BSNL is inserting ads in websites, sending their users to malware sites through malware code injection

[devikasharma265]

@ishan
https:// ibb.co/ 886QHPP

 

[devikasharma265]

That's weird and means that your browser is still making requests over HTTP which should only happen after your intervention otherwise it should only try for HTTPS and succeed since all payment things are https enabled.

No problem with bank site but when it returns to the shopping site after entering otp, this http thing happens to shopping site and payment fails..money will be debit from bank and wont go to shopping site. BSNL!!! Why you do this....

 

[Smh]

Complain on pgportal.
Ask via RTI how to disable this shit. There must be some provision. Also ask about the status of your pgportal complain.

Switch to other isp if possible.

Try simple dns or dns over https in mozilla browser along with https every where extension. VPN should be able to fix this issue if you don't have other isp than bsnl.

 

[Smh]

Complain and use RTI that's the only way. Still always use VPN, bsnl cannot be trusted.

Did u tried https dns with mozilla?

 

[devikasharma265]

Simple dns or https dns in mozila is working so far...so far no ads seen.

 

[ishanjain28]

https:// ibb.co/ kh0VKyB
https:// ibb.co/ 886QHPP

These two screenshots make sense. Since they(BSNL) mitm http traffic, Your browser doesn't see the 301/302 response. It sees the response added by bsnl. Since the site is being accessed over http, You see that warning.

I was more interested in this screenshot, Screenshot-20211224-195705
In this screenshot, You have site open over https and it says that the connection is not secure. What is the certificate offered by the server in that scenario?

 

---

[devikasharma265]

@ ishan .. i am not seeing certificate in that scenario from the menu. . no such option showing up...if i click details, its going to google explaining why connection not secure.

 

[ishanjain28]

@devikasharma265 You won't see that on a website accessed over http.
It only shows up when you are actually accessing a site over https. Try opening, https://imgur.com and see if you still get a security warning.

 

[devikasharma265]

I am getting the warning..even though it shows https but there is no certificate. (Its like we open http site even though mobile chrome shows https, maybe bug? In laptop, chrome shows http only with that warning.)

 

[itachi]

Please post a screenshot again. There should be a way to check for the certificate.