browser auto redirect to gezinti

Have the same problem. Not only with Safari but with chrome as well.

ipad Model :MF081LL/A

wifi + cell

İOS 8.0

Try resetting your router. Also check the website for the router

manufacturer to see if there has been a firmware update.

Same problem with multiple browsers points to router problem.

I have the same problem too

iPhone 5s - IOS 8

Safari and Chromo

Redirect to Turkish website

Try resetting your router. Also check the website for the router

manufacturer to see if there has been a firmware update.

Same problem with multiple browsers points to router problem.

I also the same problem since a few days, on both iPad and iPhone before upgrading to iOS 8 and continued after update, in all browsers: Safari, Chrome and even when visiting website from Twitter app. The problem also happens on Safari for Mac when setting user agent to be iOS 7. I also tested with 2 routers and 3G connection and problem remained, but all of them are STC in KSA.

7heavens wrote:

I also the same problem since a few days, on both iPad and iPhone before upgrading to iOS 8 and continued after update, in all browsers: Safari, Chrome and even when visiting website from Twitter app. The problem also happens on Safari for Mac when setting user agent to be iOS 7. I also tested with 2 routers and 3G connection and problem remained, but all of them are STC in KSA.

Do you have any suspicious profiles installed in Settings > General > Profiles & Device Management (if that item exists near the bottom of the General list) or a VPN profile installed under Settings > General > VPN?

Do you have any proxies defined in your Wi-fi connections (Settings > Wi-Fi > tap "I" in a circle icon)?

These would not explain you seeing this over 3G or on a Mac by changing the user agent to match iOS 7, though.

Does this happen with all page loads, or just web searches? (Any suspicious search engines listed in Settings > Safari > Search Engine?)

This almost appears to be a transparent http proxy messing with your web browser requests, and/or some kind of poisoned DNS server. Does this happen on both http (non-secure) and https (secure) connections? For example, does loading <http://google.com/> differ from loading <https://google.com/>?

I suddenly had this problem on my iPhone 4, shortly after putting in a new SIM card after arriving in Australia. After deleting my browser history, cookies, turning off Javascript AND disallowing 3rd party cookie activity, I finally seem to have Safari back under my control. Hope this helps!

Have the same problem. Not only with Safari but with chrome as well.

ipad Model :MF081LL/A

wifi + cell

İOS 8.0

no suspicious profiles, - no proxie defined, - happens when you search and opens with a site name GOODWEBADS.COM .- ı can open yahoo - google search pages after that it redirects. - it happens on both https and http.

Thank you for help, but I still need help.

Dear Eleanorin,

deleting my browser history, cookies, turning off Javascript seems worked. Hope it is over.

THKY

Thank you for the detailed answer which really helps.

I couldn't see anything suspicious on profile and don't use any proxy.

I get the problem mainly when visiting tech website like techmeme.com, neowin.net, theverge.com and not on other website. Also, the attack seem to be very much targetted to iOS as the link that I get redirected to is:

goodwebads.com/iOS_b.php?hash=c33a790546128d924bd8bd5cecfe1ccd

The poisoned DNS looks for now the most probable problem. I tested by changing the DNS to the google one (8.8.8.8 and 8.8.4.4), it didn't work initially but then I removed cache/history (in case DNS info was cached), and then the problem stopped. I didn't have time to test by going back to ISP default DNS to see if issue comes back. I will do it tonight to try to circle item issue and see if the DNS problem is at cache level, at modem level or ISP level.

@7heavens: Thanks for testing! If your DNS cache was poisoned, it may have happened on a network that you don't normally that had a compromised router or server.

I'm not sure how easy it would be to find, but you might look in Settings > Wi-Fi > Known Networks to see if you recognize a recent Wi-Fi network that you might have been on. It could also have happened on a cellular network, although presumably that's less likely if those are maintained by the carriers.

@eleanorinBC: Did you happen to use Wi-Fi on the airplane that you used to fly to Australia? Or did you connect to Wi-Fi networks in any airports on your trip? If you had no issues before the trip, but issues immediately afterwards in Australia, that would point to a compromised network in an airport or perhaps on an airplane.

The challenge is that the network where the DNS is poisoned may "present" normally (and not redirect to goodwebads) while you're connected, then only redirect later on another network (where the poisoned DNS entries are used). (At least that seems like the obvious thing to do if one wants to poison as many devices as possible without being caught right away.)

@ddkilzer I used wifi only in the airports in Vancouver, SFO and Auckland. Once I arrived in Australia I switched out my SIM card to Vodafone, and was using a combination of network and home wifi after that. I don't recall how soon after switching the SIM cards that I started to experience this issue, but very shortly after. Since turning off all cookies, deleting the history and turning off Javascript I was able to use Safari again without issue. Last night I thought to try turning Java back on and allowing all but third party cookies, and touch wood, Safari is still working fine. I'm not a techie, so I've no idea why this happened, or why it seems to be fixed. Just happy it is 🙂

Following tests, it is very likely that it was a DNS issue, but not sure how it happened.

Switching to Google DNS (8.8.8.8, 8.8.4.4) was fixing the issue, and removing it to go back to default was making the issue come back on a specific router I have at home (previous test on other router and 3G were misleadingly providing the same issue probably because of browser DNS cache). A strange thing is that when removing Google DNS, the value of DNS was set to be 31.3.252.87, 31.3.252.71, which could be the poisoned DNS servers. I restarted the router to get new DNS value and all seem to work fine now.

I will track if the issue come back again.

Hello all,

as mentioned before i have 5S iOS 8

On wifi and 3G i got the same redirect when using Safari, Chrome, and even when clicking a link in the Facebook app.

any advice?