Slots 888 real money,Official Journal of the European Union PDF.Recharge Every day and Get Bonus up-to 50%!

Resolved xaviermi
(@xaviermi)

6 years, 11 months ago

I am writing to report a very serious security problem with your ad units that create a redirect to suspicious sites (this only happens in the “mobile” version of the website).

The problem disappears by disabling the plugin and WordAds ad units and reappears as soon as the ad units return online.

They are fraudulent links in your ad units. Here a screenshot of the page in which you are redirected > https://imgur.com/a/beX6R

One of the destination links is this:
https://h6n.win/lp/f07e6f68-cf74-48f1-a929-4440d4783d8e/?country=Italy&os=Android&uid=3&city=&isp=Telecom+Italia+Mobile&ip=176.200.80.216&parm2=0&parm5=www.mvnonews.com&parm3=pubmatic_bidder_EU&parm4=109449524&code=IT&cid=540&model=Smartphone&brand=Generic&aclid=&clk=204789585&language=it&fid=2717&pid=167&parm1=liquidm#T

Please solve this serious security problem that I found on two of my websites and also in others that are not owned by me but that use your advertising units.

If a solution is not found, I will be forced to disable the plugin and ad units on all the websites that i manage (now I had to disable the plugin).

– The problem occurs only on smartphones and only with mobile connection (with WiFi the problem does not appear), probably to activate unsolicited services with your telephone provider (as happened to two users)
– the problem don’t appear on pc/desktop
– the problem don’t appear browsing from iPhone (iPhone 6S – latest version of iOS) with Safari or Firefox
– Firefox and Chrome browser for Android when the problem appears, they report the website as not totally safe

For months these problems have arisen and a solution has not yet been found.

Viewing 12 replies - 1 through 12 (of 12 total)

Plugin Author Jeremy Herve
(@jeherve)

Jetpack Mechanic ??

6 years, 11 months ago

Thanks for the report! This definitely should not be happening, and we make a point to not partner with ad providers that have such practices.

I’ve reported the issue to our ads team; we’ll try to locate the malicious ad based on the information you provided us with, and we’ll remove it.

I’ll let you know as soon as I have some news!

Plugin Author Jeremy Herve
(@jeherve)

Jetpack Mechanic ??

6 years, 11 months ago

We’ve now found the provider that added those ads, and removed them from WordAds. This should not happen again.

Thanks again for the report!

Thread Starter xaviermi
(@xaviermi)

6 years, 11 months ago

Thank you Jeremy,
I hope the problem is definitively solved ??
Thread Starter xaviermi
(@xaviermi)

6 years, 11 months ago
Hi Jeremy,
the problem has recurred on mvnonews.com e universofree.com.

Sure that you have intervened on the advertiser? Because the problem is the same.
All this is really disheartening.

Please resolve this problem or I have to disable the plugin and Wordads
- This reply was modified 6 years, 11 months ago by xaviermi.
gamefox
(@bloggamefoxit)

6 years, 11 months ago

I have the same problem. It seemed solved yesterday but now it returned in the same way.

Probably the malicious advertiser has subscribed again under another nickname providing the same code, could it be?

Given the fact that the destination link of the malicious ad goes to an http site wouldn’t it be possibile to simply accept https only from advertisers? Just an idea, I’m not a technician… but what is interesting is that the presence of those malicious http links on mobile disallow the https certificate breaking the lock, whilst everything stays ok on desktop version…

Plugin Author Jeremy Herve
(@jeherve)

Jetpack Mechanic ??

6 years, 11 months ago

Thank you both for the report. We’ll make sure this gets fixed again, for good, and I’ll post again here when this is done.

Sorry for the inconvenience.

Thread Starter xaviermi
(@xaviermi)

6 years, 11 months ago

Thank you Jeremy,
we await your updating and we hope the final resolution of the problem.

Thread Starter xaviermi
(@xaviermi)

6 years, 11 months ago

p.s. these are the links that are generated (the first redirect to the second…)

1. https://w4-tracking.com/go/?aclid=&cid=519&pid=0&parm5=www.mvnonews.com&parm4=109449524&parm3=pubmatic_bidder_EU&parm2=0&parm1=liquidm

2. https://h6n.win/lp/f07e6f68-cf74-48f1-a929-4440d4783d8e/?fid=2617&parm1=liquidm&aclid=&model=Smartphone&country=Italy&parm3=pubmatic_bidder_EU&parm4=109449524&clk=225868568&cid=519&city=San+Martino&brand=Generic&isp=Vodafone+Omnitel+B.V.&pid=167&uid=3&code=IT&os=Android&parm5=www.mvnonews.com&parm2=0&ip=5.90.47.214&language=it#T

Thread Starter xaviermi
(@xaviermi)

6 years, 10 months ago

The problem persists and many people are reporting redirects to malicious sites again. This is a very serious problem, is it possible that you can not solve it?

Plugin Author Jeremy Herve
(@jeherve)

Jetpack Mechanic ??

6 years, 10 months ago

We haven’t been able to get it fixed yet, but we’re still working on this. We’ll get back to you as soon as we have a fix!

Sorry for the trouble.

Thread Starter xaviermi
(@xaviermi)

6 years, 8 months ago

Hi Jeremy,
the cause of the problem has been discovered and, above all, the problem has been solved definitively?

Thread Starter xaviermi
(@xaviermi)

6 years, 6 months ago

After a few months the problem has recurred on all the websites where AdControl / WordAds is active. Causing not a few complaints from my readers, I decided to say goodbye to WordAds, which today is very unsafe and unreliable. Disappointed