It is suspected that Google browser has been hijacked. Do you have a similar experience?

from the previous week to now, I found a problem: when the whole network accesses the url address, it always gets stuck somewhere, and the page cannot be loaded. Later, F12 called up the console and found that there was an abnormal js file access. At that time, it was debugging a personal blog deployed on its own server. All the js and css files in the personal blog are stored locally on the server (39.107.xxx.xx is my server IP, because the domain name is still on record, so I use IP to access the transition directly)

but unexpectedly found a request for js outside the chain: http://116.31.119.212:2048/jsqz?s=39.107.xxx.xx/static/js/bootstrap.min.js?tid=00ad15545818&rid=3b81d37c3935 status:faild type:javascript

request details:

General:
Request URL: http://116.31.119.212:2048/jsqz?s=39.107.xxx.xx/static/js/bootstrap.min.js?tid=00ad15545818&rid=3b81d37c3935

Request Header:
Provisional headers are shown Referer: http://39.107.xxx.xx/ User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.81 Safari/537.36 Referrer Policy: no-referrer-when-downgrade

Query String Parameters
s: 39.107.xxx.xx/static/js/bootstrap.min.js?tid=00ad15545818 rid: 3b81d37c3935

browser version: Google browser has been updated to the latest version (10th anniversary version)
and then I have the intention to take a look at other websites. After visiting all the other sites, large and small, the general card owner will not come out, but the ctrl+F5 will be normal once, and the request will disappear.

the first time I encountered such a situation, I felt too weird and uncomfortable. At first, I suspected the problem of the js file on my server. I changed the js file of jQ to a mirror image of Baidu. The file access of jQ was not abnormal, but the js of bootstrap began to visit outside the chain again. In the end, though? The latter parameter is directed to the correct address, but it is always failed!

is it:
A virus in a computer? The browser was hijacked? DNS problem? Problems with local cache files?

PS, A few days ago, I found out through the search engine that the IP address belonged to a server called 5T computer room. IP, called their service number to see if they were clear, but the person who answered the phone said it was not their business.

At first, I suspected it was the Google plug-in, but then I paused all the Google plug-ins and asked for a cache. Worry

Jun.08,2021

most of the cases in mainland China are PUSH advertisements placed by operators or their agents. Because you provide too little information, it is impossible to make an accurate judgment here.

you can hang up overseas VPN for testing. If there is no problem, 99% can be judged to be PUSH ads.
there are many solutions on the Internet, such as

  1. call the operator to complain and ask to cancel the ad push.
  2. complain to the Ministry of Industry and Information Technology (need screenshot, source code and other evidence)

Carrier http traffic hijacking. You can call 10000 complaints or HTTPS


visit the https site or use ip to visit your website. If there is no such problem, it should be dns hijacking


first learn to check the problem. In operation, using IIS7 website monitoring is completely possible to find out whether the website has been hijacked in advance. Once you find it the first time, it is much more convenient to remedy it.
1. Use the IIS7 website monitoring tool to go to the official website of IIS7 webmaster Home, click "website Monitoring" in the upper right corner of the home page,
2, enter the domain name of the website you need to test, click "submit Test",
3, and view the test results. We can see whether the website has been hijacked, whether the domain name has been walled, DNS pollution detection, website opening speed detection, whether the website has been hacked, hacked, changed title, hacked and other information.
4. Check whether each item detected is in line with your website and whether it is normal.

Menu