PDA

View Full Version : Irritating ad on Satfix


lilspit1
06-11-2015, 02:14 PM
Every time I visit Satfix there is a flashing ad informing me that I have won an ipad2. In addition a website fastjsload.js also tries to load automatically.
I cancel the website load however when I try to navigate through the site and change pages it comes back every time I change the page and tries to load.
It is becoming very irritating.
What's up.
Laya
06-11-2015, 02:22 PM
Maybe you need to disable an extension in your browser.
Are you using Chrome?
lilspit1
06-11-2015, 02:35 PM
I am using internet explorer.
Laya
06-11-2015, 02:44 PM
Check the extensions in the browser,that is the issue
it is not the site.
Try grabbing a free copy of C-cleaner and check under
tools/start up/internet explorer.
It is simple to use and very user friendly.
Nostradamus
06-11-2015, 02:52 PM
actually the site is displaying the ad, it is a google ad .. try using an ad blocker
Condor
06-11-2015, 02:56 PM
Moving this to appropriate area.......
1boxman
06-11-2015, 03:03 PM
ad global ... not google

But you should really not us IE . there are only a few percentage that requires IE for viewing.

But untill its fixed ..make sure your flash player is updated and or block some cookies or ad / script block add-on will work .
Gunsmoke2 - GS2
06-11-2015, 09:25 PM
Every time I visit Satfix there is a flashing ad informing me that I have won an ipad2. In addition a website fastjsload.js also tries to load automatically.
I cancel the website load however when I try to navigate through the site and change pages it comes back every time I change the page and tries to load.
It is becoming very irritating.
What's up.



Had that yesterday I think but for me it went away.



GS2
TLG
06-28-2015, 12:26 PM
I am using a Samsung S4 tablet with Chrome
Lately if have been having trouble with the ad on top of satfix page
Coming from ...


hxxp://system-update.androidsafety.net/mm/androiddownload/v04/blk_scanner_EN_72d193e4/b/360omni_12/alert_alt_c.php?p1=downloadactivity&p2=com&p3=main&subid=_yjfpQF-ebOy8_HE_rWQht1nCK5W-Cj_S4y28iBXZxo&l=35302&ept=F4O6ZReIig8P33lN%2FC%2B%2FqeOd3gslTifWca9wxS9C 40YxRXrfhqroJGdi0K3HG0qwu3gQB8Q7M6QyJ8MvT3iTiA%3D% 3D

It would sometimes pop up and take over my full screen ...
Today I can no longer load satfix cause the same ad is taking
over at start up of satfix and doesn't let me into the forum
(I am using Firefox to post this)

I am not getting the pop up while visiting other sites from chrome
(only while trying to load satfix)

I have disabled popups in Chrome settings ,,,, but still the ad appears

I have also downloaded and used AVG to scan the tablet for viruses
and none were found ,,,,

Whatever is happening is happening at satfix ,,,,, any suggestions ?
Benney
06-28-2015, 12:29 PM
Put Add Block Plus on.
TLG
06-28-2015, 01:52 PM
What the hell !!
Same thing is happening with Firefox

Doesn't happen in mobile mode ,, only in full mode

I've downloaded Male ware software and scanning
surfinisfun
06-28-2015, 01:59 PM
What the hell !!
Same thing is happening with Firefox

Doesn't happen in mobile mode ,, only in full mode

I've downloaded Male ware software and scanning

As Benney mentioned....install add block plus.

I've been running it for years through FF and never had a problem with adds.
TLG
06-28-2015, 02:43 PM
Thanks ,, added it and seems to have done the trick .... cheers
TLG
06-30-2015, 12:31 AM
EIt's back ... even with adblock plus the android ad keeps popping up taking over my page
I've noticed t's displaying "announcement" on the tab.

I've gone into settings and disabled announcements,, yet it keeps popping up ??
I've checked the tablet for viruses with AVG (none were found) ,,, I've cleaned it with "The Cleaner"
from the Google Play Store ,,, but it's very annoying ad keeps popping up.


