Results 1 to 8 of 8
  1. #1
    thebookiesoffers is offline Former Member
    Join Date
    November 2009
    Location
    Leicester, UK
    Posts
    3,225
    Thanks
    414
    Thanked 1,764 Times in 1,009 Posts

    Default on site "pop ups"

    one of my sites I just went on and a "pop up" appeared - 'so and so sites says enjoy casino games, click here'

    I know I haven't installed anything to do that, Im not even using a CMS, just code. So I clicked and it went through to WinPalace, which is a affactive site. I dont advertise them at all and not even a member of affactive so WTF? Anyone know what the code is, how it got there and by whom/what?

  2. #2
    wonderpunter's Avatar
    wonderpunter is offline Private Member
    Join Date
    August 2013
    Posts
    2,577
    Blog Entries
    5
    Thanks
    402
    Thanked 1,709 Times in 1,029 Posts

    Default

    Most likely a plugin on your browser, that or spy ware.. I get them using the hola extension sometimes when I need to check GEO is working correctly

  3. #3
    pinkytoe is offline Private Member
    Join Date
    May 2011
    Posts
    254
    Thanks
    59
    Thanked 115 Times in 69 Posts

    Default

    Check to see if your websites were hacked. This could be by code injection.

    Running screaming frog through your site or a similar tool will show up an leach pages too.

    Also, as said above it could be your own malware that is producing it - in that case run Malwarebytes.

    Feel free to PM me URL if you want me to take a look, although I'm far from an expert.
    Last edited by pinkytoe; 21 June 2015 at 5:28 am.

  4. #4
    TheGooner's Avatar
    TheGooner is offline Private Member
    Join Date
    March 2007
    Location
    New Zealand
    Posts
    4,278
    Thanks
    1,962
    Thanked 4,229 Times in 2,013 Posts

    Default

    Did the page have a GPWA membership logo/banner on it?

    The server / banner system was hacked 6-12 months ago, with something injected into the GPWA system to make the pop-up appear in certain situations. I was affected and removed the banner to remove the ad. I never added it back.

    (Of course it may not be GPWA logo this time - but it is likely to be something similar from a 3rd party.)

  5. The Following User Says Thank You to TheGooner For This Useful Post:

    thebookiesoffers (22 June 2015)

  6. #5
    thebookiesoffers is offline Former Member
    Join Date
    November 2009
    Location
    Leicester, UK
    Posts
    3,225
    Thanks
    414
    Thanked 1,764 Times in 1,009 Posts

    Default

    it was like one of the pop ups some sites have when you try and back click, 'do you really want to leave this page' sort of thing

  7. #6
    TheGooner's Avatar
    TheGooner is offline Private Member
    Join Date
    March 2007
    Location
    New Zealand
    Posts
    4,278
    Thanks
    1,962
    Thanked 4,229 Times in 2,013 Posts

    Default

    Sounds like the same symptoms (but of course might be any 3rd party hack).
    How exactly did you visit your site - via a google click, via a GPWA click or direct type-in?

    I can't find the thread on here detailing it (tried "GPWA seal hack") just a couple of threads referencing it.

  8. #7
    WATP is offline Public Member
    Join Date
    February 2014
    Location
    Glasgow
    Posts
    59
    Thanks
    17
    Thanked 42 Times in 27 Posts

    Default

    Hey BookiesOffers.

    I PM'd you about this during that thread that Gooner is talking about. He's bang on, it was the GPWA javascript seal, and a few weeks ago, I started spotting it appearing now and then on sites that held this seal again. The first time it happened, around a year ago, your site was one of the ones that had the issue for sure, as well as Gooner's. As soon as he removed the seal from his site, the problem was fixed. Same thing, a popup that said "click here to play casino" thing or whatever and it went to winpalace when you clicked "ok".

    A guy from GPWA got in touch with me back then, but to be honest, the efforts to remove it seemed a waste of time. As far as I recall, it shows only ONCE per IP per day, and it seemed to depend totally on how you actually loaded the site. Can't remember if it was through a referral from another domain, google or directly typing it, but the popup didn't always appear.

    Edit: Old Thread >> https://www.gpwa.org/forum/aff-conve...217922/p4.html
    Last edited by WATP; 21 June 2015 at 6:33 pm.

  9. The Following 5 Users Say Thank You to WATP For This Useful Post:

    -Shay- (22 June 2015), dfiocch (22 June 2015), thebookiesoffers (22 June 2015), TheGooner (21 June 2015), wonderpunter (22 June 2015)

  10. #8
    thebookiesoffers is offline Former Member
    Join Date
    November 2009
    Location
    Leicester, UK
    Posts
    3,225
    Thanks
    414
    Thanked 1,764 Times in 1,009 Posts

    Default

    cheers dudes, found the code in the script which i forgot was there as I dont actually have the seal on the site so will delete and see what happens

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •