| Author |
Message |
|
wagdoll
Elite Member
Joined: Sun May 07, 2006 12:35 am Posts: 3911
|
 basedvd.com running in 3rd party banners
This one's in a harrenmedianetwork banner but it may be running in other networks too. Probably causing framebreakers and is doing approximately 100 to 200 autosearches so it does freeze the browser somewhat when you hit it. This is apparently a sister site to searchingnetwork and searchingmedia that have both been posted about in the past few months and caused no end of problems to viewers of sites running 3rd party banners carrying them. This is the top iframe from the 3rd party network and loaded on the publisher's webpage: That loads: That loads: That's loading a bunch of iframes - I don't want to post the codes for this level so I'm going to go into one of the iframes instead, but there's ten iframes being generated by the look of it and they'll all be similar to what I'll post The first of those ten iframes: That loads: Each of those does autosearches and we have ten similar iframes containing similar iframes which is why I estimate a total of 100 to 200 autosearches on the that load... it certainly looked about that many in adblock and searchingmedia also turned up in the adblock list, though I had the contents of that blocked, so if it had loaded that may have added even more autosearches to the total.
Last edited by cconniejean on Sat Oct 17, 2009 1:53 am, edited 1 time in total.
correcting post borders
|
| Mon Sep 28, 2009 12:47 am |
|
 |
|
wagdoll
Elite Member
Joined: Sun May 07, 2006 12:35 am Posts: 3911
|
 Re: basedvd.com running in 3rd party banners
I just got this again, coming from one of the hidden iframes still loading in Axill banners. It doesn't show in the firebug source codes but the net section of firebug shows this as coming from yieldmanager? I wouldn't be surprised if most of the current problems (rogue AVs and this) are from yieldmanager as they seem to occur on so many sites that have different direct 3rd party networks on them... that suggest to me that it's coming from one of the main feed networks and then spreading out that way. Axill skyscraper: webpage stuck in that skyscraper loading five 3rd party banners (4 of them invisible when the page is stuck in a banner iframe) second hidden banner on that webpage: That loads the basedvd.com which does all the hidden autosearches: The Net section of firebug gives this info where you can see yieldmanager showing as the referrer:  |  |  |  | Code: Response Headers Date Wed, 30 Sep 2009 21:33:25 GMT Server Apache/2.0.63 (Unix) mod_ssl/2.0.63 OpenSSL/0.9.8e-fips-rhel5 mod_auth_passthrough/2.1 mod_bwlimited/1.4 FrontPage/5.0.2.2635 PHP/5.2.8 X-Powered-By PHP/5.2.8 Keep-Alive timeout=1, max=100 Connection Keep-Alive Transfer-Encoding chunked Content-Type text/html Request Headers Host www.basedvd.com User-Agent Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.0.14) Gecko/2009082707 Firefox/3.0.14 (.NET CLR 3.5.30729) Accept text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 Accept-Language en-us,en;q=0.5 Accept-Encoding gzip,deflate Accept-Charset ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive 300 Connection keep-alive Referer http://ad.yieldmanager.com /iframe3?XDg9AHsPCwD8UC8AAAAAAK0nDQAAAAAAAgBEAAIAAAAAAP8AAAAEFwclEwAAAAAACc QHAAAAAAD6oBIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AB7rQUAAAAAAAIAAwAAAAAATMgHPZtVrz9MyAc9m1WvP-omMQisHLo.6iYxCKwcuj- amZmZmZnJP5qZmZmZmck.AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD.7DUyJb MMB4dDM6OqYqAZaTNpYiuhJzrgeD-YAAAAAA==,,http://www.axill.com/cpm/120.aspx |  |  |  |  |
Last edited by cconniejean on Sat Oct 17, 2009 1:54 am, edited 1 time in total.
correcting post borders
|
| Wed Sep 30, 2009 10:45 pm |
|
 |
|
wagdoll
Elite Member
Joined: Sun May 07, 2006 12:35 am Posts: 3911
|
 Re: basedvd.com running in 3rd party banners
Nearly a month later I'm still getting hit by this one and its 200 or so autosearches at least once daily.