I'm using Firefox to post this and ve noticed Firefox is very slow and choppy

Any suggestions???


UPDATE

I have even disabled shoutbox
No problem with any other site ,,,,, only satfix
alex70olds
06-30-2015, 01:24 AM
It seems to be coming from here in the source.


<div id="ad_global_below_navbar"><BR><center><script src="//go.padstm.com/?id=125538"></script></center><BR></div>


I also only get it here at fix, in Chrome and Android. The Android tells me to install the new Android patch because I have acquired a virus from visiting Adult sites. The patch itself is a very well known and vicious virus lol. I am still working on it, but seems it is a combination of Browser infection and the site source code. Not getting it in explorer right now, but that has it's own set of issues lol.
alex70olds
06-30-2015, 01:40 AM
In Explorer,
</script><center><script src="//go.padstm.com/?id=125544"></script></center></div> is displaying the old standby, outdated java script popup, and outdated media player popup. Clicking either will infect you lmao.
alex70olds
06-30-2015, 01:42 AM
Here is the script it is calling for the java fake :tehe:
<html><head>
<style type="text/css">body {margin:0px;}
img {border:none;}
</style></head><body><a target="_blank" href="//babanetwork.adk2x.com/click/yoBP_b8Gs8v0kIcJxVPFq2IYHmOLZKIHLBfnGqArWldRmUs_bm 4VKe-1YY4NGrBkyAHur-FKTaoFao4iPkykFaR6P54ar6lv848wV2QqWjqyIWV9qews2TBH 26F45W3ybFvxZf9JsHVJPSZ54m4Y7btblrsQq4ly3KDALnkLtU rMVEC4lbZQRPvem9Xs50RdY3XeebKgqj6vGe8IQpPLHNEaRyJq 2T9FXo_Rn-jXFvdg85l6PJDhAemYuKvxc2pk1s7ARgHmQV26Wwxd5gk7_GEF upLQNDt7Ang0sSuHh-lTYAt1KpH_BBOaJaHJDT-HrjJWhkEamDRQln2ZvDe-BKySzWmGqbK-nGP7VS4O7e-USNhaYl2aS799jo5bndOK8fFFA1Y7UyyWGeTED5toSRRNB4zNk PQ//http://www.topfiled.com/fTAbzrhH/exclamation/c/?ce_cid=yoBP_b8Gs8v0kIcJxVPFq2IYHmOLZKIHLBfnGqArWl dRmUs_bm4VKe-1YY4NGrBkyAHur-FKTaoFao4iPkykFaR6P54ar6lv848wV2QqWjqyIWV9qews2TBH 26F45W3ybFvxZf9JsHVJPSZ54m4Y7btblrsQq4ly3KDALnkLtU rMVEC4lbZQRPvem9Xs50RdY3XeebKgqj6vGe8IQpPLHNEaRyJq 2T9FXo_Rn-jXFvdg85l6PJDhAemYuKvxc2pk1s7ARgHmQV26Wwxd5gk7_GEF upLQNDt7Ang0sSuHh-lTYAt1KpH_BBOaJaHJDT-HrjJWhkEamDRQln2ZvDe-BKySzWmGqbK-nGP7VS4O7e-USNhaYl2aS799jo5bndOK8fFFA1Y7UyyWGeTED5toSRRNB4zNk PQ"><img src="//ee8f928b71ed0dc6033231fa0943d9f5.adsk2.co/ee8f928b71ed0dc6033231fa0943d9f5/creatives/62551589" alt="" width="728" height="90" border="0"/></a>
<img src="//p.adpdx.com/1/e/1000/?eui=c67f0be7-83f8-4538-b6d7-616e6c9661d1" alt="" height="1" width="1" />
<script type="text/javascript">
var VISTRACK_SERVER_URL = "//babanetwork.adk2x.com/track?uuid=b695ca56-47a9-4df9-94f5-2148a54569b6&ic=yoBP_fNyEoNx-pFbdSSUbFuYX9jnxXzIvWUFTzdOu1r469xfky4t3OeFKWAbhkE KQNrKv_VRZEQKV_mF_CzRXmRin3EvIwfsLP9gkSgNMT10-iLnmU8bN4kV9edPu5OsSAhRX9mgvX6QFV-kZYI6BQ3utW_hvlOyaoJRXed5IIBOzDKGOluzT1L2gMveHD0DT p7fqOYbJZOWPEqs-7qBg3NUYthVzS70iNZPR8MD32wP4c4KDb1wwnyosD--FifB5fTpQPH5HXmwSs57WBDkwhftj-HICPS8je7oi1FSMsrYxHjCp8pZikQFFdwEoI3mQ0ivAxu1i71p 3J_PJ1iHZrqWNF9EwO6AwrNdYs-eIdHoSZG8QY4-al_VZnWBgRXEZvVaKy0KeSn8az8eYXNyi9WWuBExCOE";
</script>
<script src="//d2nq0f8d9ofdwv.cloudfront.net/track.js" type="text/javascript" async></script>
</body></html>

