Firefox site call is redirected to scam site
Following site is immediately hijacked to a scam site asking for login apparently to access private info. It happens with Firefox (only) whenever security setups are set "not to track", "not to prompt for passwords", "not to prompt for credit cards" "no history" "reset of cookies at logout" etc.. then the site below: http://thaimassage-herborn.de/ is redirected to SCAM SITE: https://xb7.serverdomain.org/admin/index.php appearing as "Adminpanel" asking for Login etc..
At the same time following site is partially blocked on the news banner pictures, with a white sheet over them, whenever down scroll is hit. https://www.tgrthaber.com.tr/
Only by resetting firefox deals with the issues. But ofcourse with the reason, above security settings removed.
Virusscanner was not able to detect this hijacking or the reason behind.
Is this a firefox software issue? Is there a way to resolve this? Thank you already for any support or suggestions to resolve.
All Replies (8)
Information Update: This problem only happens if "settings" > "privacy and security" > Never Remember History option is selected and as prompted firefox is restarted. Security "Strict" option does not prevent this.
The sites react normal as long as firefox "never remember history" option is not selected. Do you mean the web client checks if this option is selected, if yes then redirects it to "scam" site? In particular they put themselves a banner blank site on their news items. Sorry, but I do not think so. This looks like a Firefox issue. After latest updates this issue has come. These are the only two sites I came across. There must be plenty more such sites.
Thank you for the answer. I'll contact the webmaster from the news agency. This is an issue they should check any way.
Just in case; You may have ad/mal-ware. Further information can be found in this article; https://support.mozilla.org/en-US/kb/troubleshoot-firefox-issues-caused-malware?cache=no
Run most or all of the listed free to use malware scanners. Each works differently. If one program misses something, another may pick it up.
Thank you for this response. I am giving it a try. To be honest however, it is very unlikely that all our PCs regardless with Win10 or Win11 have the same with Firefox and this issue came up with a Firefox update. I am also suspicious about Malware programs, if they themselves become the Malware eventually or create malware to have a better competition and sells. PCs are already protected with BitDefender, it should actually take care of serious issues. One other thing: the symptoms are different. One is to steal information, the other is to block the news and another in common "not to allow someone to block history". This last common issue is perhaps malware and adaware related. Anyway, Malwarebytes appeared to find many issues (!) but did not resolve the problem.
Modified by taskin.sakarya
FredMcD said
Run most or all of the listed free to use malware scanners. Each works differently. If one program misses something, another may pick it up.
You can remove all data stored in Firefox for a specific domain via "Forget About This Site" in the right-click context menu of an history entry ("History -> Show All History" or "View -> Sidebar -> History").
Using "Forget About This Site" will remove all data stored in Firefox for this domain like history and cookies and passwords and exceptions and cache, so be cautious. If you have a password or other data for that domain that you do not want to lose then make sure to backup this data or make a note.
You can't recover from this 'forget' unless you have a backup of involved files.
If you revisit a 'forgotten' website then data for that website will be saved once again.
Thank you for your response. I have tried it. The problem still exists. The main issue is this problem occurs when no history is recorded. I'll run the malware programs and then remove firefox completely and then re-install new again. I suspect, firefox is infected. By re-installation, I suspect the problem will disappear for some time. QUESTION: is this problem observable by your computers too? i.e. just change setting for "Never Remember History" and run the two sites to see if one is redirected and the other has a white banner with down-arrow. If not, it may be a local or server issue here.