Airtel seems to be injecting iframes like MTNL to send bill reminders

Navjot Singh

Admin
Staff member
Messages
20,971
Location
Gurgaon
ISP
Airtel
Airtel seems to have learnt a few lessons from MTNL and is trying to inject iframes into the browsing session to send bill reminders. Has it happened with anyone?

Here is the final HTML that was displayed when I tried to load Hotstar. Hotstar itself didn't load since Airtel tried to load it inside an iframe. It loaded 2 additional iframes one of which was used to display the banner. God knows what the other one does. Net result - Blank page and an annoying banner invading my privacy.

lpMdT4T.png


Source code shown in the browser:
Source

Source code courtsey view source in Browser:
Source
 
Last edited:
Hotstar doesn't operate on https? ?
 
Yeah, not sure why Hotstar doesn't use HTTPS for the public pages, the login and account pages go through HTTPS, but yeah its 2018 and should be 100% HTTPS.
 


Looks like the script is being injected from 202.56.215.243. Can you null route the ip by adding it your hosts file and see if its blocked?
 
Unlike MTNL whose iframes didn't work on HTTPS sites, Airtel's iframe will still work even if the site I am trying to open is Https. It just wraps the url I want to open in an iframe which never loads and loads its own banner on top of it. Same script as above.

Will contact customer support and see what they reply. This is insane.
 

Back