And the fake outdated media player


<html><head>
<style type="text/css">body {margin:0px;}
img {border:none;}
</style></head><body><a target="_blank" href="//babanetwork.adk2x.com/click/cYWQCWrEHEcly9B0tWpt6_-G5v-oejYjiJiRRbqN7tmkg7ZK-zcA5EjLa-OCZ0wS1dY4VocJFxABl0yD9WdAYs5zD9NTHQXnogMbpDaUh63-6mdMAExj12zbZWVWYVVTPiq66061AParb2zzYYP77vQmTNZC-FMdCrejhe08v69nrsPwvOMHPkZW0-yel5HIv2PQHtfkc3PIPevVaD3ohmXFtDTkxynwt8KKjyNJGOJN PoIfx1HyeH0YPP9vUaut6GRA41iQS0kXUdSmDGX9hEvX487Ngc v5pPQCJt8VKY2BpCEjD8jL78qT9UAPCymVQR5YGbmhUU_wGstg kOn8azIuTLAeyg7mFDa21P_Z2aAq4dfEBwLMrGuJnWYyGY373G 9qosprzO1QLVtWb8jZJbgD1s_5B_A//http://www.nwfileds.com/fTAbzrhH/exclamation/c/?ce_cid=cYWQCWrEHEcly9B0tWpt6_-G5v-oejYjiJiRRbqN7tmkg7ZK-zcA5EjLa-OCZ0wS1dY4VocJFxABl0yD9WdAYs5zD9NTHQXnogMbpDaUh63-6mdMAExj12zbZWVWYVVTPiq66061AParb2zzYYP77vQmTNZC-FMdCrejhe08v69nrsPwvOMHPkZW0-yel5HIv2PQHtfkc3PIPevVaD3ohmXFtDTkxynwt8KKjyNJGOJN PoIfx1HyeH0YPP9vUaut6GRA41iQS0kXUdSmDGX9hEvX487Ngc v5pPQCJt8VKY2BpCEjD8jL78qT9UAPCymVQR5YGbmhUU_wGstg kOn8azIuTLAeyg7mFDa21P_Z2aAq4dfEBwLMrGuJnWYyGY373G 9qosprzO1QLVtWb8jZJbgD1s_5B_A"><img src="//ee8f928b71ed0dc6033231fa0943d9f5.adsk2.co/ee8f928b71ed0dc6033231fa0943d9f5/creatives/64222204" alt="" width="728" height="90" border="0"/></a>
<img src="//p.adpdx.com/1/e/1000/?eui=09598269-713d-4ddc-b4be-fdf6df3eef31" alt="" height="1" width="1" />
<script type="text/javascript">
var VISTRACK_SERVER_URL = "//babanetwork.adk2x.com/track?uuid=b695ca56-47a9-4df9-94f5-2148a54569b6&ic=cYWQCSWrG5OLegHuRb8JOe6R3yxnbgDFyCJLJ4yqlY05C40 wyq8DgAkqIyfslFNOQcVFMR67NgcQlP_D43N7sflGdYp2ALuTQ As36jfYD9G7Q5OLV2xKGIbBRwxChWRlq4ZXE25ZjR59Kcv9JsO QAvd0oXqImjInsuplEzu7u_YW3-U9U8TtUgewPM0eC1qWuIbgoB0LDipD8fSyKQf-pHghXJ5y1HQU56-THX9-7uee5MPtaXS03NpnwGox7oPuI8i2GkfAtiqYXnZEovxxVCwV-EuEVo-aE0xJyOTXCAHRYXHgeUHLSSEjfjX-19ZIoo31jzgzcoAfOP_QjEXGYULnBXw8B79U_hhT1h1YBVZInV Xgq4P-vdIDptMTempIZGQTu1MjNjTxhd5WWaI5QJHFhZUN9lI";
</script>
<script src="//d2nq0f8d9ofdwv.cloudfront.net/track.js" type="text/javascript" async></script>
</body></html>
alex70olds
06-30-2015, 01:50 AM
OK, I think I was incorrect about chrome, it seems like the scripts coming from above, are written for Explorer and Android, but freak out Chrome and FF. Still trying to verify lol.
alex70olds
07-01-2015, 08:38 PM
Thanks for fixing this Clark!
TLG
07-01-2015, 09:34 PM
Agreed ,, the site is moving much quicker
I don't know what happen but something is different for the better ,,,, nice job :thumbsup:
surfinisfun
07-02-2015, 12:21 AM
Odd, now this site shows running through the US.
alex70olds
07-02-2015, 12:26 AM
Odd, now this site shows running through the US.

