been collapsed.

the next one after opening chrome and visiting steamgifts

next url is

http:// eu.perviousness319sz.xyz/de_t-mobile_s20/index.html?model=Desktop&brand=Desktop&osversion=Windows%2010&ip=MYIP&city=Dresden&os=Windows&lang=de&server=Tele%20Columbus%20AG&cep=m50IuXEwJQumc0tuZJknYaUR7ssKmJydKKJ6UDzSIw1WPOvEDZLFShgypqupr0UQ_Vunwpusy2z0xyrgzQdHOZ-vlMw3lxkg248K4t4h0gl_ooPdIOcM-ki2dhquzLn4wjXHoom5WTvqvprvLd5gE6gd8_5luLcXKFzABkkHSkrSlxJ3usJvAAKrUaYo1koxt3WXHO5ahv2q1gFR1dJjH3S5LYUD0M0l-KGOpTAnXeTHZ4Mxtqb4lOPaoE6X7ZLWt8GBfblQN1pz0PWrngvmY3_PfZrC3j53tFuIpNK2gEvTKoWvSNrJpRaU7LPqMf32CCWAK6JcxfVZaTNGIUldbs2UeNYFrZWBpLx1qWoWtmNFuRuVNUXPRyfwPR46LZyJM0pIJhKyfzk0k3tfnffFbQC0-oz_oqp4Ru2hlqVq3gsaee5cjySJme_PTJl863abB639D7kMzXmPRLs1ivNF7U2HiulwNiAL5vR9b1WMplFbnyUoquVs6wwk7XvS6RLsB6kp7TR2s3TIdR44KraoGwt14oTc5Q4QYIKa6NUa8rk&lptoken=15d8843d21e0204359e0&clickid=2yrl8qp9gybvk9gy&channel_id=no+pub&rtb_source=BE-DE-DK-ES-SE-3-abbvie-windows72890&campaign_id=177595&sizeid=300&ref=%7Bref%7D&mediaid=no%20Media#

( i deleted my ip above [ link changed so that you cant click it] )

i activate adblock again for steamgifts

4 years ago*
Permalink

Comment has been collapsed.

For the safety of those who click before they think, please break the links in your posts so that they no longer function as a link. Anyone who actually wants to track these links will still be able to do so.

4 years ago
Permalink

Comment has been collapsed.

sorry for not doing it. i know that some people will click it.
changed it in the 2 post from me.

thx for the reminder Khalaq

4 years ago
Permalink

Comment has been collapsed.

For the safety of those who click before they think, please break the link in your OP so that it no longer functions as a link. (You should be doing this as a matter of common sense.) Anyone who actually wants to track that site down will still be able to do so.

4 years ago
Permalink

Comment has been collapsed.

on a side note, and I know this is not the "nicest" thought, I wonder how many botter/script users auto click on that link before it was changed.

4 years ago
Permalink

Comment has been collapsed.

+1
Good thing it wasn't redirecting to a porn site!
They can at least use these ">"

4 years ago
Permalink

Comment has been collapsed.

Could you please edit the link in the OP?

4 years ago
Permalink

Comment has been collapsed.

Link updated.

Related post: https://www.steamgifts.com/go/comment/WMn5bvX

4 years ago
Permalink

Comment has been collapsed.

For future reference, Support Staff cannot edit the posts of other people.

4 years ago
Permalink

Comment has been collapsed.

malicious ad mate . dont use it again

4 years ago
Permalink

Comment has been collapsed.

Germany here and can confirm the popup.
Turned AdBlock on. Sorry

4 years ago
Permalink

Comment has been collapsed.

Unfortunately some ads now can load redirection scripts before they load up. I've reported this before on another site I had to turn off my ad blocker for.

4 years ago
Permalink

Comment has been collapsed.

Yes, I reported the same in a website of a Facebook publisher. And I talked with the owner of the site and he did not know about the issue, but with UBlock enabled all runned fine. I think some Ads are injecting bad scripts or redirects, must be reported on the Ads provider/publisher then can be removed or penalized.

