Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.
Dismiss

url redirected in chrome/chromium, but working fine, according to ping/traceroute, lynx, w3m, iceweasel.

122 views
Skip to first unread message

Tony Baldwin

unread,
Oct 7, 2016, 2:10:05 PM10/7/16
to
I have a little business card website up for my big brother's media
consulting side-business at http://playomatic.myownsite.me.
Now, at the moment, if I try to load it in Google-Chrome-Stable, I'm
getting redirected to a yahoo! search for "create web",
If I try to load it in the floss chromium, I get a spammy landing page,
But in all of Iceweasel, lynx, w3m, elinks it loads fine, and nothing
has changed on my server (no redirect added to my vhost by an intruder
or any such thing), also neither ping nor traceroute seem to indicate
anything untoward or fishy.
The only thing I haven't tried is Epiphany, Konqueror, Safari, or IE.
Oddly, it seems to work fine in chrome on my android phone, though.

How can I determine what's interfering with this page loading in some
browsers, and not others? or what's redirecting my traffic, and how I
can stop it or prevent future re-occurrence?

tia
tony

--
http://tonybaldwin.me
all tony, all the time

Anthony Baldwin

unread,
Oct 7, 2016, 2:30:04 PM10/7/16
to
I can now also verify that the page loads fine n Dolphin browser on my
android device.
http://www.baldwinlinguas.com
translations, localization,
multilingual web development
EN, ES, FR, PT

claude juif

unread,
Oct 7, 2016, 2:40:03 PM10/7/16
to
2016-10-07 20:04 GMT+02:00 Anthony Baldwin <baldwin...@gmx.com>:
I can now also verify that the page loads fine n Dolphin browser on my android device.

On 10/07/2016 02:00 PM, Tony Baldwin wrote:
I have a little business card website up for my big brother's media
consulting side-business at http://playomatic.myownsite.me.
Now, at the moment, if I try to load it in Google-Chrome-Stable, I'm
getting redirected to a yahoo! search for "create web",
If I try to load it in the floss chromium, I get a spammy landing page,
But in all of Iceweasel, lynx, w3m, elinks it loads fine, and nothing
has changed on my server (no redirect added to my vhost by an intruder
or any such thing), also neither ping nor traceroute seem to indicate
anything untoward or fishy.
The only thing I haven't tried is Epiphany, Konqueror, Safari, or IE.
Oddly, it seems to work fine in chrome on my android phone, though.

Hi, it works well in my Chrome Browser.

May be you have some proxy between, or a misconfigured /etc/hosts entry.

Did you try to load it with all plugins disabled ?

Anthony Baldwin

unread,
Oct 7, 2016, 3:50:04 PM10/7/16
to


On 10/07/2016 02:32 PM, claude juif wrote:
>
>
> 2016-10-07 20:04 GMT+02:00 Anthony Baldwin <baldwin...@gmx.com
> <mailto:baldwin...@gmx.com>>:
>
> I can now also verify that the page loads fine n Dolphin browser on
> my android device.
>
> On 10/07/2016 02:00 PM, Tony Baldwin wrote:
>
> I have a little business card website up for my big brother's media
> consulting side-business at http://playomatic.myownsite.me.
> Now, at the moment, if I try to load it in Google-Chrome-Stable, I'm
> getting redirected to a yahoo! search for "create web",
> If I try to load it in the floss chromium, I get a spammy
> landing page,
> But in all of Iceweasel, lynx, w3m, elinks it loads fine, and
> nothing
> has changed on my server (no redirect added to my vhost by an
> intruder
> or any such thing), also neither ping nor traceroute seem to
> indicate
> anything untoward or fishy.
> The only thing I haven't tried is Epiphany, Konqueror, Safari,
> or IE.
> Oddly, it seems to work fine in chrome on my android phone, though.
>
>
> Hi, it works well in my Chrome Browser.
>
> May be you have some proxy between, or a misconfigured /etc/hosts entry.
>
> Did you try to load it with all plugins disabled ?