I get it mostly coming from Harrenmedianetwork banners but today also got it from one of the hidden Axill banners. The firebug codes showed it coming from a globe7 banner hidden on the axill webpage that they stick into their banners and use to load more banners than can possibly be visible in one banner iframe, but the referrer in the net section of firebug said the direct referrer was yieldmanager...not a good sign.
|
| Sat Oct 17, 2009 12:27 am |
|
 |
|
wagdoll
Elite Member
Joined: Sun May 07, 2006 12:35 am Posts: 3911
|
 Re: basedvd.com running in 3rd party banners
Running in mediaservers/Media Shakers That loads: That loads:
|
| Wed Oct 21, 2009 6:12 am |
|
 |
|
wagdoll
Elite Member
Joined: Sun May 07, 2006 12:35 am Posts: 3911
|
 Re: basedvd.com running in 3rd party banners
This basedvd is now doing about 350 autosearches for me in each load  It could be more, I managed to hit stop part-way through then copied the adblock list into a spreadsheet to get a rough count from that. The 350 frames is a ount of those that look directly attributable to the basedvd, then there were about 100 other elements listed that didn't come from that. I see one of the searches going to asklots and then to jokeroo (used to be a commonly complained about framebreaker, so if anyone's seeing this around now it's probably from one of these banners).
|
| Fri Oct 23, 2009 5:43 pm |
|
 |
|
wagdoll
Elite Member
Joined: Sun May 07, 2006 12:35 am Posts: 3911
|
 Re: basedvd.com running in 3rd party banners
And a new sister site for basedvd (new to me): comshat.com/buy72890.php doing hundreds of autosearches and running in clicksor which is being served by aladdin ads. Have reported to the site where I saw the banner. estimate 300 autosearches at a minimum. There are ten iframes similar to this one: Each contains 30 iframes loading webpages loading search results (due to having done an automated bot search) I tried loading that comshat page in a new window and I found no autosearches but I did find the adserver.exchange that Strolly was noticing a few weeks/months ago with one of the sister sites when it kept breaking frames to asklots/jokeroo -- adserver.exchange is the title of the webpage loading the ebay/0iframes. When I see the basedvd in the box banners they've sort of half covered it with an ebay ad...this one is doing the same thing so that when I load the comshat I get what appears to be an innocent ebay banner. I am guessing they've got this page referrer dependent and that may be why I get no 0 iframes on this load outside of the third party banner. According to my interpretation of what I'm seeing, the comshat in clicksor is directly coming from clicksor and not via RMX as the harren and media shakers appeared to be..
|
| Fri Oct 23, 2009 11:31 pm |
|
 |
|
idaho
Elite Member
Joined: Mon Jul 17, 2006 7:49 pm Posts: 2899 Location: USA
|
 Re: basedvd.com running in 3rd party banners
Anyone that has run into this without a block in place has had a real mess on their hands, and all over their PC.
|
| Sat Oct 24, 2009 5:53 am |
|
 |
|
wagdoll
Elite Member
Joined: Sun May 07, 2006 12:35 am Posts: 3911
|
 Re: basedvd.com running in 3rd party banners
new name: binsave.com (page name: binsave.com/bin1.php)
Found in a Clicksor banner. Approximately 800 related hidden iframes/autosearches.
|
| Wed Nov 04, 2009 5:32 am |
|
 |
|
wagdoll
Elite Member
Joined: Sun May 07, 2006 12:35 am Posts: 3911
|
 Re: basedvd.com running in 3rd party banners
new name: cowreps.com
Running in Clicksor via Aladdin.
I have searchingnetwork adblocked and yet this cowreps still managed to do approximately 300 autosearches.
|
| Fri Dec 04, 2009 3:32 am |
|
 |
|
wagdoll
Elite Member
Joined: Sun May 07, 2006 12:35 am Posts: 3911
|
 Re: basedvd.com running in 3rd party banners
basedvd is still active Running today in a rectangle banner from globalinteractive that loads: That loads: Estimated 300 to 400 autosearches done in hidden iframes inside that frame.
|
| Mon Jan 25, 2010 2:02 pm |
|
|