Virus scam appearing only when on Mumsnet

[Puzzledandpissedoff]

Just wondering if anyone else has had this?
As in the title I'm getting frequent "warnings", supposedly from McAfee, claiming I've got various viruses and inviting me to click a link (not done of course)

I don't use McAfee anyway and they're not from them - their site has images of a common scam which matches these - but it only happens when I'm clicked onto Mumsnet

Anyone know what's happening by any chance?

Have just been taken to this web site:

https://raipuneezuboaw.com/casual-sl/233?z=5917958&var=873005533840552408&var_3=8444523_19413&country=GB&s=873005533840552408

Which asks if I am over 18 so maybe .... ?!

I was on the FWR list of topic threads.

Wasn't aware of clicking on anything outside of the column of thread titles.

Windows 11 PC

Firefox

McAfee Livesafe

I've just had the same one, @IwantToRetire, though I didn't click on it

Seems to be spreading ... and I'm still using Chrome on the same laptop

Edited to add was on Relationships at the time

When I googled the web site it got no results, which seemed odd.

But have used WHOIS and found it was only registered as a domain 2 days ago via https://pananames.com/

And the first web site I posted about Neetoutoo.com is also registered through the same company pananames

They have an abuse reporting system

https://pananames.com/index/abuse

Just got it again when scrolling on the "Last hour" page. Microsoft Edge on a laptop.
I highlighted the URL to send it to MNHQ but C & P hasn't worked. It began with "goso". The end of it seemed to be a string of random words it had picked up from threads!

I haven't had this happen again since I installed an adblocker, so it may be one of the adverts introducing the malicious link.

And today, huge popup adverts that take over the whole screen for coffee machines.

popup image

I never click on adverts intentionally, and I've just had this 3 times, twice on microsoft edge and once on chrome.

pictures didn't attach. Have we got to the bottom of this yet? It's annoying!

Urgh, ok so now I'm getting full page ads popping up, and the last one I just got was disgusting. Some over 18 site and i was so shocked i just shut the whole lot down for a virus/threat scan (cleared but i'll keep checking). I actually feel pretty disturbed by this, it's not the sort of thing I ever look at. i took a screenshot of another url earlier but it seems they are almost legit companies with a slightly different ending, and they change each time.

The automatic redirects to inappropriate websites are starting to make the site unusable. It's happening almost daily at the moment that I am reading in AIBU/ Chat and I randomly get redirected to some 18+ site without clicking on anything. Running a virus scan again. Win 11, Firefox, AVG subscription

Just had another one claiming to be https://jupaughoor.com

Trying to persuade me to download a virus "update".

On one level they are so stupid, ie I have anti virus software installed which is regularly updated from a web site that matches the name of the antivirus supplier.

But the 18+ ones are gross.

As before

Win 11, Firefox, MacAfeeLiveSafe

Jupaughoor.com Browser Notification Spam
October 20, 2024 at 6:31 PM
Browser Notification Spam

Checked by Website Reputation Checker

Jupaughoor.com deceives users through browser push notifications to inundate them with intrusive spam advertisements. It falls under the category of Notification Spam and Browser Hijackers.

The website tricks visitors into enabling push notifications using fake age or robot verification. For instance, it may show a bogus notification stating "If you are 18+ Click The Allow Button", "Click Allow to play the video" or "Click Allow To Verify That You Are Not A Robot". Nevertheless, enabling notifications accomplishes nothing in terms of updating your browser. Instead, it grants Jupaughoor.com permission to send push notification spam directly to your desktop or mobile device.

Once activated, Jupaughoor.com persistently bombards your device with inappropriate pop-up ads, even when your browser is closed.

These spam push notifications promote:

• Adult and dating content Freemium games and apps
• Software update scams
• Weight loss or brain enhancement supplements
• Other dubious products and services

By duping users into granting push notification approval, Jupaughoor.com completely bypasses browser pop-up blockers and directly inundates devices on a system-wide scale. The malicious pop-ups are intrusive and challenging to close, with some using alarming language to persuade users to click through and potentially install malware.

(Although on reading this am thinking I should complain to MacAfee!)

Using an adblocker has fixed it for me.
Kills the MN revenue stream, but as that seems to be infected.. so be it.

This is the 3rd web site that is spamming mumsnet that is registered via http://www.pananames.com

Can @MNHQ contact them and let them know that in allowing these groups (or the same individual) to register through them they are bringing their domain name service into disrepute.

Email [email protected]

Anyone of us can report a scam, spam web site
https://www.ncsc.gov.uk/collection/phishing-scams/report-scam-website#section_1

The last one actually downloaded a .exe file. I deleted it before I remembered I should have taken a screenshot. This is getting stupid.

I just had a warning in my web browser about an attempt to link to https://ak.itponytaa.com/afu.php?zoneid=5917958&var=43&ymid=fmigehvxwxieo1729799879383 which was classed as a malware site. It also tried to go to https://jupaughoor.com/?b=22358844&ba=1&campid=8771869&did=2&dm=1&fp=1&g=GB&l=OFdQZMR5GK2sMA0&oaid=0080ffd2b5f44d08fe4461c892edfacf&s=873406819039719940&ssk=53e305a0de68a851239f9127c2712547&svar=1729799931&vi=1&vo=1&z=5917958&tr=default which was another malware site.

This was using Chrome on Windows 11. If it happens again I'll pay more attention to what mumsnet page I was on.

Just had the Robot one again. On Active threads list, scrolling and it popped up and took over my page.
HP Laptop. Microsoft Edge 21.00 today

Just had another one doing a redirect https://7w1k85haib.sbs/offer/4?imp=zybwgmsewhgck1729800233378&rurl=https%3A%2F%2Fgentlyrevitalizedarchitect.com%2F%3Fa%3D103098%26c%3D144810%26s1%3D43%26s2%3Dzybwgmsewhgck1729800233378%26s3%3Dwww.mumsnet.com
This was on this thread - https://www.mumsnet.com/talk/am_i_being_unreasonable/5194928-manager-requesting-meeting-while-on-annual-leave-at-the-end-of-mat-leave. It didn't pop up until I'd scrolled a way down the page.

Sorry, I know you need ads for revenue but I'm going to turn my adblocker on again because this is potentially dangerous.

Just repeating this, as while MNHQ works out what is happening with their ad set up, the Government (!) could act to get sites taken down.

Its really easy - you just post the web site name, you dont have to say who you are, or anything like that.

The more we report them the quicker something will happen (hopefully)

Anyone of us can report a scam, spam web site
https://www.ncsc.gov.uk/collection/phishing-scams/report-scam-website#section_1

adblocker has done the trick for now it seems.

And again - on AIBU - same thing. Impossible

Seriously. Just got the disgusting 18+ one again. @MNHQ I hope you're looking into this urgently. I shut it down again (my 13 yo son is sat in the room with me). After I did a virus scan earlier I installed Malware bytes to check it wasn't my end (before I saw how many others were suffering) and it annoyingly signed me up for a 14 day trial which popped up the following image. Which may have turned out to be useful?