Thanks,
I use no proxy/ies, neither at home, nor on the remote server.
My brother, who brought the matter to my attention was also using chrome
. disabling my extensions doesn't seem to make any difference.
There appears no mention of the url in any of my hosts files (neither at
home, nor on the server), nor anything that would redirect the IP
address, since I can load other sites on the same server (and the
myownsite.me domain) without troubles.
What else can I do?

davi...@freevolt.org

unread,
Oct 7, 2016, 6:50:03 PM10/7/16
to
This problem sounds bizarre to me.

One less-than-obvious conceivable factor that occurs to me is that
some webmail interfaces (looking at you, gmx.com) will point urls in
email text at creepy redirects (presumably so that your email provider
can log what you read).

For example, a link labeled

http://playomatic.myownsite.me

will point to

https://deref-gmx.com/mail/client/[Some-Alpha-Numeric-Code]/dereferrer/?redirectUrl=http%3A%2F%2Fplayomatic.myownsite.me

If one of those redirects happens to be broken, through no fault of
yours, then following such links in emails might result in unexpected
behaviour not unlike what you are seeing.

A shot in the dark, for what its worth.

davi...@freevolt.org

unread,
Oct 7, 2016, 7:00:04 PM10/7/16
to
My point here, which I may not have made clear, is that when you test
the site in each browser, make sure you are really requesting
http://playomatic.myownsite.me, not the redirect some email provider
may have replaced it with.

Anthony Baldwin

unread,
Oct 7, 2016, 10:10:03 PM10/7/16
to


On 10/07/2016 06:42 PM, davi...@freevolt.org wrote:
> On Fri, 7 Oct 2016, Tony Baldwin wrote:
>
>> I have a little business card website up for my big brother's media
>> consulting side-business at http://playomatic.myownsite.me.
>> Now, at the moment, if I try to load it in Google-Chrome-Stable, I'm
>> getting redirected to a yahoo! search for "create web",
>> If I try to load it in the floss chromium, I get a spammy landing page,
>> But in all of Iceweasel, lynx, w3m, elinks it loads fine, and nothing
>> has changed on my server (no redirect added to my vhost by an intruder
>> or any such thing), also neither ping nor traceroute seem to indicate
>> anything untoward or fishy.
>> The only thing I haven't tried is Epiphany, Konqueror, Safari, or IE.
>> Oddly, it seems to work fine in chrome on my android phone, though.
>>
>> How can I determine what's interfering with this page loading in some
>> browsers, and not others? or what's redirecting my traffic, and how I
>> can stop it or prevent future re-occurrence?
>
> This problem sounds bizarre to me.
>
> One less-than-obvious conceivable factor that occurs to me is that
> some webmail interfaces (looking at you, gmx.com) will point urls in
> email text at creepy redirects (presumably so that your email provider
> can log what you read).

But I'm typing the url directly into the browser, and not clicking on a
link in an e-mail.
Also, when I sign out of chrome/chromium-sync, it works fine again. so
yeah, definitely something very odd going on.
>
> For example, a link labeled
>
> http://playomatic.myownsite.me
>
> will point to
>
> https://deref-gmx.com/mail/client/[Some-Alpha-Numeric-Code]/dereferrer/?redirectUrl=http%3A%2F%2Fplayomatic.myownsite.me
>
>
> If one of those redirects happens to be broken, through no fault of
> yours, then following such links in emails might result in unexpected
> behaviour not unlike what you are seeing.
>
> A shot in the dark, for what its worth.
>

claude juif

unread,
Oct 8, 2016, 11:30:03 AM10/8/16
to
Can you use the chrome developper tools to see what's going on ? (Press the F12 key while chrome is open) Select the network tab, and type the url in your address bar.
The network panel should show you what happens

