Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

Page On Safari Redirects to “Suspicious Site Blocked” Page

Yesterday, I was on my IPad on my Safari looking things up and then suddenly when I clicked on something on one of the page on Safari, it redirected me to a new tab that read “Suspicious Site Blocked” and it was from my cable and internet provider, “Spectrum”. Right now, I’m worried that my IPad, along with my other devices connected to the same Apple ID, might have been hacked or has a malware installed on them. I’m scared. What should I do?

iPad Air, iPadOS 15

Posted on Jun 25, 2022 12:47 PM

Reply
Question marked as Best reply

Posted on Jun 25, 2022 1:10 PM

If you have not interacted with the page by clicking any links, just closing the page is quite sufficient.


If it makes you feel any more confident, you can clear you history and website data if you wish. Disabling WiFi will serve no useful benefit - other than making your iPad unable to access any internet resources, which somewhat hobbles its usefulness.


Due to the system architecture of iOS/iPadOS, unless jailbroken, your iPad is not susceptible to traditional malware infection per-se. However, as with all computer systems, there are still vulnerabilities and exploits to which you remain vulnerable. For older devices, no longer benefiting from regular security updates, the risk of an unpatched vulnerability being exploited increases.


The majority of threats to which you will be invariably exposed will surface via web pages or embedded links within email. These browser-based attacks can largely be mitigated by installing a good Content and Ad-blocking product. One of the very best and most respected within the Apple App Store - designed for iPad, iPhone and Mac - is 1Blocker for Safari.

https://apps.apple.com/gb/app/1blocker-for-safari/id1365531024


1Blocker is highly configurable - and crucially does not rely upon an external proxy-service of dubious provenance. All processing takes place on your device - and contrary to expectations, Safari will run faster and more efficiently. 


Unwanted content is not simply filtered after download (a technique used by basic/inferior products), but instead undesirable embedded content blocked from download. A further benefit on metered services, such as cellular connections where you data may be capped or chargeable, this not only improves speed but also saves you money. 1Blocker has also recently introduced its new “Firewall” functions - that are explicitly designed to block “trackers”. Being implemented at the network-layer, this additional protection works across all Apps. Recent updates to 1Blocker has introduced additional network extensions, extending protection to other Apps.


A further measure to improve protection is to use a security focussed DNS Service in preference to automatic DNS settings. This can either be set on a per-device basis in Settings, or can be set-up on your home Router - and in so doing extends the benefit of this specific protection to other devices on your local network. I recommend using one of the following DNS services - for which IPv4 and IPv6 server addresses are listed:


Quad9 (recommended)


9.9.9.9

149.112.112.112

2620:fe::fe

2620:fe::9



OpenDNS


208.67.222.222

208.67.220.220

2620:0:ccc::2

2620:0:ccd::2


Cloudflare+APNIC


1.1.1.1

1.0.0.1

2606:4700:4700::1111

2606:4700:4700::1001



Use of the above DNS services will help to shield you from “known bad” websites and URLs - and when used alongside 1Blocker, or other Content Blocker provides defense in depth.


There are advanced techniques to further “harden” iOS/iPadOS (such as using DoH, DoT and DNSSEC). Apple has recently introduced its new Private Relay to its iCloud+ subscribers - in part employing DoH as an element of this new functionality.


I hope this information and insight proves to be helpful. 


Similar questions

5 replies
Question marked as Best reply

Jun 25, 2022 1:10 PM in response to toan46

If you have not interacted with the page by clicking any links, just closing the page is quite sufficient.


If it makes you feel any more confident, you can clear you history and website data if you wish. Disabling WiFi will serve no useful benefit - other than making your iPad unable to access any internet resources, which somewhat hobbles its usefulness.


Due to the system architecture of iOS/iPadOS, unless jailbroken, your iPad is not susceptible to traditional malware infection per-se. However, as with all computer systems, there are still vulnerabilities and exploits to which you remain vulnerable. For older devices, no longer benefiting from regular security updates, the risk of an unpatched vulnerability being exploited increases.


