DFIR Expert for Attack Reconstruction

Job ID: 40105042

Budget: $30 – $250 USD

I was recently on a potential customer website doing some research. Then a couple of minutes later I was redirected to a landing page with the website www.effectivegatecpm.com then redirected again to a pornographic site. I tried to recreate the scenario, but have been unsuccessful. This happened on a Google Chrome browser and I was redirected in the same tab as the original website. This did not affect any other Tab and hasn't happened since. I need someone to explain how and why this happened and to recreate the scenario in a controlled environment.

Focus areas
• Browser redirects
• Malvertising
• Malware analysis

What I’ll hand over: recent memory dumps and full browser histories, if needed

What I need back:
1. A clear narrative timeline of the intrusion
2. A reproducible proof-of-concept in a safe, isolated environment.
3. A short live walkthrough to answer questions and confirm next steps.

I've attached some pictures on the websites that I was redirected to in the search history and a picture of the address bar when I tried to recreate the event. The webpage came out blank when took the picture of the address bar.

If you can turn this around in a couple of days days, let’s talk.