Tony Baldwin

unread,
Oct 8, 2016, 11:40:04 AM10/8/16
to


On 10/08/2016 11:28 AM, claude juif wrote:
>
> 2016-10-08 3:53 GMT+02:00 Anthony Baldwin <baldwin...@gmx.com
> <mailto:baldwin...@gmx.com>>:
>
>
>
> On 10/07/2016 06:42 PM, davi...@freevolt.org
> <http://gmx.com>) will point urls in
> email text at creepy redirects (presumably so that your email
> provider
> can log what you read).
>
>
> But I'm typing the url directly into the browser, and not clicking
> on a link in an e-mail.
> Also, when I sign out of chrome/chromium-sync, it works fine again.
> so yeah, definitely something very odd going on.
>
>
> For example, a link labeled
>
> http://playomatic.myownsite.me <http://playomatic.myownsite.me>
> <https://deref-gmx.com/mail/client/%5BSome-Alpha-Numeric-Code%5D/dereferrer/?redirectUrl=http%3A%2F%2Fplayomatic.myownsite.me>
>
>
> If one of those redirects happens to be broken, through no fault of
> yours, then following such links in emails might result in
> unexpected
> behaviour not unlike what you are seeing.
>
> A shot in the dark, for what its worth.


As soon as I type in the url, it goes to
http://bridge.sf.admarketplace.net/bounce?click_id=1475940640200100010&m_width=1680&m_height=1050&b_width=624&b_height=860&b_top=5&b_left=33&in_iframe=0
whereas traceroute shows it going to my modem-> a local hub-> Comcast's
DNS server in Boston, then to New York, then jumping to Frankfurt ->
Munich, then the server I rent from Contabo which is in Munich, afaik.

Thanks,
Tony

Tony Baldwin

unread,
Oct 8, 2016, 11:40:05 AM10/8/16
to


On 10/08/2016 11:28 AM, claude juif wrote:
>
> 2016-10-08 3:53 GMT+02:00 Anthony Baldwin <baldwin...@gmx.com
> <mailto:baldwin...@gmx.com>>:
>
>
>
> On 10/07/2016 06:42 PM, davi...@freevolt.org
> <http://gmx.com>) will point urls in
> email text at creepy redirects (presumably so that your email
> provider
> can log what you read).
>
>
> But I'm typing the url directly into the browser, and not clicking
> on a link in an e-mail.
> Also, when I sign out of chrome/chromium-sync, it works fine again.
> so yeah, definitely something very odd going on.
>
>
> For example, a link labeled
>
> http://playomatic.myownsite.me <http://playomatic.myownsite.me>
> <https://deref-gmx.com/mail/client/%5BSome-Alpha-Numeric-Code%5D/dereferrer/?redirectUrl=http%3A%2F%2Fplayomatic.myownsite.me>
>
>
> If one of those redirects happens to be broken, through no fault of
> yours, then following such links in emails might result in
> unexpected
> behaviour not unlike what you are seeing.
>
> A shot in the dark, for what its worth.
>
>
>
> Can you use the chrome developper tools to see what's going on ? (Press
> the F12 key while chrome is open) Select the network tab, and type the
> url in your address bar.
> The network panel should show you what happens

That doesn't seem to tell me anything traceroute doesn't, except
trqacerout doesn't get redirect to a Yahoo! search like chrome does,
but nothing I see there seems ot clarify WHY or HOW it's getting
redirected, it's just showing me that it IS being led though some
circolocuitous route to where it should not.

>
>
>
>
>
> --
> http://www.baldwinlinguas.com
> translations, localization,
> multilingual web development
> EN, ES, FR, PT
>
>

to...@tuxteam.de

unread,
Oct 8, 2016, 2:10:03 PM10/8/16
to
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Sat, Oct 08, 2016 at 11:35:21AM -0400, Tony Baldwin wrote:

[...]

> >Can you use the chrome developper tools to see what's going on ? (Press
> >the F12 key while chrome is open) Select the network tab, and type the
> >url in your address bar.
> >The network panel should show you what happens
>
> That doesn't seem to tell me anything traceroute doesn't, except
> trqacerout doesn't get redirect to a Yahoo! search like chrome does,
> but nothing I see there seems ot clarify WHY or HOW it's getting
> redirected, it's just showing me that it IS being led though some
> circolocuitous route to where it should not.

A shot in the dark, but worth a try anyway: IPV4 vs IPV6?

But I'd rather suspect Chrome doing something weird to the URL before
resolving (or -- who knows! having its own built-in resolver).

Perhaps looking at the traffic with tcpdump/wireshark can give you
an idea.

