Amazon winner pop ups on my iPhone

I believe Lawrence is saying that once you visit the infected website, it is then able to interrupt every website you visit. Since I’m sure none of us can remember which website we were visiting when it first happened, I intend to follow Lawrence’s instructions, and then make note of the website if and when it first appears again. Can’t hurt to try.

This is not helpful and you are not listening. All of us have done the "clear history" and all those steps and it does NOT work.

This happens to me multiple times a day and with multiple websites, including washington post, CNN, fox news, Amazon, and random other sites I go to. So if we want to use an iphone we're saying we have to clear history and website data and restart the phone multiple times a day??? No thanks!

Somebody has figured out a way to seriously compromise the browsing experience on iphones that has now gone viral and affects many common websites. This iphone/safari vulnerability needs to be looked at.

For now I'll research using a different browser, perhaps this is a Safari vulnerability.

"The setting to prevent Cross Site scripting should catch the redirect but it doesn't appear to be working correctly."

Exactly! Someone found a vulnerability in the iphone/safari security and has compromised a number websites with these popups that get around the iphone/safari pop up blocker and script security settings.

Although the fact this occurs on so many sites still leads me to suspect that possibly this is iphone malware. Can someone easily get malware on the sites of so many large fortune 500 companies?

All these "answers" aren't answers at all. This has been happening for awhile on all my Apple devices. It happens on major sites like Forbes, pcmag, yahoo finance, nytimes etc. It started happening on Safari but now it happens on every browser. It doesn't happen on any of my computer's even when I force a mobile version of a site to load. This is an Apple problem and clearing your cache and history does absolutely nothing.

This has made its way into many sites.

It’s also clear that iPhones and possibly all iOS devivces are uniquely vulnerable to this as I never these pop up hijacks on my computer.

Apple needs to close up this vulnerability so that they’re pop up blocker works on it - or at least prevent the hijacking part of it where you can back or close it without closed the browser

No that’s incorrect. While this is malware it clearly exploits a vulnerability associated with safari and iPhone as it does not happen in any other devices or computers. Apple needs to investigate how the safari vulnerability is being exploited.

I got on with apple support they had no information other than to restore as new. I did so and deleted the browser history (which took 2.5 hrs to set up the phone as new) and it came back immediately. disheartened to hear it is also happening on chrome. with out java script many sites do not load properly and are inoperable. this is the second iPhone x i have gotten as prior to this the phone would not notify me of any calls, texts or emails also a known ongoing issue for the new iOS.

There are a few additional settings in the paid version. I did purchase this to keep the developer encouraged to keep up support and development. But I would try playing around with the settings of the basic app first. I’ve never seen this ad either on my phone or iPad. I could post a picture of my settings screen if it would help but I think if you play around with this some you’ll find what works for you.

joiseyg wrote:

Apple needs to step it up and resolve this! Gone on for years! We pay $$$ and this should no longer be happening! 😡

What part of THERE IS NOTHING THAT APPLE CAN DO don't you understand? It isn't just Apple. It happens on Android. It happens on Macs. It happens on Ubuntu and other Linux desktops. It happens on Windows. It happens with Firefox, Chrome, MSIE, Safari, Opera, and every other browser and computer in the world.

Some additional info regarding difference between using http and https:

What is HTTPS:
HTTPS or Secure HTTP some may call it is a combination of Hypertext Transfer Protocol (HTTP) with SSL/TLS protocol. Now everything you communicate over HTTPS will be sent and received in encrypted form, which adds the element of safety.

As when a client makes a request to the server, the server responds by offering a list of encryption methods. When the client connects to a website via HTTPS, the website encrypts the session with a digital certificate. Secure Sockets Layer or SSL uses a cryptographic system that encrypts data with two keys that is browser and server send each other unique codes which are used for encryption for rest of the talk.
Https is used in many situations, such as log-in pages for banking, forms, corporate logins, and other applications in which data needs to be secured. It is always advised to never enter credit card details on websites that run on HTTP.
Difference between HTTP and HTTPS
1) In case of HTTP URL begins with “HTTP://” and for HTTPS connection it is “HTTPS://”
2) HTTP is unsecured on other hand HTTPS is secured.
3) HTTP uses port 80 for communication unlike HTTPS which uses port 443
4) No certificates required for validation in case of HTTP. HTTPS requires SSL Digital Certificate
5) No encryption in HTTP; Data encrypted before sending and receiving in HTTPS.

I have an ad blocker installed... adblock plus and 1Blocker both DO NOT WORK. I have tried ALL methods espoused in this thread and NONE work. Only avoidance of the websites will work...it happens across all browsers.

I have uninstalled all my 'questionable' apps and only have the basic minimum of bank and work apps that have been on my phone for years and it still happens. And you cant block the specific popup website because the popup redirects to tons of different '.club' addresses.

Until apple comes out and says 'do this' or cleans it during a software update, NOTHING works!

Don’t know where the ads are coming from but the address is very long with the website listed on the end. I only had is on one website. I copied and pasted two of them. They were both identical. The website‘s inappropriate ad department seems to have blocked it on their end. I have had no pop ups on the site since. Checked this morning and no pop up ad.

Some have indicated that the free version may not block all that they want. I opted for the paid version, there are some additional settings included, both to make certain it would satisfy me as well as to support the developer who has been really good with support and updates. I like to encourage that, especially for issues like these.

No, it doesn't happen on all sites but yes any of them can be hijacked. Most when notified will remove it. Some in this thread say 1Blocker, (I hope that is right) works, I haven't tried it. The solution is for websites to be vigilant in watching for this and rapidly extinguishing them when they invade...or find a new way to do ads.

So if you are a cyber security professional you should be able to explain this. Right?

And before you cleared the cache and history you did close Safari so it did not return to the last website you visited? Or did you go back to that site? Because that is probably where you picked it up, contact that site.