L0TT0 pop-up

sak · May 8th, 2024, 03:16 PM

Does anyone know why there is a black on yellow "L0TT0" pop-up on ImageVenue downloads? (Just a flash before wanted image appears...)
Thanks.

sak · May 22nd, 2024, 04:53 PM

They're still doing it... very disconcerting.

simes · May 22nd, 2024, 05:16 PM

Well, I've not seen anything, not even a brief flash of any banners. I presume your browser blocks pop-ups, or that you have a separate ad blocker installed? If you have an Internet Security Suite then check or configure the settings.

Billiwog · May 22nd, 2024, 07:12 PM

It only shows up with some images. In my browser (Firefox with NoScript extension) it doesn't flash and is just a light blue hotlink that leads to a "Secure Connection Failed" page.

**Jazz67** · May 23rd, 2024, 07:28 AM

It pops up on mine, running Brave, but it's so quick it's impossible to get a screen grab of.
My guess would be it's adblock related

Billiwog · May 25th, 2024, 06:38 AM

The IV page source has a couple of l0tt0 image URLs, but they fail to load. There's also a telling reference to an image named "IV_l0tt0.jpg".

Putting the l0tt0(dot)com URL into a search engine turns up the intel that they're a Crypto Casino with an affiliate program. In a forum thread from early this month, the owner talks about "final testing" and "after the new version is live".

What we're seeing might be signs of early infrastructure to facilitate IV participating in that affiliate program. Since the l0tt0 site isn't live, their content isn't loading at this time.

sak · May 25th, 2024, 04:38 PM

I disconnected adblock, but the flash remains...
Are any of you concerned or is it harmless?

But wait! that was not true. There is a LOTTO banner now when adblock is disabled.
It says: Best NSFW AI ChatBot...

Billiwog · May 25th, 2024, 08:29 PM

My NoScript settings are extremely restrictive, so I opened an image in Opera and can see the banners. In Opera I'm also able to get to the l0tt0 site. The NSFW ChatBot ad comes from *.magsrv(dot)com and is probably unrelated to l0tt0. I clicked on all of the ads and didn't find anything unusually concerning.

**Scott T** · May 25th, 2024, 08:40 PM

A couple of extensions/add-ons that could be tried to see if they make any difference.

1. Privacy Badger
2. DuckDuckGo Privacy Essentials

Privacy Badger learns as it goes so it gets better over time
DuckDuckGo Privacy Essentials is surprisingly quite good

On my Firefox Browser I have both of them running along with Adblock Plus and there are no conflicts between them.

May 8th, 2024, 03:16 PM	#1
sak Junior Member Join Date: Nov 2010 Posts: 8 Thanks: 4,795 Thanked 95 Times in 14 Posts	L0TT0 pop-up Does anyone know why there is a black on yellow "L0TT0" pop-up on ImageVenue downloads? (Just a flash before wanted image appears...) Thanks.

May 23rd, 2024, 07:28 AM	#5
Jazz67 SuperMod, supergroovy Join Date: Feb 2009 Location: Lost in the Forest Posts: 6,133 Thanks: 52,875 Thanked 47,434 Times in 6,110 Posts	It pops up on mine, running Brave, but it's so quick it's impossible to get a screen grab of. My guess would be it's adblock related __________________ Don't cling to a mistake just because you spent a lot of time making it.

May 25th, 2024, 08:40 PM	#9
Scott T Veteran Member Join Date: Jan 2019 Location: UK Posts: 4,530 Thanks: 39,765 Thanked 74,492 Times in 4,516 Posts	A couple of extensions/add-ons that could be tried to see if they make any difference. 1. Privacy Badger 2. DuckDuckGo Privacy Essentials Privacy Badger learns as it goes so it gets better over time DuckDuckGo Privacy Essentials is surprisingly quite good On my Firefox Browser I have both of them running along with Adblock Plus and there are no conflicts between them. __________________ Everything that I upload to VEF is archived so please message me if my posts have any dead content, including thumbnails. All scans are from my own magazines purchased new, plus a few second hand ones purchased early on. Last edited by Scott T; May 25th, 2024 at 08:55 PM..

May 22nd, 2024, 04:53 PM	#2
sak Junior Member Join Date: Nov 2010 Posts: 8 Thanks: 4,795 Thanked 95 Times in 14 Posts	They're still doing it... very disconcerting.

May 22nd, 2024, 05:16 PM	#3
simes Member Join Date: Jan 2008 Posts: 38 Thanks: 5,143 Thanked 330 Times in 36 Posts	Well, I've not seen anything, not even a brief flash of any banners. I presume your browser blocks pop-ups, or that you have a separate ad blocker installed? If you have an Internet Security Suite then check or configure the settings.

May 22nd, 2024, 07:12 PM	#4
Billiwog Senior Member Join Date: Apr 2009 Posts: 160 Thanks: 947 Thanked 1,664 Times in 150 Posts	It only shows up with some images. In my browser (Firefox with NoScript extension) it doesn't flash and is just a light blue hotlink that leads to a "Secure Connection Failed" page.

May 25th, 2024, 06:38 AM	#6
Billiwog Senior Member Join Date: Apr 2009 Posts: 160 Thanks: 947 Thanked 1,664 Times in 150 Posts	The IV page source has a couple of l0tt0 image URLs, but they fail to load. There's also a telling reference to an image named "IV_l0tt0.jpg". Putting the l0tt0(dot)com URL into a search engine turns up the intel that they're a Crypto Casino with an affiliate program. In a forum thread from early this month, the owner talks about "final testing" and "after the new version is live". What we're seeing might be signs of early infrastructure to facilitate IV participating in that affiliate program. Since the l0tt0 site isn't live, their content isn't loading at this time.

May 25th, 2024, 04:38 PM	#7
sak Junior Member Join Date: Nov 2010 Posts: 8 Thanks: 4,795 Thanked 95 Times in 14 Posts	I disconnected adblock, but the flash remains... Are any of you concerned or is it harmless? But wait! that was not true. There is a LOTTO banner now when adblock is disabled. It says: Best NSFW AI ChatBot...

May 25th, 2024, 08:29 PM	#8
Billiwog Senior Member Join Date: Apr 2009 Posts: 160 Thanks: 947 Thanked 1,664 Times in 150 Posts	My NoScript settings are extremely restrictive, so I opened an image in Opera and can see the banners. In Opera I'm also able to get to the l0tt0 site. The NSFW ChatBot ad comes from *.magsrv(dot)com and is probably unrelated to l0tt0. I clicked on all of the ads and didn't find anything unusually concerning.