It's not a popup; seems to be a redirect though based on my browser history I'm not certain.
I checked my browser history using Nirsoft's BrowsingHistoryView tool, as Firefox's history list filters out duplicate entries, making it harder to see what exact order you did things in.
My history first shows the above URL having been opened, and next is the URL to the bogus survey, with "Visited From" equal to the above URL. So I suspect now that the above site is infected, and that it redirected me. The new tab that opened for me only showed the survey. I closed that tab, and re-clicked the link in the search results to get the correct page to display. It displayed then, but with some error message, so I closed it.
My history first shows the above URL having been opened, and 1 second later is the URL to the bogus survey, with "Visited From" equal to the above URL. So again, I suspect the above site is infected. [ But I guess it might still instead be a problem in my browser or an add-on of mine? ] Upon closing the tab, and re-clicking the link in the search results, the correct page displayed, without any error.
I'm running the latest Waterfox, 56.2.9. With 11 add-ons. Since this has only happened twice so far, and isn't recreatable by opening the same sites again, I can't test if disabling the add-ons would fix the problem.
From what I read, the end of the survey prompts you to buy some things, so that seems to be its main purpose. I don't think it does anything else nefarious to the machine (whether it's on my end or the server end). But I can't be sure.
![[personal profile]](https://www.dreamwidth.org/img/silk/identity/user.png)
chiming
no subject
Date: 2019-04-22 02:08 pm (UTC)From:I checked my browser history using Nirsoft's BrowsingHistoryView tool, as Firefox's history list filters out duplicate entries, making it harder to see what exact order you did things in.
Yesterday on 4/21:
I did this search in DuckDuckGo:
https://duckduckgo.com/?q=android+screen+goes+black+during+call
Then, I clicked one of the top search results (right-click, to open in new tab):
http://www.smartmobilephonesolutions.com/content/cell-phone-shows-a-black-screen-during-or-after-a-phone-call
My history first shows the above URL having been opened, and next is the URL to the bogus survey, with "Visited From" equal to the above URL. So I suspect now that the above site is infected, and that it redirected me. The new tab that opened for me only showed the survey. I closed that tab, and re-clicked the link in the search results to get the correct page to display. It displayed then, but with some error message, so I closed it.
The day before on 4/20:
I did this search:
https://duckduckgo.com/?q=mayor+steven+benjamin+mailing+list
I had clicked this link in the search results: https://stevebenjamin.com/
My history first shows the above URL having been opened, and 1 second later is the URL to the bogus survey, with "Visited From" equal to the above URL. So again, I suspect the above site is infected. [ But I guess it might still instead be a problem in my browser or an add-on of mine? ]
Upon closing the tab, and re-clicking the link in the search results, the correct page displayed, without any error.
I'm running the latest Waterfox, 56.2.9. With 11 add-ons. Since this has only happened twice so far, and isn't recreatable by opening the same sites again, I can't test if disabling the add-ons would fix the problem.
From what I read, the end of the survey prompts you to buy some things, so that seems to be its main purpose. I don't think it does anything else nefarious to the machine (whether it's on my end or the server end). But I can't be sure.