Seeking Alpha page pre-empted by fishing web site

waveydavy

5 years ago
updated 5 years ago

You asked for screen shots of the pages I have been diverted to. I have Norton on my computer, and it seems that they have caught up with this. Here is a screen shot of their report:

I discovered this after seeing a blank page where Seeking Alpha was. The address on this page is:

http://cleardexchange.com/script/s2iurl.php?csid =1806371&s1=10&md=0&stamat=m%7C%2C%2Cg3f7d3I-oGU3B09GH0dEdHP3xP.f66%2CTTWnUNmo_hG0g3nudZrs08-iVkdngVu9aBaXkPgoGxL3MQ-e0ooAcJyMBuZw8nP_wvjVRBMm-AqOW5iOmzhrIofivn8yE78w95yr9WffvU7CX46LHDxHaAhsmW4ESq_4v0gR8E4pcYa6b5rR8MbMlWUUzJDUG7aA0GtYaUZvkvR_aO7EdhNGbA7tnOC4Zci26PWQ5SeiuI4cS5uMGWJAMQ5W0KDOl0ikD...

Firefox does not offer an "open in text view" so I do not know if the page is truly blank.

Again, this ONLY happens with Seeking Alpha.

Replies 3

Oldest first
Newest first Oldest first

TrevorHealSA

5 years ago

Thank you for sending through these details.

If this is coming through one of our advertising partners, this information will enable us to block them.

Best regards and thanks again,
Trevor Heal

VP of Business Operations

Seeking Alpha

Reply Link

waveydavy

5 years ago

Some new info. Norton is now blocking, but I saw the blank page in my Firefox History. The following addresses were in my browser history:

https://hotcpc.com/click?node=4&time=1566410040&id=125&pid=8&fid=8&sid=10&ext=1&rank=0&ad=eyJ0aXRsZSI6IiIsInVybCI6IiJ9

always seems "hotpc" is passing on to others.

https://pridebroker.com/out?out=https%3A%2F%2Fagnamedia.com%2F%3Ffid%3D8%26stream%3Dsid%26kw%3Dbuy%26f%3Dclick%26bu%3Dhttps%253A%252F%252Fpridebroker.com%252Fclick.php%253Fkey%253Dcusit8gt3i9n1fhu5glz%2526cost%253Dusdcost%2526t1%253Dzone%2526t2%253Dstream%2526t3%253Dsubzone

note the "referer" in the next one:

https://basispixel.com/index/15779637?id=%2413&referer=seekingalpha.com&hash=AwRZWUNcb3h3cGgFBE5CVEN5ZXdwaQYHRlFVXHt%2FcXtyBxcnJQ%3D%3D

https://windowsappcenter.360securech-safe.top/pmtgw/esqmf204/?utm_source=dhcash1&utm_pubid=1806387&x-context=15664100941235606923263832762426476&xm={xm}

Reply Link

TrevorHealSA

5 years ago

Hello,

Thank you for providing this additional info. MY team will contact our partners and make sure that these are all blocked and work with our anti malware partners to determine if these were all coming through ads on our site and what partners were violating our terms.

Thanks again,

Trevor

Reply Link