Malware on JuicyAds? - GoFuckYourself.com

Mediamix · 11-08-2014, 06:56 AM

Anybody else got a warning when visiting JuicyAds? I get a malware warning when I visit them, but also on all my other websites that have ads from JuicyAds on them.

Can't reach support...

Warning is in Dutch for me.
http://imgur.com/AVlgx4e

Brian mike · 11-08-2014, 07:00 AM

Quote:

Originally Posted by Mediamix

Anybody else got a warning when visiting JuicyAds? I get a malware warning when I visit them, but also on all my other websites that have ads from JuicyAds on them.

Can't reach support...

Warning is in Dutch for me.

im in canada and i got the same message this morning. last night was ok but as soon i log in on one of my site i got a malware warning from juicy ads .

Mediamix · 11-08-2014, 07:01 AM

Quote:

Originally Posted by Brian mike

im in canada and i got the same message this morning. last night was ok but as soon i log in on one of my site i got a malware warning from juicy ads .

I really hope they fix it as soon as possible..

seeandsee · 11-08-2014, 07:15 AM

I did't got any warnings

Klen · 11-08-2014, 07:16 AM

Dont get any warning,virustotal either-
https://www.virustotal.com/en/url/2d...is/1415456087/

Mediamix · 11-08-2014, 07:19 AM

Quote:

Originally Posted by seeandsee

I did't got any warnings

Quote:

Originally Posted by KlenTelaris

Dont get any warning,virustotal either-
https://www.virustotal.com/en/url/2d...is/1415456087/

I still get the warnings. They seem to come from JuicyAds.bz. I get them on their website when I visit JuicyAds.com, but also on my own websites.

The Heron · 11-08-2014, 07:23 AM

I've got the same problem today, warnings only in chrome.

gnawledge · 11-08-2014, 07:30 AM

I am so glad this isn't just me. All my sites are displaying the same issue. I put in a support ticket a few minutes ago. Hopefully I won't have to spend the next week deleting code... Unreal.. I hate chrome.

Klen · 11-08-2014, 07:32 AM

Quote:

Originally Posted by Mediamix

I still get the warnings. They seem to come from JuicyAds.bz. I get them on their website when I visit JuicyAds.com, but also on my own websites.

Strange,i dont see anything in source code containing link to juicyads.bz.
By using google safety browser,juicyads.com is clean,
while juicyads.bz is dirty.
https://www.google.com/safebrowsing/...e=juicyads.com
https://www.google.com/safebrowsing/...te=juicyads.bz

Mediamix · 11-08-2014, 07:38 AM

Quote:

Originally Posted by KlenTelaris

Strange,i dont see anything in source code containing link to juicyads.bz.
By using google safety browser,juicyads.com is clean,
while juicyads.bz is dirty.
https://www.google.com/safebrowsing/...e=juicyads.com
https://www.google.com/safebrowsing/...te=juicyads.bz

Yes, JuicyAds.com is clean, but they show ads on their own website that come from JuicyAds.bz. And that triggers the warning.

Klen · 11-08-2014, 07:41 AM

Quote:

Originally Posted by Mediamix

Yes, JuicyAds.com is clean, but they show ads on their own website that come from JuicyAds.bz. And that triggers the warning.

Could be that bottom banner?As i see url ck.juicyads.com on it,and you get juicyads.bz instead?Could be simply different server loading which would explain why you see it and i dont.

Mediamix · 11-08-2014, 07:44 AM

Quote:

Originally Posted by KlenTelaris

Could be that bottom banner?As i see url ck.juicyads.com on it,and you get juicyads.bz instead?Could be simply different server loading which would explain why you see it and i dont.

I think you're right about that.

adultwebmestar · 11-08-2014, 07:45 AM

Quote:

Originally Posted by The Heron

I've got the same problem today, warnings only in chrome.

plus safari

cybermike · 11-08-2014, 07:47 AM

Seems newer iframe ads have a juicyads.bz tracking pixel so not all sites with juicyads seem to be effected.. my mad old ads seem fine

tigermtb · 11-08-2014, 07:53 AM

juicyads.bz is not one of our domains -- loooking at this now.

Mediamix · 11-08-2014, 07:58 AM

Quote:

Originally Posted by tigermtb

juicyads.bz is not one of our domains -- loooking at this now.

