Being redirected to tatrck.com when selecting a site from suggestions
-
hubga last edited by
Nope, it is clean Windows with clean Opera.
I wouldn't have almost noticed if I didn't have uBlock ...
(and uBlock is not the cause because it does the same with clean Opera without plugins). -
jned last edited by
@hubga I am experiencing the same. Not just from suggestions, but also when I type binance.com or tradingview.com to the address bar and press Enter. The browser redirects me to tatrck.com.
-
hubga last edited by hubga
I can confirm that there is the same problem with tradingview on my computer.
It is the suggestion with the icon.As there is the icon, it looks like some affiliate tracking for Opera Software.
-
morphal last edited by
I also confirm this behaviour. Opera One on MacOS (version: 117.0.5408.142).
Opera does all it can to motivate people move to other browsers
-
DerSchlingel last edited byI‘ve seen this behavior in Opera Android only so far. But lately I‘ve been given suggestions to web sites in the address bar that don‘t stem from history nor from bookmarks.
-
marinaz909 Opera last edited by@hubga Hello, for further investigation, could you provide us with your location? Thank you!
-
marinaz909 Opera last edited by
@morphal Hello, we're sorry to hear that and understand your feelings. Could you please share your location with us? We need it for further investigation of the issue.
-
marinaz909 Opera last edited by
@jned Thank you for reaching out! Could you provide the information about your location? It will help us investigate further.
-
-
-
morphal last edited by
@marinaz909 Belarus.
But it behaves the same with external VPN as well (Germany, Poland, Netherlands) -
-
-
hubga last edited by
The problem is gone. It seems someone read it and silently removed this super feature
-
marinaz909 Opera last edited by
@hubga Hello, thank you for letting us know that the issue does not reproduce on your side, and we appreciate your patience!
-
-
marau2022 last edited by
Hi guys,
I am having this issue too.
It appears to be a virus of some sort embedding itself within suggested links.
Not seeing any harmful effects so far, but concerned on what data it is reading.
To clarify, this is not an opera specific thing, but is affecting multiple browsers, including brave and chrome
-
marau2022 last edited by
It appears to originate from https://whjre.com/v2/click
The full url I was redirected through is https://whjre.com/v2/click-B4p4G-KzV5r-PDdND-29b15744?tl=1&sa=3CeljYTWLUoJI0WPmXAf3ROdBG5R5V&sa2=S98SlTGSNTqghh05&smc3=251654
Which appeared when i was trying to load a financial site I frequently use and is perfectly legitimate.
I have not installed any add-ons, and it started about a month ago, i first dismissed as a one off, but then realised it seems a little odd to be attaching itself to the suggested popups - it seems to use the pretence that a user will be lazy and click the first thing that appears when they type in a frequented site.
I have cleared cache, cookies, even done a complete wipe of the browser itself, I've signed out of opera and signed back in...
It still attaches itself within a few hours / days of use.
I'm reasonably technically minded on internet gibberish, but this is baffling me on how to resolve and I have resorted to manually blocking redirects to that domain. But it will presumably use another at some point and catch me out.
Happy to be emailed by developers for further info, love the browser and have never previously had an issue.
This is occurring on OperaGX for me, but I am aware of instances where this is a more broad browser issue. See: https://www.reddit.com/r/brave_browser/comments/1dd8g1v/issues_with_redirects_to_tatrackcom_in_brave/
In that thread, they are suggesting it is caused by a set of malware embedded extensions, but as I say, I have none, other than Opera default extensions which I would doubt are infected since I haven't updated them in the last month, in order to get any infected script.
It seems the extensions are adding a background.js script which runs and hijacks certain types of url's to forward them through a proxy.