4 years ago
Permalink

Comment has been collapsed.

ah i was waiting for a joke thread about steamgifts getting canceled because of coronavirus or something.

Not happeing to me

4 years ago
Permalink

Comment has been collapsed.

That's what I was thinking... hahahaaa

4 years ago
Permalink

Comment has been collapsed.

Im here since 2013-2014 and never happened to me bro....

4 years ago
Permalink

Comment has been collapsed.

you have viruses in computer my friend

4 years ago
Permalink

Comment has been collapsed.

It happened before. Since sg uses ads from an aggregator sometime their moderation may miss ads containing malware.

4 years ago
Permalink

Comment has been collapsed.

It happens to me every day, only on SteamGifts.

Last time was this site: http://us. meager517jm.xyz/pt_isp_11_Vodafone/index.html?model=Desktop&brand=Desktop&osversion=Windows%2010&ip=---&city=Braga&os=Windows&lang=pt&server=Meo&cep=AHHE9xg3TO1nDm1dgpcd8CKAWZgDEdeUFNoB_S0H06wfdkHfyDKmLdSt-7FhWfR0GbhXVvsdBjdf2AkFWBciW3JNKlEtEe2DwkJZjNVbXUSbR6-FZ0DgEVmsgzF4oGXiSzFEt5CUm6wSCeRTsumSa7Md8_clck7JtgwaphP5xeZUTV532Bjns1hY9vD0oI3XmXMnkECuOZ6wqyrlfM9versgh4KWM1hR8N2qpWY4vQ8ijHx8eWkcQw4ArPJ5HD5M2N7RRRQoiQmFodDayw4WmRjQ3OYHbqas2Pug-7TCUUF5hFdP4FqLTnu8XOFmyg_uECw7R5xgFYJb9SI77DQb8fGUTOHBC5Mf3ADZbgG5GyP6ACVDd1ebKCrY81ezCdEtg6fUxzk5dL2xLmkmMsSs1qDJiaHOXQ_Y19GPdFNOvQ5pwZDj9LSUa5_upHlk-npXhpy55vOHAoBEbe43knlxLgZiWyGibQQQ1AZzvWwPcixyWqo7qNXWbUUZ2WFw5x4DFDLs9Jf04fmlgNWMiQehkO3AAlZVp-kMC1YRLjNCw&lptoken=15238479287f18c321e3&clickid=cx3sl3v8y9xzs5q2&channel_id=no+pub&rtb_source=FR-NL-NO-PT-FI-4-slb-windows300250&campaign_id=177609&sizeid=300&ref=%7Bref%7D&mediaid=no%20Media

Portugal :)

4 years ago*
Permalink

Comment has been collapsed.

Deleted

This comment was deleted 4 years ago.

4 years ago
Permalink

Comment has been collapsed.

Boas, também sou de portugal e apareceu-me tambem um aviso da vodafone, acho que agora por estar tudo em casa de quarentena anda por ai um monte de pishers a tentar a sorte, pena que há sempre quem cai.
Translated:
Hi, I´m from Portugal to and it happens the same with me with an alert by operator Vodafone, I think it is because everyone was at home due to corona , so a lot of pishers is trying some lucky, unhappy that some people click it

4 years ago
Permalink

Comment has been collapsed.

Recebi da MEO e da Vodafone, há uns dias já que ando a receber, apenas aqui no SG.

4 years ago
Permalink

Comment has been collapsed.

Só recebi da vodafone e foi só 1 vez, hj de manha, aqui tambem no SG

4 years ago
Permalink

Comment has been collapsed.

O pessoal está a falar aqui no tópico que é nos nossos PCs :)
Mas sei que não é.

4 years ago
Permalink

Comment has been collapsed.

Eu já fiz anasile completa ao pc, que demorou 7 horas, e estava tudo ok.
Além disso foi a unica vez que me aconteceu.

4 years ago
Permalink

Comment has been collapsed.

Eu não fiz porque já percebi que é só nesse site, é alguma propaganda que contem um javascript que redireciona pra outros sites.

4 years ago
Permalink

Comment has been collapsed.

Sign in through Steam to add a comment.