Jump to content

Sometimes Redirecting to spam/gamble site when accessing msfn.org/board


Recommended Posts

Posted

I recently reinstalled the OS. Both, Iphone and the PC. The profile is new. It's not countriy or ISP related since the supervisor has U.S. flag, the same as you, we assume it's true.


Posted (edited)

The thread title calls it a "redirect".

Can still be ISP.

I do not use the same ISP as our supervisor (he hosts a website and we do not live in the same 1-of-50 US States, my ISP operates in 15 US States and there are at least 4 US States between us).

Again, I revert to this, You and I will *NEVER* know.

We have clear indication that MSFN owners, admins, and moderators CAN'T TELL US (citing confidentiality reasons, ADMIRABLE) and CAN'T FIX IT (in my opinion).

Edited by NotHereToPlayGames
Posted

I wonder if the server got compromised and the htaccess or some other file defining access to the website was made to redirect users of certain browsers to the spam website? I think that can filter based upon user agent.

Posted
Just now, K4sum1 said:

I wonder if the server got compromised and the htaccess or some other file defining access to the website was made to redirect users of certain browsers to the spam website? I think that can filter based upon user agent.

If something server-level was compromised, nobody is telling the userbase (in my country, these have to be disclosed, but the server does not sit in my country).

It's not a "certain browser" issue.  Several Supermium users but only one affected.  Several Iron users but only one affected.  Several Chromium users but only one affected.

Posted

They changed the icon again, to a green troll! Mockin'?

Ghrome 146 (Official Build, googled-chromium). Now they kindly offer to translate!

 

translate.png

Posted

I can't help but think that those that are afflicted with this issue is MAKING IT WORSE by confirming the issue exists.

Kind of like how most search engines move most-visited or most-relevant to the TOP.

Kind of like how fake "unsubscribe" spam links don't really unsubscribe you, but rather inform the spammer that they have a legit email address.

By confirming the isssue (over, and over, and over again), aren't you basically creating some form of confirmation "DNS Cache"?

By confirming the issue, aren't you basically voluntarily and willfully handing over your IP Address to "whomever is behind this"?

Posted
6 hours ago, EliraFriesnan said:

Mockin'?

Yep!  Openly mocking!

But I REALLY do think that there is NOTHING THAT CAN BE DONE to "prevent" this.

I really do think that!  Or why would it not be fixed by now?  It's been two months since this issue has been brought to everyone's attention.

I kind of view it along these lines, "We have 200 active members, all 200 remain active, we haven't lost any members, therefore this is a NON-ISSUE that we can IGNORE."

 

(I have no clue how many ACTIVE members we have, 200 is probably HIGH but also depends on just what is meant by "active")

Posted

I know nothing about the technicalities of this issue. Only Xper has the necessary access to investigate it as the forum owner.

Whatever the cause, and whether it's related to an issue with the board's server or not, it is apparently only affecting a very small number of people.

That to me would logically indicate an issue with their particular setups, including their ISPs and geographical location.

I am quite certain that if this could have been fixed by the MSFN administrators, it would have been.
:)

Posted
On 4/12/2026 at 8:14 AM, NotHereToPlayGames said:

Well...  Um...  Seems to me that the forum admins and moderators really do not want us "regular members" to truly know why this is happening.

If you had any experience with enterprise level infosec, my statement would make perfect sense. To note that I (personally) have an understanding of the execution chain in theory but this is not confirmed. It would be foolish for me to provide that information as if it were valid, and an exploit exists, it could allow malign actors to take action against the site. If you had any experience in running a website, you would know that you never make public anything that could potentially allow someone to exploit the site.

The site is sometimes redirecting to a new url now, a 98m4.
User Agent may play a role, but changing the user agent in Palemoon (where I am typing from) to the one that Iron uses (where the redirect happens) doesn't cause the redirect to occur in Palemoon. I suspect that I know the reason for that, however since that information could be linked to an exploit, that won't be shared.

Posted (edited)

in very old days when i still used a 56k modem, for better pricing i changed the provider (it is just a diffrent phone number)

but one thing i remember from that time

always when i opened the IE then i was liked to their ad-website (not the website i entered)

so they definatly can redirect you, for newer times i noticed (against that "illegal" discussion - no they did not ban this)

instead in my country they redirected viz.com - just a website that offer anime - where is the "illegal" ?

they really think we are stupid 

Edited by Tripredacus
changed a word
Posted

I read that Germany uses DNS level blocking for domains. For Viz, I'm not sure which property they were trying to block but possibly Dragon Ball.

Even an ISP I used to use would use first-line DNS to redirect some sites to the ISP's homepage, primarily file-sharing sites IIRC.

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
  • Recently Browsing   0 members

    • No registered users viewing this page.
×
×
  • Create New...