Some content is under
static.satfix.net. Is this what you are referring to bro?
surfinisfun
07-02-2015, 12:28 AM
Some content is under
static.satfix.net. Is this what you are referring to bro?

Mmm...no, i don't think so.

The i.p is showing to be in the states.
alex70olds
07-02-2015, 12:44 AM
Mmm...no, i don't think so.

The i.p is showing to be in the states.
Here is what I get,
http://whois.domaintools.com/satfix.net I am on phone now, I will check source code in a few. I do remember that some items, such as images, where being stored on US servers to increase speed. IMO not needed, but what do I know lol
surfinisfun
07-02-2015, 12:58 AM
Here is what I get,
http://whois.domaintools.com/satfix.net I am on phone now, I will check source code in a few. I do remember that some items, such as images, where being stored on US servers to increase speed. IMO not needed, but what do I know lol

This is what i'm getting....

IP address: 104.28.25.172
Server Location: San Francisco, CA in United States
alex70olds
07-02-2015, 01:19 AM
This is what i'm getting....

IP address: 104.28.25.172
Server Location: San Francisco, CA in United States

lol that's weird, even c and p your link (which is same as mine~ see below~

24609
surfinisfun
07-02-2015, 01:22 AM
lol that's weird, even c and p your link (which is same as mine~ see below~

24609

Hmm, yea, that is weird.
abouttosnap
07-02-2015, 01:24 AM
Not sure why but I was getting one earlier and then later the other...24610
alex70olds
07-02-2015, 01:28 AM
I think it has to do with cloudfront, not positive.


&lt;/script&gt;
&lt;script src=&quot;//d2nq0f8d9ofdwv.cloudfront.net/track.js&quot; type=&quot;text/javascript&quot; async&gt;&lt;/script&gt;
&lt;/body&gt;&lt;/html&gt;</pre>

lol had to correct

kind of concerning it comes back to "MARKMONITOR"


http://whois.domaintools.com/cloudfront.net
surfinisfun
07-02-2015, 01:29 AM
lol that's weird, even c and p your link (which is same as mine~ see below~

24609

Lol, and now the IP changed to 109.236.84.29 in the Netherlands so looks like all is good again.