Lonny · 11-08-2014, 08:12 AM

got it while logging in to a few blogs.
just removed the juicy code all is good.
i know they will have it squared in a timely matter.

Brian mike · 11-08-2014, 09:40 AM

Quote:

Originally Posted by tigermtb

juicyads.bz is not one of our domains -- loooking at this now.

Thank you tiger

tigermtb · 11-08-2014, 10:12 AM

I won't be able to give any more details here for security reasons, but we are working on it and resolving... no news is good news this point forward ;)

Best-In-BC · 11-08-2014, 10:14 AM

Yea, let us know when that domain is stripped form your network so we can inform google of it being fixed!!!!!!!!!!

Please
Much love!

Mediamix · 11-08-2014, 11:14 AM

Quote:

Originally Posted by tigermtb

I won't be able to give any more details here for security reasons, but we are working on it and resolving... no news is good news this point forward ;)

I don't see any warnings now, so I think it's all solved.

CS-Jay · 11-08-2014, 11:43 AM

We have a malware Warning on http://porn.crazyshit.com . Removed all Juicy ads and asked for google's forgiveness. Traffic is non existent now, I hope the Warning doesn't stay for long.

tigermtb · 11-08-2014, 11:45 AM

Yes, the malware has been removed from our network.

Since the exploit did not involve any of our domains (juicyads.bz is not owned by JuicyAds) it was removed and stopped all the warnings. Your websites should be safe and sound again.

I'm sorry for the inconvenience, but thank everyone for their texts, tweets, support tickets and calls. We also received additional alerts internally.

Unfortunately, Malware is a real part of every ad network and the internet as a whole, we do our best to minimize the issue at all costs as one of the most clean networks.

Still cleaning up #proactive

tigermtb · 11-08-2014, 11:47 AM

Quote:

Originally Posted by CS-Jay

We have a malware Warning on http://porn.crazyshit.com . Removed all Juicy ads and asked for google's forgiveness. Traffic is non existent now, I hope the Warning doesn't stay for long.

https://safebrowsing.google.com/safe...crazyshit.com/

I don't see any alerts related to your site and I have checked with other clients and they aren't seeing the issue either. Maybe its unrelated to our network and its some other piece of code.

I think any review requests are done via Google Webmaster Tools.

CS-Jay · 11-08-2014, 11:53 AM

Quote:

Originally Posted by tigermtb

https://safebrowsing.google.com/safe...crazyshit.com/

I don't see any alerts related to your site and I have checked with other clients and they aren't seeing the issue either. Maybe its unrelated to our network and its some other piece of code.

I think any review requests are done via Google Webmaster Tools.

This is the last link I have:

http://safebrowsing.clients.google.c...crazyshit.com/

It's listed as suspicious. When I check it with a clean Chrome browser, I get "The Site ahead Contains Malware".

I can post screen shots if you like. It's not my code, as I did a full audit as well as Natnet. So now, I have to wait for google to review, and remove the Malware block.

SEO Keyboard Ninja · 11-08-2014, 12:10 PM

Well i for one can say that 2 of my traffic partners and a whole lot of other people are pointing the finger at this point. We're pulling the iframe today and will be purging the site for some A/B testing

I can honestly say that this is twice this year an advertising network has hit us with Malware. Totally grinding SE traffic to a halt and once again making my job completely hell.

Find a way to handle your scandal folks.. I for one will be pushing for all iframes to be removed once and for all. I'd rather waste the time manually uploading a banner and using a link codes. This is ridiculous..

anexsia · 11-08-2014, 01:41 PM

Quote:

Originally Posted by tigermtb

https://safebrowsing.google.com/safe...crazyshit.com/

I don't see any alerts related to your site and I have checked with other clients and they aren't seeing the issue either. Maybe its unrelated to our network and its some other piece of code.

I think any review requests are done via Google Webmaster Tools.

His website is reported as an attack page by Google as of right now and is showing a red warning page via Firefox.

tigermtb · 11-08-2014, 02:21 PM

Quote:

Originally Posted by anexsia

His website is reported as an attack page by Google as of right now and is showing a red warning page via Firefox.

I'm currently not receiving any error in Chrome and yes, FF is showing an attack warning page but there's no information in the Google report at all to show why it was flagged. Nearl all other websites I have visited to review are showing as clear and aren't showing any alerts.