Regards
- -- tomás
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)

iEYEARECAAYFAlf5NeoACgkQBcgs9XrR2kZ+PQCeOsGFniEXtN/uNxh7xpHmc5jg
SG0AmgMz751oR58+BwBJEKN5RP60UsGK
=NsR2
-----END PGP SIGNATURE-----

Richard Hector

unread,
Oct 9, 2016, 7:20:04 AM10/9/16
to
On 08/10/16 07:00, Tony Baldwin wrote:
> I have a little business card website up for my big brother's media
> consulting side-business at http://playomatic.myownsite.me.
> Now, at the moment, if I try to load it in Google-Chrome-Stable, I'm
> getting redirected to a yahoo! search for "create web",
> If I try to load it in the floss chromium, I get a spammy landing page,

This is probably a long shot ... is it a recent chrome/chromium? It
seems to work fine for me in jessie.

Just wondering if it sees a url that doesn't start with www, and ends
with a slightly unusual '.me', and tries to 'autocorrect'. But .me is a
country code TLD, not one of the new ones as I first thought, so it
shouldn't be that.

Richard

Tony Baldwin

unread,
Oct 9, 2016, 7:30:04 AM10/9/16
to
my chromium is Version 53.0.2785.113 Built on 8.5, running on Debian 8.5
(64-bit)
and my chrome is google's latest stable install within this past week,
two weeks at most . Version53.02785.143 (64-bit)

What country is .me? here in th US, of course, it could be the State of
Maine.

Tony

Richard Hector

unread,
Oct 9, 2016, 7:30:04 AM10/9/16
to
On 10/10/16 00:20, Tony Baldwin wrote:
> What country is .me? here in th US, of course, it could be the State of
> Maine.

Montenegro, apparently. According to a quick web search ;-)

Richard

Tony Baldwin

unread,
Oct 9, 2016, 7:30:04 AM10/9/16
to
Thanks, I was curious, couldn't think of anything, all the Ms I could
think of were thins like Maroc, Moçambique, Macao, and the like, where
.ma, .mc, .mo, or some such think would make more sense.
I kind of think Montenegro should be .Mn, really (or that for the US
stat of Minnesota).

Lars Noodén

unread,
Oct 9, 2016, 7:40:04 AM10/9/16
to
The complete list is all in ISO-3166. It has two-letter codes as well
as three-letter codes. ISO 639, in contrast, covers languages. I'd
seen some sites mix them up.

Regards,
Lars

Richard Hector

unread,
Oct 9, 2016, 7:40:04 AM10/9/16
to
That's Mongolia :-)

It appears that Montenegro only came into existence (most recently) in
2006 - it was part of Yugoslavia, then 'Serbia and Montenegro'. So all
the 'good' codes were presumably taken.

I'm looking here:
http://www.domainsherpa.com/country-code-top-level-domains/

But we're getting a bit off-topic :-)

Richard

Tony Baldwin

unread,
Oct 9, 2016, 9:10:04 AM10/9/16
to


On 10/09/2016 07:36 AM, Richard Hector wrote:
> On 10/10/16 00:28, Tony Baldwin wrote:

>
> But we're getting a bit off-topic :-)
>
> Richard
>

Indeed we are, but I thank you for humoring my curiosity.
Thanks,

claude juif

unread,
Oct 9, 2016, 12:00:05 PM10/9/16
to
Are you logged in with a google account on that chrome/chromium ? By the way, how did you install them ?

To resume : 
On your debian computer, only for this website, you get redirect to ads only with chrome/chromium ?

I would try these : 

purge chromium and chrome.
Install chromium and go to your website. (do not log in before).

The only things i can think of is broken extension. I've never see this happening, it's really strange. If that happens on windows i would have say, search for malware and delete them.


Joe Pfeiffer

unread,
Oct 9, 2016, 12:20:03 PM10/9/16
to
Richard Hector <ric...@walnut.gen.nz> writes:
>
> It appears that Montenegro only came into existence (most recently) in
> 2006 - it was part of Yugoslavia, then 'Serbia and Montenegro'. So all
> the 'good' codes were presumably taken.

