F5F Stay Refreshed Power Users Networks Checking for issues with my network. Some sites are redirecting me to phishing pages on all devices.

Checking for issues with my network. Some sites are redirecting me to phishing pages on all devices.

Checking for issues with my network. Some sites are redirecting me to phishing pages on all devices.

Pages (2): 1 2 Next
P
pieter1985
Member
76
03-23-2023, 06:57 PM
#1
It seems your network has been taken over to send users to fake Amazon sites. This is impacting the mobile app and making it hard to remove. I’ve changed my router settings and set a new password for TP-Link. I ran thorough scans with Norton, Malwarebytes, AdwCleaner, and Hitmanpro, but nothing came up. The issue also blocks Netflix apps, likely because they’re redirected through the hijacked site. Any suggestions on how to resolve this?
P
pieter1985
03-23-2023, 06:57 PM #1

It seems your network has been taken over to send users to fake Amazon sites. This is impacting the mobile app and making it hard to remove. I’ve changed my router settings and set a new password for TP-Link. I ran thorough scans with Norton, Malwarebytes, AdwCleaner, and Hitmanpro, but nothing came up. The issue also blocks Netflix apps, likely because they’re redirected through the hijacked site. Any suggestions on how to resolve this?

A
Atom_Baer_
Member
55
04-02-2023, 11:48 AM
#2
Noted, this could have been shared in Troubleshooting instead. Apologies for the oversight.
A
Atom_Baer_
04-02-2023, 11:48 AM #2

Noted, this could have been shared in Troubleshooting instead. Apologies for the oversight.

K
K_Min_
Junior Member
2
04-02-2023, 12:07 PM
#3
Great! Please share a screenshot of the redirect page. It might indicate a local DNS issue, a malicious access point attempting to capture your login details, or a virus on your device. The site could also be compromised at the server level.
K
K_Min_
04-02-2023, 12:07 PM #3

Great! Please share a screenshot of the redirect page. It might indicate a local DNS issue, a malicious access point attempting to capture your login details, or a virus on your device. The site could also be compromised at the server level.

S
Soul_Bound
Junior Member
19
04-02-2023, 12:35 PM
#4
I only realized it was a virus after it started redirecting me to verify my credit card. It blocks Chrome but works on Safari, which I thought might be the problem. In reality, Safari has much weaker security and leads to a phishing site that tricks me into entering my social security number. It seems the threat is tied to my personal network, not my business or mobile hotspot. I’m unsure how to remove it completely or trace its origin. I should mention that the issue appears only when connected to my home network, not other connections. If you want, I can help you check your network settings for possible changes.
S
Soul_Bound
04-02-2023, 12:35 PM #4

I only realized it was a virus after it started redirecting me to verify my credit card. It blocks Chrome but works on Safari, which I thought might be the problem. In reality, Safari has much weaker security and leads to a phishing site that tricks me into entering my social security number. It seems the threat is tied to my personal network, not my business or mobile hotspot. I’m unsure how to remove it completely or trace its origin. I should mention that the issue appears only when connected to my home network, not other connections. If you want, I can help you check your network settings for possible changes.

L
Lord_Whis
Member
70
04-06-2023, 10:24 AM
#5
Verify the DHCP settings related to DNS on your router.
L
Lord_Whis
04-06-2023, 10:24 AM #5

Verify the DHCP settings related to DNS on your router.

S
Serilium
Member
183
04-06-2023, 02:42 PM
#6
Check your TP Link device and the DNS settings on your router. The '5.2.64.158' is set as primary, but you may need to update or modify it if necessary.
S
Serilium
04-06-2023, 02:42 PM #6

Check your TP Link device and the DNS settings on your router. The '5.2.64.158' is set as primary, but you may need to update or modify it if necessary.

M
Morphire
Member
244
04-06-2023, 10:52 PM
#7
You can adjust the settings later. Check your router's model to determine which one you're using.
M
Morphire
04-06-2023, 10:52 PM #7

You can adjust the settings later. Check your router's model to determine which one you're using.

S
Siren1968
Junior Member
47
04-07-2023, 12:06 AM
#8
Also noted, the DNS servers your ISP offers appear to be vulnerable unless you configure them yourself—this doesn’t seem like an action you took!
S
Siren1968
04-07-2023, 12:06 AM #8

Also noted, the DNS servers your ISP offers appear to be vulnerable unless you configure them yourself—this doesn’t seem like an action you took!

D
DoctorMadcow
Member
201
04-07-2023, 12:13 AM
#9
You're experiencing issues with your TP-Link Archer C3200 where changing DNS settings doesn't take effect, and the problematic DNS persists. It's possible the device has been compromised in some way.
D
DoctorMadcow
04-07-2023, 12:13 AM #9

You're experiencing issues with your TP-Link Archer C3200 where changing DNS settings doesn't take effect, and the problematic DNS persists. It's possible the device has been compromised in some way.

D
Daang_itsNat
Junior Member
24
04-10-2023, 01:22 PM
#10
It stays where it is—on the device (iPad, Laptop, etc.) or on the router? Please share screenshots of the router if you need more details.
D
Daang_itsNat
04-10-2023, 01:22 PM #10

It stays where it is—on the device (iPad, Laptop, etc.) or on the router? Please share screenshots of the router if you need more details.

Pages (2): 1 2 Next