Help Heads up admins

[asianrocker]

I only found out about this while on vacation. I usually use firefox to view this forum at home. On my phone though I have chrome. That's when I found out about this.

https://www.google.com/search?q=asianrocker+android&ie=utf-8&oe=utf-8

When I search for my post on android forum as you can see this comes up:

http://comeinproxy.ru

Instead of http://androidforums.com/ - which is what is showing on my firefox now.

I am letting you know because I was spammed to death by this website http://comeinproxy.ru it just pops up a lot of ads and malwares on my phone.

I have to install dolphin to stop it. I guess this spam site http://comeinproxy.ru is only working on chrome. Firefox and dolphin is not being spammed to death when I visit your website.


Any of you know what is going on here? And do you know http://comeinproxy.ru is 'attacking' your website (actually more like my phone) in chrome?

 

[svim]

Have you cleared the cache for your Chrome browser on your phone? Wouldn't be surprised if it's tied to a malicious tracking cookie.
Using Netcraft that link you posted for that ...proxy.ru site shows up as:
http://toolbar.netcraft.com/site_report?url=http://comeinproxy.ru

 

[kate]

Moved to the feedback forum

 

[Xyro]

Any of you know what is going on here? And do you know http://comeinproxy.ru is 'attacking' your website (actually more like my phone) in chrome?

We've seen stuff like this before, unfortunately.

What's happening is that whoever owns that domain has copied the content from this site, hosted it on their own server, added their own ads (and who knows what else) and now it shows up in google searches.

Now that we're aware of it, Phases will be able to dissuade them from continuing to do so. Thanks for letting us know!

 

[asianrocker]

We've seen stuff like this before, unfortunately.

What's happening is that whoever owns that domain has copied the content from this site, hosted it on their own server, added their own ads (and who knows what else) and now it shows up in google searches.

Now that we're aware of it, Phases will be able to dissuade them from continuing to do so. Thanks for letting us know!

Ok. Thanks. Like I said though Chrome is the only one affected. I guess Firefox and Dolphin have better security. Or those spammers just target Chrome coz it is popular. It is the very reason why I install Firefox right away on all my new PCs. Internet explorer is worst in blocking spammers and ad scammers like that.

 

[asianrocker]

Have you cleared the cache for your Chrome browser on your phone? Wouldn't be surprised if it's tied to a malicious tracking cookie.
Using Netcraft that link you posted for that ...proxy.ru site shows up as:
http://toolbar.netcraft.com/site_report?url=http://comeinproxy.ru

Yap your link just validated what the mod said in his post. I of course cleared my cache, I even have the clear cache app, I always clear my browsing history, even manually clear cache in app manager. But the spam won't go away. It's good though that the mods know about it now and is gonna stop it.

 

[svim]

I of course cleared my cache, I even have the clear cache app, I always clear my browsing history, even manually clear cache in app manager.

As you didn't mention any steps you might have already take to mitigate the problem, it's generally just a rough guess to make any suggestions in a public help forum. Sorry my mind-reading abilities are not as good as they should be, I should have instinctively known you cleared the browser's cache.
And not that it matters, but just tried going to http://androidforums.com and it worked the way it should using Firefox and Chrome on a Slackware box and using Firefox, Chrome, and IE on a Win7 laptop.

 

[mikedt]

For information and maybe related because of Chrome, I had a redirect/hijack problem with Chrome on my Oppo phone a couple of days ago, was trying to view http://www.ebay.co.uk/ but as soon as it loaded it would redirect to GoogleSyndication.com, and then on to a Chinese soft porn site with a .tw (Taiwan) URL. The phone's stock browser at the same time was unaffected, and so was my Windows tablet and Macbook with Firefox, all on the same school dorm WiFi network. I cleared Chrome's cache and data, and that seems to have fixed it, not had it happen since.

Google Syndication and Google Ads, are not blocked in China, unlike most of their other services.

 

[asianrocker]

As you didn't mention any steps you might have already take to mitigate the problem, it's generally just a rough guess to make any suggestions in a public help forum. Sorry my mind-reading abilities are not as good as they should be, I should have instinctively known you cleared the browser's cache.
And not that it matters, but just tried going to http://androidforums.com and it worked the way it should using Firefox and Chrome on a Slackware box and using Firefox, Chrome, and IE on a Win7 laptop.

I was told by the mods as per his post they will take care of this problem. Who knows how this russian proxy scammer website set up their malware site how you will be redirected to their site. Like I said I was on my vacation obviously using a public wifi using my phone. Maybe that's how they infiltrate this website.

But I am at home using same search strings and their scammer website is the first in the link. I still did click it but maybe coz I am on my home wifi and using firefox. There is no spam ads that pop up non stop.

If you type http://androidforums.com in any browser then obviously you will be taken to that site that you typed.


Their scam site is programmed in some way. I use a search string. Like I said that's maybe how they set up their scam net.

 

[Xyro]

I had a redirect/hijack problem with Chrome on my Oppo phone a couple of days ago, .

Maybe that's how they infiltrate this website.

I would stress that, based upon what you've discussed here, our website hasn't been infiltrated and our traffic is not being redirected.

They've copied publicly visible information from our site onto their own, meaning that as soon as google indexes their website, they start appearing in search results. Then they just hope that you click on it, so they can serve you ads and spam. We see this stuff regularly, unfortunately, and @Phases will be able to stop them from doing so.

It's theft of our content, and it's a moderately clever abuse of how google's searches work, but it's no more technologically complicated than that. They're still entirely reliant on you accidentally clicking on their search results.

As a side note, if you're wondering why their website shows up when you search usernames, but our website doesn't, that's because none of the profile pages on our site are indexed by google (at least as far as I can tell). So their absence is intentional on our part - you'll have to navigate to your profile on the website itself to find your own posts/threads. However, if you search for things such as the contents of our posts, you can see we show up just fine:

 

[asianrocker]

I would stress that, based upon what you've discussed here, our website hasn't been infiltrated and our traffic is not being redirected.

They've copied publicly visible information from our site onto their own, meaning that as soon as google indexes their website, they start appearing in search results. Then they just hope that you click on it, so they can serve you ads and spam. We see this stuff regularly, unfortunately, and @Phases will be able to stop them from doing so.

It's theft of our content, and it's a moderately clever abuse of how google's searches work, but it's no more technologically complicated than that. They're still entirely reliant on you accidentally clicking on their search results.

As a side note, if you're wondering why their website shows up when you search usernames, but our website doesn't, that's because none of the profile pages on our site are indexed by google (at least as far as I can tell). So their absence is intentional on our part - you'll have to navigate to your profile on the website itself to find your own posts/threads. However, if you search for things such as the contents of our posts, you can see we show up just fine:
View attachment 112759

Nice to know. Just glad you guys know about it and is stopping it and that is all that matters.