I'd imagine .me would, like .tv (Tuvalo) be one that a small country
could use to bolster their income quite a bit...

Tony Baldwin

unread,
Oct 9, 2016, 3:10:03 PM10/9/16
to
On 10/09/2016 11:54 AM, claude juif wrote:
Are you logged in with a google account on that chrome/chromium ? By the way, how did you install them ?

I WAS logged into my google account when I had the problem,  in fact, but eventually determined that when I logged out, I could load the proper page for the url, oddly.
I installed chromium with aptitude, google-chrome-stable by downloading google's .deb pkg and doing sudo dpkg -i $said-google-pkg.deb


To resume : 
On your debian computer, only for this website, you get redirect to ads only with chrome/chromium ?

That is correct, Iceweasel, w3m, lynx and e-links all load the proper page/site.
Chrome and dolphin on my android phone do fine, as well, but apparently chrome on iOS (what my brother was using when he found the problem), does not.

rhkr...@gmail.com

unread,
Oct 9, 2016, 4:30:04 PM10/9/16
to
I'm not the OP, and I'm sort of piggybacking and going somewhat (or a lot?)
OT, but I am curious about how old inet4 (right term?) and the new inet6
addresses interact.

When I do ifconfig, I see that eth0 has both a 32 bit (e.g., 192.168.1.19) and
an inet6 address assigned.

Can anybody point me to a fairly short document that explains things like
which gets used under what circumstances, does one have precedence over the
other, do they both use DNS, and similar things which might let me make sense
of the situation?

Anthony Baldwin

unread,
Oct 10, 2016, 1:30:04 PM10/10/16
to


On 10/09/2016 04:23 PM, rhkr...@gmail.com wrote:
> I'm not the OP, and I'm sort of piggybacking and going somewhat (or a lot?)
> OT, but I am curious about how old inet4 (right term?) and the new inet6
> addresses interact.
>
> When I do ifconfig, I see that eth0 has both a 32 bit (e.g., 192.168.1.19) and
> an inet6 address assigned.
>
> Can anybody point me to a fairly short document that explains things like
> which gets used under what circumstances, does one have precedence over the
> other, do they both use DNS, and similar things which might let me make sense
> of the situation?

Don't hijack another thread, send a new mail with an appropriate subject
line like the one on this message. That way you're more likely to get
the help you need, and it's just proper list edicate.

Good luck
tony (OP of the thread you tried to hijack)

Andy Smith

unread,
Oct 11, 2016, 10:40:04 PM10/11/16
to
Hi rhkramer,

On Sun, Oct 09, 2016 at 04:23:45PM -0400, rhkr...@gmail.com wrote:
> I'm not the OP, and I'm sort of piggybacking and going somewhat (or a lot?)
> OT,

In that case it would be good to change the subject of the email.
I've done so here.

> but I am curious about how old inet4 (right term?) and the new
> inet6 addresses interact.

As the address family for IPv4 is "inet" (vs "inet6"), you could say
"inet", but then it may not be so obvious that you were intending to
make a distinction between IPv4 and IPv6. So, perhaps "inet4" is not
so bad, or IPv4. Some go as far as to say "legacy". :)

> When I do ifconfig, I see that eth0 has both a 32 bit (e.g., 192.168.1.19) and
> an inet6 address assigned.

On Linux, it would be best to get used to using the "ip" command
rather than "ifconfig". Issuing an "ip address" command will get you
all the configured addresses of the various families.

> Can anybody point me to a fairly short document that explains things like
> which gets used under what circumstances

If we restrict the domain of this question to source address
selection then reading around from this point may help:

http://linux-ip.net/html/routing-saddr-selection.html

> does one have precedence over the other,

Clearly if there is just one inet address and one inet6 address,
then which will be chosen depends on which family the destination
address comes from. i.e., if the destination is an inet6 address
then the source address will have to be an inet6 address as well,
otherwise no communication will be possibleน.

If the destination address has been directly specified then that's
simple enough to predict.

Usually though, we are just dealing with host names that we wish to
communicate with. A host name is going to be presented to the
system's hostname resolution system, which may return a result from
/etc/hosts or some other database. More usually though it's going to
go out to DNS.

