tig.mokie1.com

[#1]

Not a problem, because it doesn't stop anything, but if I log in to the members centre, as I do every so often, then log out but leave the tab 'live' - i.e don't totally close it, I get 'transferring data from www.tig.mokie1.com' at the bottom of my screen, and permanently spinning 'loading' spinner.

Is this normal, or is it related to the fact that I have Ad-Muncher installed, and this site is trying to load an ad?

[#2]

@jab1 it ok for me ? , it must be something your end .

Do you run Malwerebytes ?

[#3]

@rongtw - thanks for that.

Yes, I run MWB once a week, usually Friday night, but I'll run it tonight and see if it finds anything.

If I cancel the loading, it doesn't seem to have any bad effects, but I'd still like to know what is? Any PN staff care to comment?

[#4]

@rongtw - Ran Malwarebytes and AVG last night, neither found anything, and I still get the 'tig.mokie1.com' box until I hit the stop loading page button.

[#5]

its defiantly a redirect virus     possibly related to this  http://computerfixguide.com/how-to-delete-t-mookie1-com-from-computer/

[#6]

Not doubting you personally, @rongtw, but that removal site looks suspicious to me - I never like places that ask me to install programs I don't know, especially when the 'manual' steps are lacking in detail, until you get to these programs.

As I have said, the loading icon can be stopped, by clicking 'stop loading this page', and I have NO ads, or redirects.

Weird that it only appears on my Member Centre page as well - nowhere else.

More research required, methinks.

[#7]

@jab1 - You could go all debug on this and open a Web Console if using FireFox there’s an Net tab that will show you where the page is going and what it’s attempting to get, this might give you an insight as to what it is up to.

[#8]

@Anonymous - using Waterfox, but maybe if I get some time, I'll try that. My other option of course, is to not visit the Members Centre.

[#9]

@jab1 - Waterfox has the same Developer options as FireFox but I think it would be a worthwhile exercise and are you referring to the Plusnet Member Centre?

[#10]

@Anonymous - Yep, I know WaterFox is just fireFox X64 - I will be doing it later. Yes, I am referring to the Plusnet Member Centre - it does not appear to be happening anywhere else.

[#11]

@jab1 - I've just had a snoop myself and I see references to *.mookie1.com who appear to be a corporate branding organisation in the US but not tig.mokie1.com. Do you have your glasses on?

[#12]

@Anonymous -yup, do have specs on, and yup, I missed an 'o' out of the thread title

In your opinion, should I be worried?

[#13]

Mmm, I don't think that's for me to answer @jab1. When I realised you were referring to the Plusnet Member Centre I black holed the domain and sub domains I saw in the console but with a re-test and viewing the console output I see no reference to them even though the requests should still be there even if they resolve to a black hole!

When I send a domain to a black hole this is what I see in my debug console on FF.

So I would expect similar for the *.mooke1.com URLs

[#14]

Asking google what it is, I got this link: https://webcookies.org/cookies/tlg.mookie1.com/3137880

Guessing admuncher is preventing it, as I have set the program to block whatever it can safely.

[#15]

So going back to message 12 I think the answer to that is now Yes.