Jump to content

Recommended Posts

Posted

Its not an add from Google Play, if you look at the URL it is play (dot) google (dot) com (dot) 18681 (dot) com (literal .'s removed so it doesn't get translated into a clickable URL). It's the last part (18681) that matters, the rest can be "faked" to say anything they want So, it is likely for going to link to a page that will download an APK with a virus and tells you to enable installing apps from untrusted sources (don't do this).

I had something similiar happen with a different mobile site. Whoever they were contracting with for providing adds on mobile wasn't doing any due-dillegence/filtering. Hopefully, the source of this is something else and not ThaiVisa adds.

Posted

"Andriod"?

A bit of a give-away.

Yeap and its an add from google play...maybe the OP hasnt realised he is logged into google play as well

No its a terminator.................. runnnnnn

Posted

Its not an add from Google Play, if you look at the URL it is play (dot) google (dot) com (dot) 18681 (dot) com (literal .'s removed so it doesn't get translated into a clickable URL). It's the last part (18681) that matters, the rest can be "faked" to say anything they want So, it is likely for going to link to a page that will download an APK with a virus and tells you to enable installing apps from untrusted sources (don't do this).

I had something similiar happen with a different mobile site. Whoever they were contracting with for providing adds on mobile wasn't doing any due-dillegence/filtering. Hopefully, the source of this is something else and not ThaiVisa adds.

Yep. I agree. Especially about lack of ad due-diligence/filtering occurring. Looks like something pushed a link redirection that opened up in a browser windows.

Could have been done intentionally (through an attached ad script) with the ad seller doing an old bait and switch, which happens a lot, or the users Gateway or residential/consumer router may have their DNS settings compromised to use a rouge DNS Server for domain-name to IP resolve and it's serving up the redirects.

Posted

The OP has installed something onto his computer, either knowingly or unknowingly and with it has installed some programme either in the browser or on his hard drive.

Do a Malwarebytes Anti-Malware scan and a virus scan to clear it. Also check the add and remove programmes to see if there is anything in the list that wasn`t there before and uninstall.

Posted

The OP has installed something onto his computer, either knowingly or unknowingly and with it has installed some programme either in the browser or on his hard drive.

Do a Malwarebytes Anti-Malware scan and a virus scan to clear it. Also check the add and remove programmes to see if there is anything in the list that wasn`t there before and uninstall.

The OP is using an android smartphone or tablet, not a PC. Generally, installing Malwarebytes on android is completely unnecessary. While the OP 'could' review their installed apps the issue is most likely due to an http: redirect.

Please, please, please read the contents of the topic/thread before posting. Your suggestions are only helpful if it actually applies.

Posted (edited)

As long as he didn't click install and just closed the browser tab he should be fine. Have to say this and similar has happened to me several times on the ThaiVisa website and presumably they're coming from compromised ads as I've never clicked on an ad.

Edited by Bench499d

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
  • Recently Browsing   0 members

    • No registered users viewing this page.



×
×
  • Create New...