The DNS may contain both A (IPv4) and AAAA (IPv6) addresses with no
regard as to whether the client actually has a source address of the
matching family. That is, if you had a host with only inet6
addresses and you did a DNS query, you would still receive A records
as answers. If amongst the answers there were no AAAA records then
you'd have no way to communicate with the destination when the
application tried to do that.

It's the getaddrinfo() function of GNU libc that decides which
destination address to select for use. You can find more details
about that with "man getaddrinfo".

By default, if there are both inet and inet6 family addresses to
choose from, getaddrinfo will choose the inet6 one. So, if your host
has at least one configured global inet6 address then your
applications will tend to try to connect to inet6 destination
addresses, where available.

You can configure getaddrinfo's address selection in /etc/gai.conf.
A very common desire is to prefer inet addresses over inet6 ones,
and so on Debian the configuration required to do that is shown in
/etc/gai.conf commented out.

An application can be told to use a specific source address, but it
is more common for applications to be allowed to use any address. In
that case for inet it will generally be a reasonably simple case of
using the routing table to determine which source address is
"closest" to the destination.

For example, suppose you have an interface that has the addresses
192.168.1.1/24 and 192.168.1.175/25 on it. When attempting to
communicate with 192.168.1.180 the routing table will show that this
is in the same network as 192.168.1.175/25 and that that is the most
specific address.

When it comes to inet6 it can get a bit more complicated, especially
as it is much more common to have several inet6 addresses, and
you've got whole new concepts like privacy addresses and deprecated
addresses. But, it's all covered by RFC 6724, and this may help as a
summary:

http://biplane.com.au/blog/?p=22

> do they both use DNS,

As hopefully made clear by the above, it is not the addresses on
your system which "use DNS". It's more like your system uses DNS,
and the DNS may contain both inet and inet6 addresses, thus your
system decides which to communicate with based on which families of
address you have.

> and similar things which might let me make sense of the situation?

Hopefully that helped. It's quite a large topic, so some reading
will be required in many places to fully understand it.

Cheers,
Andy

น This ignores the various translation mechanisms that may in place
to allow IPv4 networks and IPv6 networks to inter-operate. These
can involve various kinds of NAT and DNS rewriting. Look into
things like "NAT64" and "DNS64" for more information about these.

--
https://bitfolk.com/ -- No-nonsense VPS hosting

rhkr...@gmail.com

unread,
Oct 12, 2016, 5:40:03 AM10/12/16
to
Hi Andy,

Thanks very much! It looks like quite a comprehensive answer (including
links) that I'll surely have to read more than once to absorb. (At that
point, I'll ask more questions if I feel the need.)

regards,
Randy Kramer


On Tuesday, October 11, 2016 10:18:38 PM Andy Smith wrote:
> On Sun, Oct 09, 2016 at 04:23:45PM -0400, rhkr...@gmail.com wrote:
> > I'm not the OP, and I'm sort of piggybacking and going somewhat (or a
> > lot?) OT,
>
> In that case it would be good to change the subject of the email.
> I've done so here.
>
> > but I am curious about how old inet4 (right term?) and the new
> > inet6 addresses interact.

Other good stuff elided.

Lisi Reisz

unread,
Oct 26, 2016, 12:00:04 PM10/26/16
to
On Sunday 09 October 2016 12:28:03 Tony Baldwin wrote:
> I kind of think Montenegro should be .Mn, really (or that for the US
> stat of  Minnesota).

Except that it is Mongolia. Country TLDs have to be unique.

Lisi

Lisi Reisz

unread,
Oct 26, 2016, 12:00:04 PM10/26/16
to
On Friday 07 October 2016 19:00:12 Tony Baldwin wrote:
> I have a little business card website up for my big brother's media
> consulting side-business at http://playomatic.myownsite.me.
> Now, at the moment, if I try to load it in Google-Chrome-Stable, I'm
> getting redirected to a yahoo! search for "create web",

It works fine here. Chrome 54 on Jessie. Both fully updated.

Lisi
0 new messages