Sometimes you will find that when you are surfing the Internet normally, advertisements pop up inexplicably, and these advertisements do not seem to be on the website. Congratulations, the local DNS has been hijacked, and it may be hijacked by the operator.

The author has been deeply disturbed recently. The symptom is that no matter what web page I open, there is a certain probability that the "click pop-up" advertisement will be loaded, which is a seemingly normal page. No matter where I click, a new advertisement page will pop up. Viewing the elements of Development Tools, we can see that the original website is embedded in<iframe>and wrapped with a link. It is found that this IP address (125.86.69.15) is the IP address of Zhuhai Telecom. Obviously, my DNS was hijacked.

Why do operators hijack our DNS? Of course, it is profitable. It is said that in this black industry, the daily revenue of hijacked users is in six figures. Naturally, operators in some places want to make a profit. At present, the domestic supervision in this area is obviously not very effective, so it gives many black heart operators an opportunity to take advantage of it.

The common symptom of DNS hijacking is that users are introduced to abnormal pages, such as advertising package websites (in the case of the author); Error correction navigation (most of them are operator pages and contain advertisements); Advertising page (the most abominable and shameless)

The reason is that the default DNS of the operator is used, because the computer of the author automatically obtains the DNS server, which is their recruit.

resolvent:

The most direct and effective way is to replace the local DNS server. The author recommends using AliDNS 223.5.5.5 and the standby 223.6.6.6. The setting method is Control Panel - Network and Sharing Center - Change Adapter Settings - Select the corresponding network connection - Right click Properties - Internet Protocol Version 4 (TCP/IPv4) - Right click Properties - Use the following DNS server - OK

A friend said that calling to complain was another way, but they had to negotiate with the customer service. They could not easily admit that they had hijacked users, so they changed the local DNS once and for all.