Author Topic: click any link in the speedtest ookla and it redirects to suspicious sites  (Read 10423 times)

0 Members and 1 Guest are viewing this topic.

Offline jraju

  • Poster
  • *
  • Posts: 417
Hi, when i visit and click on speed test ookla supposed to be a global speed test portal , https secured one, i am redirected to suspicious websites.
I do receive alerts of avast , of saving me from possible website attack in the browsed url. But when i click the famous site, nothing and avast allows . But clicking any button redirects to some other sites, unknown sites, alerting you about install java or other popular programs.
Why avast web shield does not protect me from visiting this site.
i could manually avoid. But when avast alerts other sites why not this suspcious sites.

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37585
  • Not a avast user
If you have sites you think should be detected/blocked then report it

How to report  >>  https://forum.avast.com/index.php?topic=14433.msg1289438#msg1289438

Check website for blacklisting here  >>  https://www.virustotal.com/

Check websites for infections here  >>  https://sitecheck.sucuri.net/





Offline jraju

  • Poster
  • *
  • Posts: 417
Hi, Pondus, thanks for the reply.
When i check , by input the  said site, everything is green,
But , when i click it redirects, what would be the issue.
Is it with my service provider dns issue
or others.
when i clicked the links in the site, it certainly redirected to a site to install adobe flash player. I have the latest flash player.
some times to a site, which has no relevance at all
avast smart scan did not find any issues

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37585
  • Not a avast user
You can check for DNS hijack here  >>  https://www.f-secure.com/en/web/home_global/router-checker




If you want a computer check, see instructions here  >>  https://forum.avast.com/index.php?topic=194892.0

scroll down to second picture > Farbar Recovery Scan Tool
follow instructions and attach the two diagnostic logs here





« Last Edit: October 04, 2018, 05:07:08 PM by Pondus »

Offline jraju

  • Poster
  • *
  • Posts: 417
Hi, Pondus;, could you do the router checker test in the site.\I tried so many times, and i get overloaded server message.. I am enclosing the routercheck scan details , that i use for my system.It does not show any kind of attacks.

Offline jraju

  • Poster
  • *
  • Posts: 417
Hi, Pondus, I changed the dns to google and the router check produced the results do you wish to say anything on this

Offline jraju

  • Poster
  • *
  • Posts: 417
Hi, Pondus, see this site is shown as green site by avast online security, whereas it is not

Offline jraju

  • Poster
  • *
  • Posts: 417
Hi, why no reply fromexperts.
can i expect replies from experts or moderators

Offline alanb

  • Poster
  • *
  • Posts: 652
Can you give an example of a link you clicked on (and where it redirected to)?  I'm not having any issues with the site.

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 89219
  • No support PMs thanks
Can you give an example of a link you clicked on (and where it redirected to)?  I'm not having any issues with the site.

That would certainly be a good starting point.

I normally use speedtest.net directly, which as far as I can tell still uses Ookla and like alanb I'm not having any problem at Ookla.com.

If I connect Ookla.com and use the 'Explore Speedtest Applications,' Consumer and then Speedtest.net I can run the test without issue.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.4.6112 (build 24.4.9067.762) UI 1.0.803/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

Offline jraju

  • Poster
  • *
  • Posts: 417
Hi, i enclose one such redirects, but there werre many random sites that it redirects . I will try to enclose the others once f ound the file.
the same site if clicked  also redirected me to
https://naganoadigei.com/p/R458PIonG*uK90No918y2poJy5eGisLzlWsLPrxhByd7mdZZpgxs5jrcrD5SYPFg3q0Brapp4TbB1_9MSAGpPiYi0dfoje7dpRDmY_sxZ4*er9uA1MGZtpnRz8PY03wpTTtOGajZ2j0Bg*PqtuDdaQ
http://fixerinst.com/?h=C3350369-60EC-A247-D60E-8D33CC1E4029&pub_id=120120&sub_id=85D57990-C7D3-11E8-AE2D-435A37EE0266&srcid=23008
http://reacherinst.com/?h=C3350369-60EC-A247-D60E-8D33CC1E4029&pub_id=120120&sub_id=85D57990-C7D3-11E8-AE2D-435A37EE0266&srcid=23008
AND naganodai result is given in annexe. Now if you click you, get session invalid.
The google site link is given below
https://www.google.com/url?sa=t&rct=j&q=&esrc=s&source=web&cd=1&cad=rja&uact=8&ved=2ahUKEwi37emF-fvdAhUE3Y8KHVJeAu8QFjAAegQICBAB&url=http%3A%2F%2Fwww.speedtest.net%2F&usg=AOvVaw0szRo_9l-4_h8tA3oKB8NJ
and it is the first search result in google if you type speedtest net
« Last Edit: October 10, 2018, 03:14:22 PM by jraju »

Offline alanb

  • Poster
  • *
  • Posts: 652
Quote
and it is the first search result in google if you type speedtest net

The attached is what I get.

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37585
  • Not a avast user
Quote
The attached is what I get.
exact same here



@jraju maybe you have a infected computer or router 
https://forum.avast.com/index.php?topic=222458.msg1479158#msg1479158




Offline jraju

  • Poster
  • *
  • Posts: 417
hi, pondus, please see the scan results of my network by wifi inspector

Offline jraju

  • Poster
  • *
  • Posts: 417
Hi, Pondus,
Today, when i click the same speedtest net site, i was redirected to naganoadigei.com, which is having its ip place in netherlands, redirecting further to flipkart website. I think that it is also a fake site.
avast popup alert when the initial site is captured by it as having suspicious characters?
But what about, on clilcking the website, http, if click any link on the opend websites?I think, avast can do wonders in catchng these web redirects also, while it gives alert popup and disables the site.
Here avast give green marks for the site, but clicking the link redirects to suspicious sites.
hope some one give solution to this