Reporting popup/scam ads on mobile devices

Help Discussion in 'BeerAdvocate Talk' started by pagriley, Dec 31, 2015.

Thread Status:
Not open for further replies.
  1. stakem

    stakem Grand Pooh-Bah (4,070) Feb 20, 2009 Pennsylvania
    Pooh-Bah Trader

    Have not had many popups for a few days, then today I got quite a few.

    This url which I mentioned before popped up again:
    qhrzj.redirectvoluum.com

    and this is a new one:
    app.appsflyer.com
     
  2. StoutSnob40

    StoutSnob40 Grand Pooh-Bah (4,611) Jan 4, 2013 California
    Society Pooh-Bah Trader

    Still getting these a lot. And I don't how to find the originating domain, before you ask.
     
  3. Vitamin_Hop

    Vitamin_Hop Pundit (812) Mar 26, 2015 Illinois
    Trader

    I typically use BA on my phone through the browser on an iPhone. Every 10-15 pages or links I scroll through, I will eventually get a pop up that covers the whole screen and if clicked on will take me to the apple App Store. I have since cleared my cache and updated my operating system, but the problem persists. It only appears on Ba for me when using the browser on my phone. Other websites are unaffected so I know it has to be centralized here.

    This has been happening to me for the last 2-3 weeks and I thought it would just go away on its own, but it hasn't. I'm not sure if it's against forums policies to post the link or an image of the pop up so I won't. Please let me know if this is a known problem or if you'd like me to send the image and link

    Thanks
     
    pmarlowe likes this.
  4. Vitamin_Hop

    Vitamin_Hop Pundit (812) Mar 26, 2015 Illinois
    Trader

    After looking at other posts I'll post the link

    data:text/html;base64,PCFET0NUWVBFIGh0bWw+PGh0bWw+PGhlYWQ+PGxpbmsgaHJlZj0iaHR0cDovL2Nkbi5yYXdnaXQuY29tL25vZWxib3NzL2ZlYXRoZXJsaWdodC8xLjMuNC9yZWxlYXNlL2ZlYXRoZXJsaWdodC5taW4uY3NzIiB0eXBlPSJ0ZXh0L2NzcyIgcmVsPSJzdHlsZXNoZWV0Ii8+PHN0eWxlIHR5cGU9InRleHQvY3NzIj4uZml4d2lkdGggLmZlYXRoZXJsaWdodC1jb250ZW50e21pbi13aWR0aDogODAlO30uZml4d2lkdGggLmZlYXRoZXJsaWdodC1jbG9zZS1pY29ue3JpZ2h0OiA5MHB4OyBiYWNrZ3JvdW5kLWNvbG9yOiB0cmFuc3BhcmVudDt9PC9zdHlsZT48L2hlYWQ+PGJvZHk+IDxzY3JpcHQgdHlwZT0iYXBwbGljYXRpb24vamF2YXNjcmlwdCIgc3JjPSJodHRwOi8vY29kZS5qcXVlcnkuY29tL2pxdWVyeS0xLjEwLjIubWluLmpzIj48L3NjcmlwdD4gPHNjcmlwdCB0eXBlPSJhcHBsaWNhdGlvbi9qYXZhc2NyaXB0IiBzcmM9Imh0dHA6Ly9mdGxhYnMuZ2l0aHViLmlvL2Zhc3RjbGljay9saWIvZmFzdGNsaWNrLmpzIj48L3NjcmlwdD4gPHNjcmlwdCBzcmM9Imh0dHA6Ly9jZG4ucmF3Z2l0LmNvbS9ub2VsYm9zcy9mZWF0aGVybGlnaHQvMS4zLjQvcmVsZWFzZS9mZWF0aGVybGlnaHQubWluLmpzIiB0eXBlPSJ0ZXh0L2phdmFzY3JpcHQiIGNoYXJzZXQ9InV0Zi04Ij48L3NjcmlwdD4gPHNjcmlwdCB0eXBlPSJ0ZXh0L2phdmFzY3JpcHQiPiQoZG9jdW1lbnQpLnJlYWR5KGZ1bmN0aW9uKCl7dmFyIGV4ZWN1dGVkPWZhbHNlOyAkKGZ1bmN0aW9uKCl7RmFzdENsaWNrLmF0dGFjaChkb2N1bWVudC5ib2R5KTt9KTsgZG9jdW1lbnQuYWRkRXZlbnRMaXN0ZW5lcignY2xpY2snLCBmdW5jdGlvbihlKXtpZiAoIWV4ZWN1dGVkKXt3aW5kb3cub3BlbigiaHR0cDovL3RyYWNraW5nLnBhZHNydi5jb20vZjg1ZDdkY2MtZDhiOC00NGRkLWFjNzgtOTljYmRjZTFkOTNlP2FmZl9zdWIyPTg3ZGE3ODEzLTZjNmEtNGYyZi05YjVmLTc0MzVhMGJiZDU2YV8xNDYwNTUzNjAwJmFmZl9zdWIzPVBPQ0tFVE1BVEgtT1BFTlgmYWZmX3N1YjQ9NzI4eDkwIik7IHNldFRpbWVvdXQoZnVuY3Rpb24oKXt3aW5kb3cuaGlzdG9yeS5iYWNrKCk7fSwgMzAwMCk7IGV4ZWN1dGVkPXRydWU7fXdpbmRvdy5vbnRvdWNobW92ZT1udWxsO30sIGZhbHNlKTsgd2luZG93Lm9udG91Y2htb3ZlPXByZXZlbnREZWZhdWx0OyBzZXRUaW1lb3V0KGZ1bmN0aW9uKCl7d2luZG93Lm9udG91Y2htb3ZlPW51bGw7fSwgMTUwMDApOyAkLmZlYXRoZXJsaWdodCgnaHR0cDovL2Nkbi5hZHNlcnZlcnRyLmNvbS9NQ0NfMzIweDQ4MC5qcGcnLHtjbG9zZU9uRXNjOiBmYWxzZSwgb3BlblNwZWVkOiA3MDAsIHZhcmlhbnQ6ICdmaXh3aWR0aCcsIGNsb3NlSWNvbjogJzxpbWcgc3JjPSJodHRwOi8vZGF0YS5zdXBsb3guaW5mby9kZWZhdWx0L2Nsb3NlTWFwLnBuZyIgc3R5bGU9IldJRFRIOjUwMCU7IEhFSUdIVDo1MDAlIj48L2ltZz4nfSk7fSk7IGZ1bmN0aW9uIHByZXZlbnREZWZhdWx0KGUpe2U9ZSB8fCB3aW5kb3cuZXZlbnQ7IGlmIChlLnByZXZlbnREZWZhdWx0KSBlLnByZXZlbnREZWZhdWx0KCk7IGUucmV0dXJuVmFsdWU9ZmFsc2U7fTwvc2NyaXB0PjwvYm9keT48L2h0bWw+Ig==
     
