Nexus Mods Website redirecting away from Nexus site to suspicious website

[eddymunster]

Let us know what anti-malware/adware/virus software you have on your PC and ensure you've run a scan that returns clean before reporting the ad to us. NcAfee Live Safe Free, Virgin Media

The date and time you saw this ad. 25th & 26th May 2024

The URL of the page you were on at the time, e.g. http://www.nexusmods.com/games/? https://www.nexusmods.com/skyrimspecialedition

Your general location - e.g. I live in Exeter, in Devon, in England. If you don't want to give the city you live in, then your state and country will suffice, e.g. Devon, England.Cheshire UK

A good description of what is happening that makes you think this is a bad ad. An example might be, "I was browsing the site, but immediately upon loading the page at http://www.nexusmods.com/games/? I was redirected to another website that told me I had a virus on my PC that I had to pay money to remove". Page redirects after a few seconds to another website, 

If you get redirected or sent to another site, provide the URL that you are sent to.

varies between an unresponsive URL and Virgin Media's anti virus blocked warning https://gbftrk.live/click?key=c55fa4b86ad89ee7ace6&SUB_ID_SHORT=3b0b69f8489c9b2be0c26e62a67d158b&COST_CPC=0.002496&PLACEMENT_ID=15784116&CAMPAIGN_ID=953689&DEVICE_BRAND=Unknown&BROWSER_NAME=Chrome&USER_OS=Windows&USER_CARRIER=Virgin Media&USERAGENT=Mozilla%2F5.0 (Windows NT 10.0%3B Win64%3B x64) AppleWebKit%2F537.36 (KHTML%2C like Gecko) Chrome%2F125.0.0.0 Safari%2F537.36&REMOTE_LANGUAGE=11&BANNER_ID=2737845&CATEGORY_ALIAS=Mainstream_Mediabuy

Edited May 27 by eddymunster

[skelebaby93]

Windows Security, Bitdefender, scans all clear

From around the 25th May 2024 with latest being today, 29th May 2024, time's I've tried varying from probably around 3pm-2am

Every single nexus page, checked there if it was just the skyrim mod pages but it's also on stardew as well, doesn't happen on any other website except nexus

Glasgow, Scotland

McAfee virus warning, porn sites, some celebrity tabloid thing and the latest one that really concerned me was an opera downloader site that auto downloaded the opera installer. These sites take me out of nexus within roughly 10 seconds of loading a page. Tried again there to grab screenshots of the sites and you can see the opera download in the last image (I clicked absolutely nothing on that page once it loaded for it to download anything, just did it automatically)

Like I said, there's a lot of different sites, url is constantly changing but the mcafee one seems to be the most often 

[Dark0ne]

Thanks for the report. We've sent it to our ad provider straight away for review.