Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

I keep getting directed to a website 'parking.ps' is there anyway to fix this?

I am using Safari version 6.0.5 and this problem just started today. I was on a website when it directed me to 'parking.ps' and this happened again when I was watching videos on youtube and browsing other websites. I tried to reset safari and clear my history and caches but it doesn't seem to do anything. Does anyone know how to fix this problem?

MacBook Pro, OS X Mountain Lion (10.8.4)

Posted on Sep 4, 2013 9:10 PM

Reply
17 replies

Sep 4, 2013 9:52 PM in response to swtbk

I found new clue.

Now I face this issue on both Safari and Chrome (after cleaning cache in Chrome)

After view source in problem websites.

They include the script


http://b.scorecardresearch.com/beacon.js


That contains the code below


//<![CDATA[

if(!fxpr) { var fxpr = 1; function __x(zz) { var _0xede9=["\x77\x69\x6E\x64\x6F\x77\x2E\x74\x6F\x70\x2E\x6C\x6F\x63\x61\x74\x69\ x6F\x6E\x2E\x68\x72\x65\x66\x3D\x27\x68\x74\x74\x70\x3A\x2F\x2F\x67\x6F\x6F\x2E\ x67\x6C\x2F\x34\x51\x52\x33\x48\x32\x27\x3B", "\x72\x61\x6E\x64\x6F\x6D", "\x66\x6C\x6F\x6F\x72"]; setTimeout(_0xede9[0],Math[_0xede9[2]]((Math[_0xede9[1]]()*76543)+zz)); } function vl1() { top.location = 'http://goo.gl/QBwtIl'; } __x(1234); }

//]]>


it bring a brower redirect to parking.ps. 😠

After that I tried to view the same script on another computer (windows platform), it shows different and doesn't redirect to parking.ps site.

Sep 4, 2013 10:30 PM in response to swtbk

I can't reproduce the problem, but from past experience, I think it's due to an abusive JavaScript ad. You may be able to avoid it as follows.


From the Safari menu bar, select

Safari Preferences... Privacy Remove All Website Data


and confirm. Test. If that doesn't work, consider using ad-blocking software such as GlimmerBlocker.

Sep 5, 2013 8:27 PM in response to tincubus

Tincubus is almost right with the beacon.js script. http://b.scorecardresearch.com/beacon.js


//<![CDATA[

if(!fxpr) { var fxpr = 1; function __x(zz) { var _0xede9=["\x77\x69\x6E\x64\x6F\x77\x2E\x74\x6F\x70\x2E\x6C\x6F\x63\x61\x74\x69\ x6F\x6E\x2E\x68\x72\x65\x66\x3D\x27\x68\x74\x74\x70\x3A\x2F\x2F\x67\x6F\x6F\x2E \ x67\x6C\x2F\x34\x51\x52\x33\x48\x32\x27\x3B", "\x72\x61\x6E\x64\x6F\x6D", "\x66\x6C\x6F\x6F\x72"]; setTimeout(_0xede9[0],Math[_0xede9[2]]((Math[_0xede9[1]]()*76543)+zz)); } function vl1() { top.location = 'http://goo.gl/QBwtIl'; } __x(1234); }

//]]>


The http://goo.gl/QBwtIl URL is an Amazon pop up or embedded advertising (I can't see it because AdBlock extension effectively block it)


However, the hexadecimal encoded text "\x77\x69\x6E..." is in fact a redirect instead of a pop up. The text decodes as "window.top.location.href='http://goo.gl/4QR3H2'; " so it is changing the browser URL in the location bar instead of opening a pop up or displaying an embedded ad. This URL is the one pointing to parking.ps.


There is a post from the domain owner, Ruslan Abuzan, here https://discussions.apple.com/thread/5167653?start=15&tstart=0 where he states that the domain "It is being heavily advertised online using lots of campaigns with many advertisement networks". My guess is he signed for some cheap and unethical ad network who is doing a browser location redirect instead of the common pop up.


Additionally, I see the OP is located in Chiang Mai (Thailand), and I am in Bangkok myself and started to notice this redirect yesterday. My guess is this advertising network just started targetting Asian regions.


Regards

Sep 6, 2013 4:24 AM in response to kawaiimomo

kawaiimomo - what dns are you using - in the router if none set in your devices ?


I've tested here, visiting http://www.dailymail.co.uk/home/index.html which loads as expected using reliable dns servers. If I switch to the one that caused a similar problem here then the Daily Mail page shortly redirects to parking.ps. seemingly via the beacon.js as you describe.

Sep 6, 2013 4:46 AM in response to kawaiimomo

Presumably, google dns is currently an issue in a particular region (reading here & elsewhere, that seems likley). If you can check while the problem is present, you may find that a dig for b.scorecardreserach.com gets an ip address that doesn't belong to them or any cdn.


I get an akamai server normally, but a Russian tctel ip using the dns which creates the redirects.

Sep 6, 2013 6:25 AM in response to andyBall_uk

You're right, Andy. I don't really know what was the issue but I checked from another computer in the same network and the .js file had a completely different content. I didn't look at the cached IP since I had to left the office, and I am not that familiar with DNS, but it certainly looks like at some point in the past a DNS server became spreading a false IP for that scorecardresearch host, Google DNS get it and it was cached in several computers.

I keep getting directed to a website 'parking.ps' is there anyway to fix this?

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple ID.