  5. Todd

    Todd Founder (13,518) Aug 23, 1996 Finland
    STAFF Mod Team Society Pooh-Bah

    @Vitamin_Hop: We can't do anything unless you can provide the originating domain. Also, this isn't a bug and there's a thread for this already (merged yours).
     
  6. stakem

    stakem Grand Pooh-Bah (4,070) Feb 20, 2009 Pennsylvania
    Pooh-Bah Trader

    got a new one today that is similar to one i posted previously:
    app.adjust.com
     
  7. Todd

    Todd Founder (13,518) Aug 23, 1996 Finland
    STAFF Mod Team Society Pooh-Bah

    Thanks. I just blocked them.
     
  8. Shrode21

    Shrode21 Initiate (0) Jan 23, 2012 Texas

    Any help on this annoying pop up?

    data:text/html;base64,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

    Cheers

    Rick
     
  9. Todd

    Todd Founder (13,518) Aug 23, 1996 Finland
    STAFF Mod Team Society Pooh-Bah

    @Shrode21 Again, posting that doesn't help us. We need the originating domain.
     
  10. dbrauneis

    dbrauneis Grand High Pooh-Bah (8,071) Dec 8, 2007 North Carolina
    Mod Team BA4LYFE Society Pooh-Bah Trader

    As several people have asked, it might be useful to provide instructions for the less technically savvy users to capture the originating domain.
     
    jwjon1 likes this.
  11. Todd

    Todd Founder (13,518) Aug 23, 1996 Finland
    STAFF Mod Team Society Pooh-Bah

    @stakem Already explained how: http://www.beeradvocate.com/communi...-scam-ads-on-their-phone.371182/#post-4503226, and others have emailed screenshots. All it takes is a quick read of what's been posted already for tips on how to capture it.

    Outside of that, any domain information from the decoded Base64 gibberish could help. Tools like: http://base64-encoding.online-domain-tools.com/ will decode it. Just copy and paste everything after the "data:text/html;base64," and decode.
     
  12. Shrode21

    Shrode21 Initiate (0) Jan 23, 2012 Texas

    Sorry about that. Will look into further and report back.

    Rick
     
  13. Todd

    Todd Founder (13,518) Aug 23, 1996 Finland
    STAFF Mod Team Society Pooh-Bah

    Thanks. And I've decoded the information and will see if any of the domains listed are the culprit, but definitely try to grab that domain if it happens again.
     
  14. stakem

    stakem Grand Pooh-Bah (4,070) Feb 20, 2009 Pennsylvania
    Pooh-Bah Trader

    new one today, very similar to the last but with .io instead of .com
    app.adjust.io
     
  15. LambicPentameter

    LambicPentameter Initiate (0) Aug 29, 2012 Nebraska

  16. invertalon

    invertalon Pooh-Bah (2,249) Jan 27, 2009 Ohio
    Pooh-Bah Trader

    Been getting this for weeks now... Pop up for some marvel contest of champions app or something.

    qhrzj.redirectvoluum.com
     
  17. stakem

    stakem Grand Pooh-Bah (4,070) Feb 20, 2009 Pennsylvania
    Pooh-Bah Trader

    This has been a pretty frustrating week so far as popups as concerned. Maybe because I have been online more than usual. Previously, it seemed like these popups would appear or only trigger when I clicked on subforums. Now, they randomly come up while im sitting idle reading a thread or even writing a damn review.

    The same old urls that have been listed before are coming up again but then I got a brand new one just now:

    183581.measurementapi.com
     
  18. Todd

    Todd Founder (13,518) Aug 23, 1996 Finland
    STAFF Mod Team Society Pooh-Bah

    Thanks, everyone. All add these to our block list this week.
     
  19. NolaHopHead

    NolaHopHead Grand Pooh-Bah (3,024) Mar 29, 2014 Louisiana
    Society Pooh-Bah Trader

  20. Todd

    Todd Founder (13,518) Aug 23, 1996 Finland
    STAFF Mod Team Society Pooh-Bah

    I just blocked a bunch of domains from info provided in this thread. Please keep me posted. Thanks.
     
Thread Status:
Not open for further replies.