Here is the form to request a review;
https://www.stopbadware.org/review-s...crazyshit.com/

I find it really strange that the information page has no data to indicate why it was blocked at all.
I'm not saying its an unrelated issue -- it just doesn't make any sense for them to flag the site then not provide more information.

tigermtb · 11-08-2014, 02:30 PM

Quote:

Originally Posted by SEO Keyboard Ninja

Well i for one can say that 2 of my traffic partners and a whole lot of other people are pointing the finger at this point. We're pulling the iframe today and will be purging the site for some A/B testing

I can honestly say that this is twice this year an advertising network has hit us with Malware. Totally grinding SE traffic to a halt and once again making my job completely hell.

Find a way to handle your scandal folks.. I for one will be pushing for all iframes to be removed once and for all. I'd rather waste the time manually uploading a banner and using a link codes. This is ridiculous..

I do want to apologize publically, even though we have already spoken privately.

I should clarify that this is NOT an incident where an Advertiser was "allowed" into our system. We have one of the strictest review and compliance systems plus realtime scanning of malware at all times.

This was a compromsed adserver.
There were no problems with our Advertisers, nor the iframes or codes they provided.

We do not allow malware on our service and clearly we do our very best to keep things clean. Our normal procedures has kept us one of the cleanest networks until this incident, we have already taken additional steps to correct it.

I am sorry.

The good news is, even this, shall pass.
The bad guys only make all of us better at being good.

We will continue our efforts to build a Better advertising network.

Mediamix · 11-08-2014, 02:45 PM

Quote:

Originally Posted by tigermtb

I do want to apologize publically, even though we have already spoken privately.

I should clarify that this is NOT an incident where an Advertiser was "allowed" into our system. We have one of the strictest review and compliance systems plus realtime scanning of malware at all times.

This was a compromsed adserver.
There were no problems with our Advertisers, nor the iframes or codes they provided.

We do not allow malware on our service and clearly we do our very best to keep things clean. Our normal procedures has kept us one of the cleanest networks until this incident, we have already taken additional steps to correct it.

I am sorry.

The good news is, even this, shall pass.
The bad guys only make all of us better at being good.

We will continue our efforts to build a Better advertising network.

And that's why we love you guys!

Brian mike · 11-08-2014, 04:53 PM

Quote:

Originally Posted by Mediamix

And that's why we love you guys!

+1

Best-In-BC · 11-08-2014, 05:43 PM

Quote:

Originally Posted by SEO Keyboard Ninja

Well i for one can say that 2 of my traffic partners and a whole lot of other people are pointing the finger at this point. We're pulling the iframe today and will be purging the site for some A/B testing

I can honestly say that this is twice this year an advertising network has hit us with Malware. Totally grinding SE traffic to a halt and once again making my job completely hell.

Find a way to handle your scandal folks.. I for one will be pushing for all iframes to be removed once and for all. I'd rather waste the time manually uploading a banner and using a link codes. This is ridiculous..

Im lucky it didnt hit all my whale sites, but a few biggies.

DonJon69 · 11-08-2014, 06:21 PM

So now we have to go to webmaster tools and send a reconsider request? Just wonderful.

tigermtb · 11-08-2014, 06:24 PM

Quote:

Originally Posted by DonJon69

So now we have to go to webmaster tools and send a reconsider request? Just wonderful.

Not all clients were affected by this, but yes in some cases it will be needed. Google may also clear the error on their own.

HiddenDoorCash · 11-08-2014, 07:01 PM

yeah.. ok nice!

Mediamix · 11-08-2014, 07:03 PM

Quote:

Originally Posted by DonJon69

So now we have to go to webmaster tools and send a reconsider request? Just wonderful.

Quote:

Originally Posted by tigermtb

Not all clients were affected by this, but yes in some cases it will be needed. Google may also clear the error on their own.

I didn't have to do anything. Everything is back to normal.

DonJon69 · 11-08-2014, 07:26 PM

Yeah, I have a malware warning in google webmaster tools. Just sent a reconsideration request. Just hate attracting any attention to my site by them.

Update: Just got the juicy newsletter. Check my site with google. Everything seems clean now.

edgeprod · 11-08-2014, 07:38 PM

Just how juicy are these ads we're talking about?

Best-In-BC · 11-09-2014, 06:53 AM

Quote:

Originally Posted by DonJon69

Yeah, I have a malware warning in google webmaster tools. Just sent a reconsideration request. Just hate attracting any attention to my site by them.