The majority of threats to which you will be invariably exposed will surface via web pages or embedded links within email. These browser-based attacks can largely be mitigated by installing a good Content and Ad-blocking product. One of the very best and most respected within the Apple App Store - designed for iPad, iPhone and Mac - is 1Blocker for Safari.

https://apps.apple.com/gb/app/1blocker-for-safari/id1365531024


1Blocker is highly configurable - and crucially does not rely upon an external proxy-service of dubious provenance. All processing takes place on your device - and contrary to expectations, Safari will run faster and more efficiently. 


Unwanted content is not simply filtered after download (a technique used by basic/inferior products), but instead undesirable embedded content blocked from download. A further benefit on metered services, such as cellular connections where you data may be capped or chargeable, this not only improves speed but also saves you money. 1Blocker has also recently introduced its new “Firewall” functions - that are explicitly designed to block “trackers”. Being implemented at the network-layer, this additional protection works across all Apps. Recent updates to 1Blocker has introduced additional network extensions, extending protection to other Apps.


A further measure to improve protection is to use a security focussed DNS Service in preference to automatic DNS settings. This can either be set on a per-device basis in Settings, or can be set-up on your home Router - and in so doing extends the benefit of this specific protection to other devices on your local network. I recommend using one of the following DNS services - for which IPv4 and IPv6 server addresses are listed:


Quad9 (recommended)


9.9.9.9

149.112.112.112

2620:fe::fe

2620:fe::9



OpenDNS


208.67.222.222

208.67.220.220

2620:0:ccc::2

2620:0:ccd::2


Cloudflare+APNIC


1.1.1.1

1.0.0.1

2606:4700:4700::1111

2606:4700:4700::1001



Use of the above DNS services will help to shield you from “known bad” websites and URLs - and when used alongside 1Blocker, or other Content Blocker provides defense in depth.


There are advanced techniques to further “harden” iOS/iPadOS (such as using DoH, DoT and DNSSEC). Apple has recently introduced its new Private Relay to its iCloud+ subscribers - in part employing DoH as an element of this new functionality.


I hope this information and insight proves to be helpful. 


Jun 25, 2022 4:08 PM in response to toan46

The “suspicious site blocked” is of itself likely to be legitimate - in that the link/page you were initially directed to was “sink holed” as bad/malicious.


To be clear - if this landing page did not attempt to persuade you to do anything untoward, then it should be absolutely nothing to worry about. This warning page was itself a redirect to a dead-end - instead of the calling page leading you to the actual bad/malicious page.


The calling page that led you to the warning had a link that was attempting to direct your to something bad. The reason why it was sending you to something bad is impossible to directly infer from the limited information that is available - but take solace from knowing that you likely did not manage to reach a potentially malicious page.


If instead the landing page, with the warning, was trying to persuade you to give personal or sensitive information - or suggest that you click links to scan for virus’ or malware, or to call a telephone number - then you might reasonably conclude that you had reached something bad; clicking links or responding to invitations to call a number could potentially expose you to an exploit. This type of attack can only work if you interact with the page; simply closing the page should prevent the exploit from proceeding.


Without delving deeply into the technicalities of malware, vulnerabilities, threats and exploits, it is impossible to make this any simpler. If you are still concerned, follow your own advice in clearing your history and website data if you wish. In following the advice that I provided in my immediately preceding reply, you will add mitigation to iPad that will largely shield you from many potential exploits that you may encounter.

Jun 25, 2022 1:00 PM in response to toan46

Some web pages may be blocked for one of many reasons. Assuming that you’re not using an Ad’ or Content blocking App, or other third-party security App on your iPad, it is perhaps likely that the webpage has been “sink holed”.


Without delving into the technicalities of how and why this may occur, a web-page redirect may be to a known “bad” domain or web-page. The DNS lookup intercepts and blocks access to the bad website/page - and sometimes replaces the page with a warning.


Unless you are asked to interact with the webpage, or asked for personal information, you should have no immediate cuase for concern. Just close the page - and move on.



Jun 25, 2022 1:09 PM in response to LotusPilot

So if I just close the page, clear all of my history and website data, turn off my Wifi afterwards, power my IPad off, would I be fine and okay? I’m also worried that my Internet might be compromised after seeing that page. I need to know if my devices are safe and that I shouldn’t have to worry about it. I usually get paranoid easily about anything.

Page On Safari Redirects to “Suspicious Site Blocked” Page

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple ID.