Redirection from telechargerunevideo.com/de to notube.net/de

[nimanima]

Hello,
does any of you have an explanation for this odd occurrence happening since yesterday exclusively on Pale Moon:
when going to website telechargerunevideo.com/de I get redirected to a website called notube.net/de.
Internet Explorer (installed) and Google Chrome (Portable) don't do that, they stay on telechargerunevideo. I have scanned my entire PC (system and files) with Malwarebytes, AdwareCleaner and my regular permanet antivirus Norton - no threats found. Any idea what this odd behaviour causes?

[Isengrim]

I do not see this on my Linux install, even while running the browser in Safe Mode.

Do you have any extensions installed that might be causing the redirect?

[Nigaikaze]

when going to website telechargerunevideo.com/de I get redirected to a website called notube.net/de.

I can't replicate this either. Does it still happen when you access that website in Pale Moon's safe mode?

[nimanima]

No other extensions than those I used before yesterday as well. In the same versions. I had briefly installed the Greasmonkey Script of telechargerunevideo, but since that did not recognnize the website I wanted it for, I deleted it again.

Application Basics
------------------

Extensions
----------

Name: abcTajpu "a b c type-oo"
Version: 1.8.5.1-signed.1-signed
Enabled: true
ID: {15a7ef52-8a77-426e-9e17-e21af257d7c8}

Name: checkCompatibility
Version: 1.3.1-signed.1-signed
Enabled: true
ID: check-compatibility@dactyl.googlecode.com

Name: Classic Add-ons Archive
Version: 1.0.8
Enabled: true
ID: ca-archive@Off.JustOff

Name: Default Full Zoom Level
Version: 5.6.1-signed
Enabled: true
ID: {D9A7CBEC-DE1A-444f-A092-844461596C4D}

Name: DownThemAll!
Version: 2.0.18.1-signed.1-let-fixed
Enabled: true
ID: {DDC359D1-844A-42a7-9AA1-88A850A938A8}

Name: Easy Youtube Video Downloader Express
Version: 9.12
Enabled: true
ID: {b9acf540-acba-11e1-8ccb-001fd0e08bd4}

Name: ebayitemdescriptionsaveenlargedp
Version: 2.0.5.2.1-signed.1-signed
Enabled: true
ID: {ba2430e0-5b72-4cac-bc9e-7d1aaca75d3d}

Name: FireShot
Version: 0.98.93
Enabled: true
ID: {0b457cAA-602d-484a-8fe7-c1d894a011ba}

Name: Flash Video Downloader - YouTube HD Download [4K]
Version: 13.2.4
Enabled: true
ID: artur.dubovoy@gmail.com

Name: GoogleSharing
Version: 0.22.1-signed.1-signed
Enabled: true
ID: googlesharing@extension.thoughtcrime.org

Name: Greasemonkey for Pale Moon
Version: 3.31.4
Enabled: true
ID: greasemonkeyforpm@janekptacijarabaci

Name: IE Tab 2 (FF 3.6+)
Version: 5.12.12.1.1-signed
Enabled: true
ID: {1BC9BA34-1EED-42ca-A505-6D2F1A935BBB}

Name: Multirow Bookmarks Toolbar Plus
Version: 1.9
Enabled: true
ID: {4c7097f7-08f2-4ef2-9b9f-f95fa4cbb064}

Name: Pearl Crescent Page Saver
Version: 2.8.5
Enabled: true
ID: {c151d79e-e61b-4a90-a887-5a46d38fba99}

Name: Screengrab (fix version)
Version: 0.99.02c
Enabled: true
ID: {02450914-cdd9-410f-b1da-db004e18c671}

Name: Show MyIP
Version: 0.93.1-signed.1-signed
Enabled: true
ID: {6D1D11DB-3C6C-4db8-96E4-20F4A1088AAC}

Name: TooManyTabs
Version: 1.4.7.1-signed.1-signed
Enabled: true
ID: TooManyTabs@visibotech.com

Name: Ant Video Downloader
Version: 2.4.7.50
Enabled: false
ID: anttoolbar@ant.com

Name: Autoplay Toggle (Non-Restartless)
Version: 1.0.1
Enabled: false
ID: autoplay-toggle@lakora.us

Name: Greasemonkey
Version: 1.15.1-signed
Enabled: false
ID: {e4a8a97b-f2ed-450b-b12d-ee082ba24781}

[nimanima]

Same in Safe Mode

[nimanima]

Since I use Pale Moon Portable a new unpacking would quickly be done, but I have to copy my user profile and bookmarks over, of course, so I doubt it would make any sense to do a new unpack.

[Night Wing]

After clicking on the link below:

https://www.telechargerunevideo.com/de/

I do not get a redirect to another site. I'm using for this post 32 bit windows Pale Moon 28.2.2 running in 64 bit Windows 7 SP1. The only extensions I use are NoSquint and Adblock Latitude. User agent mode is Firefox Compatibility.

[nimanima]

Here it does.

It does not occur in my old unpack of Pale Moon 27.9 though. But since I stopped using this I have created a lot of new bookmarks and also used Greasemonkey for Pale Moon instead the original Greasemonkey and FireShot 0.98.93 instead of 0.98.85. But I have been using this configuration for weeks if not months ( I don't remember when PM 28 was issued), so I don't understand why since yesterday this redirects.

[Night Wing]

@ nimanima

Pale Moon 28.2.2 for both windows and linux was released on Dec 6th (12-06-2018).

Pale Moon 28.0.0 was released on August 16th (08-16-2018).

[Moonchild]

Since I use Pale Moon Portable a new unpacking would quickly be done, but I have to copy my user profile and bookmarks over, of course, so I doubt it would make any sense to do a new unpack.

The whole point of trying it in a fresh portable is to NOT copy your profile across and try the address in a fresh install that way. Of course it would be pointless to make a new portable install and then copying your profile across since you're not actually testing anything different. The fresh install test is important so it can be determined if it is something you have installed/configured in your profile, or that it is something system-wide.

You did say you briefly installed a specific script for that site - is that when this issue started?

[nimanima]

I copied the profile of version 27.9 into a new unpack of 28.2.2, corrected the few add-ons the compatibilty of which had changed during the switch from 27 to 28 and restored the bookmarks from yesterday's state of the art. Seems to have worked so far, but now I find myself logged out from Facebook, which so far never happened when I copied the profile from one version to another. Is that new? No cookie any more that keeps you logged in? I never know where to find anything about cookies in these browsers.