Update: Just got the juicy newsletter. Check my site with google. Everything seems clean now.

LOL, why, you got questionable content or too many adds, cause, if not, you have nothing to worry about

Best-In-BC · 11-09-2014, 06:54 AM

Quote:

Originally Posted by edgeprod

Just how juicy are these ads we're talking about?

Very Juicy, Dripping wet

rizqiv2 · 11-09-2014, 10:39 AM

it said
"» Our AdServer was compromised Nov 8th - malicious code has been removed. Thank you for your patience. "

Fenris Wolf · 11-10-2014, 02:12 AM

Although this maybe unrelated but whatever has been done to secure your network has been giving me issues with your site. I am getting access denied errors from both juicyads.com and ck.juicyads.com.

dready · 11-10-2014, 07:51 AM

Quote:

Originally Posted by Alexlecomte

I really don't understand these kind of people who get excited hacking or attacking ... That's a sad life. What's the point behind this? (No kidding, that's a real question, I just don't get it)

BUT anyway there will always be bad asses trying to get down the best companies. Thanks for the wink ;)

Wishing you all a profitable week !

Running your malware on Juicy's entire network for a day or two = $$$$$

mikeworks · 11-22-2014, 11:57 AM

Lost 60k daily google traffic on one site due to this juicyad hack. Hope google remove penalty soon.

HiddenDoorCash · 11-25-2014, 09:14 AM

Wow lol, keep it going!

11-08-2014, 06:56 AM	#1
Mediamix Dutch Webmaster! Industry Role: Join Date: Sep 2013 Location: Netherlands Posts: 3,228	Malware on JuicyAds? Anybody else got a warning when visiting JuicyAds? I get a malware warning when I visit them, but also on all my other websites that have ads from JuicyAds on them. Can't reach support... Warning is in Dutch for me. http://imgur.com/AVlgx4e __________________ Sig too big

11-08-2014, 07:15 AM	#4
seeandsee Check SIG! Industry Role: Join Date: Mar 2006 Location: Europe (Skype: gojkoas) Posts: 50,945	I did't got any warnings __________________ BUY MY SIG - 50$/Year Contact here

11-08-2014, 07:30 AM	#8
gnawledge confirmed loser Industry Role: Join Date: Jul 2012 Location: Florida Posts: 1,092	I am so glad this isn't just me. All my sites are displaying the same issue. I put in a support ticket a few minutes ago. Hopefully I won't have to spend the next week deleting code... Unreal.. I hate chrome. __________________ Wikifap Cams Eporn List Is Chaturbate Still Number 1?

11-08-2014, 07:47 AM	#14
cybermike Confirmed User Join Date: Jan 2002 Location: Ny Posts: 4,113	Seems newer iframe ads have a juicyads.bz tracking pixel so not all sites with juicyads seem to be effected.. my mad old ads seem fine __________________ Hey surfers how about some The Best Porn Sites

11-08-2014, 07:53 AM	#15
tigermtb Confirmed User Join Date: Nov 2003 Location: Canada Posts: 1,062	juicyads.bz is not one of our domains -- loooking at this now. __________________ Jay \| JuicyAds Founder Businessman of the Year [YNOT Awards 2013] The most awarded adult advertising network with 25+ XBIZ, GFY, and YNOT Awards.

11-08-2014, 07:16 AM	#5
Klen Industry Role: Join Date: Aug 2006 Location: Little Vienna Posts: 32,235	Dont get any warning,virustotal either- https://www.virustotal.com/en/url/2d...is/1415456087/

11-08-2014, 07:23 AM	#7
The Heron Confirmed User Industry Role: Join Date: Apr 2001 Location: Michigan Posts: 4,488	I've got the same problem today, warnings only in chrome.

11-08-2014, 08:12 AM	#17
Lonny Confirmed User Join Date: Jun 2003 Location: Riverside Ca. Posts: 3,539	got it while logging in to a few blogs. just removed the juicy code all is good. i know they will have it squared in a timely matter. __________________ crakrevenue

11-08-2014, 10:12 AM	#19
tigermtb Confirmed User Join Date: Nov 2003 Location: Canada Posts: 1,062	I won't be able to give any more details here for security reasons, but we are working on it and resolving... no news is good news this point forward ;) __________________ Jay \| JuicyAds Founder Businessman of the Year [YNOT Awards 2013] The most awarded adult advertising network with 25+ XBIZ, GFY, and YNOT Awards.

