Bigpipe DNS cache pollution?

Forums › Spark New Zealand (including Skinny and BigPipe) › Bigpipe DNS cache pollution?

zks

9 posts

Wannabe Geek

#250642 20-May-2019 12:49

Hi guys,

I am using Bigpipe, and there are some phishing windows poped up on my devices without touching/ clicking any link.

Does anyone find similar problem as well?

I have ever setup DNS server manually but unfortunately some site could not be resolve very well. so I changed back to Bigpipe default DNS.

Now some ads windows pop up even no phishing window so far.

I am afraid Bigpipe DNS got cache pollution or something but Bigpipe says there is no problem at all ,and no one else find same problem.

1 | 2

11434 posts

Uber Geek

Trusted

Lifetime subscriber

#2241362 20-May-2019 12:50

What device are you using?

zks

9 posts

Wannabe Geek

#2241366 20-May-2019 12:57

iPhone, iPad, TV box, windows laptop ...

xpd

Geek @ Coastguard NZ
13769 posts

Uber Geek

Retired Mod

ID Verified

Trusted

Lifetime subscriber

#2241367 20-May-2019 13:01

Nope, not had any issues here.

Gavin / xpd / FastRaccoon / Geek of Coastguard New Zealand

LinkTree

zks

9 posts

Wannabe Geek

#2241374 20-May-2019 13:08

That's good, thank you for reply

Lias

5589 posts

Uber Geek

ID Verified

Trusted

Lifetime subscriber

#2241567 20-May-2019 15:16

Router compromised?

I'm a geek, a gamer, a dad, a Quic user, and an IT Professional. I have a full rack home lab, size 15 feet, an epic beard and Asperger's. I'm a bit of a Cypherpunk, who believes information wants to be free and the Net interprets censorship as damage and routes around it. If you use my Quic signup you can also use the code R570394EKGIZ8 for free setup.

zks

9 posts

Wannabe Geek

#2241577 20-May-2019 15:24

Lias:

Router compromised?

I thinks this possibility is very low.

btw, after I changed DNS server of my router, phishing pop up disappeared. Although I got new problems...

wratterus

1687 posts

Uber Geek

#2241582 20-May-2019 15:31

No issues here either - I was also going to suggest that your router has been compromised somehow. If you are still having other issues, possibly backup the config and reset the router, re-configure at a basic level and see if you still have the issues?

Sharesies

Trade NZ and US shares and funds with Sharesies (affiliate link).

zks

9 posts

Wannabe Geek

#2241603 20-May-2019 15:52

wratterus:

No issues here either - I was also going to suggest that your router has been compromised somehow. If you are still having other issues, possibly backup the config and reset the router, re-configure at a basic level and see if you still have the issues?

Thanks for reply, I just changed to a new router with default&basic Bigpipe config.

No phishing so far, but got many disturbing ads on the same website. I have been accessing it for a while, there was no these ads before. They appear right after I changed my router.

Below is the story:

Moved to Bigpipe, was good for quite a while
Phishing appeared one day
Phishing appeared more, Bigpipe said "everything is GOOD"
Changed DNS server instead of using Bigpipe default DNS, no phishing for a while.
got some problems accessing some website/server, Bigpipe said "everything is GOOD"
no ads on a website
changed router with basic/default bigpipe config, 5 fixed
disturbing ads appear on the website of 6, Bigpipe said "everything is GOOD" - now

wratterus

1687 posts

Uber Geek

#2241611 20-May-2019 15:54

Are you sure this particular website has not been compromised somehow? What if you view the site from a mobile phone on data?

zks

9 posts

Wannabe Geek

#2241626 20-May-2019 16:11

wratterus:

Are you sure this particular website has not been compromised somehow? What if you view the site from a mobile phone on data?

In theory, I have to say this possibility exists. But the ads appear right after I changed the router, I don't think it's just a coincidence.

Any way thank you for your idea, I will try it by another connection.

freitasm

BDFL - Memuneh
79309 posts

Uber Geek

Administrator

ID Verified

Trusted

Geekzone

Lifetime subscriber

#2241627 20-May-2019 16:13

Could you please PM the site to me?

zks

9 posts

Wannabe Geek

#2242021 21-May-2019 08:10

freitasm:

Could you please PM the site to me?

Thank you very much, my friend has tested it for me, no ads for the website.

I tested the website again last night, ads still there.

maybe I should try another router or reset it to see what'll happen.

freitasm

BDFL - Memuneh
79309 posts

Uber Geek

Administrator

ID Verified

Trusted

Geekzone

Lifetime subscriber

#2242026 21-May-2019 08:19

It is gotta be the router if all devices are affected. Also suggest using a PC never connected to the network to setup router as o e of your PC might be infected and corrupting the router.

Make sure to change the admin password. And scan all your Windows and/or Mac computers around.

zks

9 posts

Wannabe Geek

#2242042 21-May-2019 08:51

freitasm: It is gotta be the router if all devices are affected. Also suggest using a PC never connected to the network to setup router as o e of your PC might be infected and corrupting the router.

Make sure to change the admin password. And scan all your Windows and/or Mac computers around.

Thank you very much for your advice, it's very helpful.

I will try my other router first as I got spare one, that'll be easier.

I suppose iPhone/iPad is hard to get infected?

freitasm

BDFL - Memuneh
79309 posts

Uber Geek

Administrator

ID Verified

Trusted

Geekzone

Lifetime subscriber

#2242048 21-May-2019 09:03

Yes but keep other computers off until password changed.

1 | 2