Edit: Now its back in the States under a different IP.......Maybe someone is working on the site.
DerZ
07-02-2015, 01:56 AM
Lol, and now the IP changed to 109.236.84.29 in the Netherlands so looks like all is good again.

Edit: Now its back in the States under a different IP.......Maybe someone is working on the site.

its cloudfare, the site will always change servers to keep it on the fastest one for the most connections it receives without ever showing its true location.. google cloudfare .. nice service designed to protect against ddos and server issues (a reverse proxy) and as result is the gateway for all traffic to the site.
alex70olds
07-02-2015, 02:48 AM
its cloudfare, the site will always change servers to keep it on the fastest one for the most connections it receives without ever showing its true location.. google cloudfare .. nice service designed to protect against ddos and server issues (a reverse proxy) and as result is the gateway for all traffic to the site.

Cloudfare, Cloudfront, whatever. I do agree with this post, I will have to search your posts to see why you are pink, I can not imagine it was this one lol.
alex70olds
07-02-2015, 02:50 AM
Oh, Activa thread lol.
alex70olds
07-06-2015, 08:51 PM
I think it has to do with cloudfront, not positive.


</script>
<script src="//d2nq0f8d9ofdwv.cloudfront.net/track.js" type="text/javascript" async></script>
</body></html></pre>

lol had to correct

kind of concerning it comes back to "MARKMONITOR"


http://whois.domaintools.com/cloudfront.net

Just to follow up, some content (CSS Etc.) is at
static.satfix.netIn fact it comes up 18 times in source. The above then goes to
http://static.satfixnet.netdna-cdn.com/ You can go ahead and go to above URL to view what appears to be a mirror.
netdna-cdn.com then returns to~

Domain Name: NETDNA-CDN.COM
Registrar: MARKMONITOR INC.
Sponsoring Registrar IANA ID: 292
Whois Server: whois.markmonitor.com

I have no earthly idea why a site like this would have any content in their hands lol.

xxxxxxxxxxxxxxxxxxxxxxxxxxx

I could be wrong, but I would not think speed would be all that important lol.

Oh yeah, If you offended DN for selling something they did not like on ebay, you would get this~


Hello seller,

After reviewing your eBay account, it appears that you have violated eBay’s Reported by Rights Owner – Unauthorized Item/Listing policy. We realize you may not have been aware of this policy, or that this may have been a simple oversight, but unfortunately, we had to take the following actions on your account:
– Violating listings have been removed. A list of items that were removed can be viewed at the bottom of this message.
– We have credited any associated fees to your account.
Your listing was removed after the rights owner notified us that your item infringes on their intellectual property rights.
We urge you to contact the rights owner directly for more information on why they requested the removal of your listing and whether you can relist the item.
For more information on our VeRO program, go to:

http://pages.ebay.com/vero/infoforusers.html
Please be sure your current and future listings follow these guidelines, keeping in mind that additional violations of this policy could result in the suspension of your account.
We encourage you to contact DISH Network LLC – Echostar Corporation directly if you have any questions.
You can send an email to:

[email protected]
For more information on how eBay protects Intellectual Property, or for additional information if you believe that your listing has been removed as a result of an error or misidentification, please visit the following Help page:

http://pages.ebay.com/help/policies/programs-vero-ov.html
If you have additional questions, contact our policy experts. Get started by clicking the link below:

http://ocsnext.ebay.com/ocs/cusr?query=1337&domain=email1414
Here are the listings that were removed:
– Lot Sale: Five Dish Network Cable/Satellite TV DVR’s
We appreciate your cooperation.
Thanks,
eBay

:rolleyes:Probably just me lol. :tehe::D
surfinisfun
07-06-2015, 09:16 PM
Yup, the U.S flag is still flying high and its the sixth of July..........Yanks just have to do overkill on everything.lol