11-08-2014, 10:14 AM	#20
Best-In-BC Confirmed User Join Date: Jun 2002 Posts: 9,506	Yea, let us know when that domain is stripped form your network so we can inform google of it being fixed!!!!!!!!!! Please Much love! __________________ Vacares - Web Hosting, Domains, O365, Security & More Unparked domains burning a hole in your pocket? 5 Simple Ways to Make Easy $$$ from Unused Domains

11-08-2014, 11:43 AM	#22
CS-Jay Confirmed User Join Date: Oct 2003 Location: Command Central, West Palm Beach, Fl Posts: 1,794	We have a malware Warning on http://porn.crazyshit.com . Removed all Juicy ads and asked for google's forgiveness. Traffic is non existent now, I hope the Warning doesn't stay for long. __________________ I do stuff - aIm CS_Jay_D

11-08-2014, 11:45 AM	#23
tigermtb Confirmed User Join Date: Nov 2003 Location: Canada Posts: 1,062	Yes, the malware has been removed from our network. Since the exploit did not involve any of our domains (juicyads.bz is not owned by JuicyAds) it was removed and stopped all the warnings. Your websites should be safe and sound again. I'm sorry for the inconvenience, but thank everyone for their texts, tweets, support tickets and calls. We also received additional alerts internally. Unfortunately, Malware is a real part of every ad network and the internet as a whole, we do our best to minimize the issue at all costs as one of the most clean networks. Still cleaning up #proactive __________________ Jay \| JuicyAds Founder Businessman of the Year [YNOT Awards 2013] The most awarded adult advertising network with 25+ XBIZ, GFY, and YNOT Awards.

11-08-2014, 12:10 PM	#26
SEO Keyboard Ninja Confirmed User Industry Role: Join Date: Apr 2012 Location: Your Motherboard Posts: 113	Well i for one can say that 2 of my traffic partners and a whole lot of other people are pointing the finger at this point. We're pulling the iframe today and will be purging the site for some A/B testing I can honestly say that this is twice this year an advertising network has hit us with Malware. Totally grinding SE traffic to a halt and once again making my job completely hell. Find a way to handle your scandal folks.. I for one will be pushing for all iframes to be removed once and for all. I'd rather waste the time manually uploading a banner and using a link codes. This is ridiculous..

11-08-2014, 06:21 PM	#33
DonJon69 Confirmed User Industry Role: Join Date: Nov 2014 Location: NJ Posts: 475	So now we have to go to webmaster tools and send a reconsider request? Just wonderful.

11-08-2014, 07:01 PM	#35
HiddenDoorCash Confirmed User Industry Role: Join Date: Jan 2014 Posts: 471	yeah.. ok nice!

11-08-2014, 07:26 PM	#37
DonJon69 Confirmed User Industry Role: Join Date: Nov 2014 Location: NJ Posts: 475	Yeah, I have a malware warning in google webmaster tools. Just sent a reconsideration request. Just hate attracting any attention to my site by them. Update: Just got the juicy newsletter. Check my site with google. Everything seems clean now.

11-08-2014, 07:38 PM	#38
edgeprod Permanently Gone Industry Role: Join Date: Mar 2004 Posts: 10,019	Just how juicy are these ads we're talking about?

11-09-2014, 10:39 AM	#41
rizqiv2 Registered User Industry Role: Join Date: Oct 2014 Location: Under the blue sky Posts: 75	it said "» Our AdServer was compromised Nov 8th - malicious code has been removed. Thank you for your patience. " __________________

11-10-2014, 02:12 AM	#42
Fenris Wolf Confirmed User Industry Role: Join Date: Nov 2005 Posts: 1,039	Although this maybe unrelated but whatever has been done to secure your network has been giving me issues with your site. I am getting access denied errors from both juicyads.com and ck.juicyads.com. __________________ Email: fenris_wolf3000 (a t ) yah00 . c 0 m

11-22-2014, 11:57 AM	#44
mikeworks Confirmed User Join Date: Apr 2010 Posts: 272	Lost 60k daily google traffic on one site due to this juicyad hack. Hope google remove penalty soon.

11-25-2014, 09:14 AM	#45
HiddenDoorCash Confirmed User Industry Role: Join Date: Jan 2014 Posts: 471	Wow lol, keep it going!