ISP redirect page

An ISP redirect page is a spoof page served by major ISPs including: Cox Communications,^[1] Embarq, Verizon, Rogers, Earthlink, and various others when World Wide Web users enter an invalid DNS name.^{[citation needed]}

If a user types in an incorrect Uniform Resource Locator (URL), for example http://wikipedia.orf instead of http://wikipedia.org, the ISP's DNS server will respond with a spoofed DNS response that redirects the user to an advertising web page.

How it works

Domain Name System (DNS) resolution is the process of translating a human-readable domain name (for example, en.wikipedia.org) into an IP address that computers can use. Every ISP runs a DNS server to allow their customers to translate domain names into IP addresses that computers understand and use. When an ISP's DNS server receives a request to translate a name, according to RFC the DNS server should return the associated IP address to the customer's computer which is then able to connect to the requested resource.

When the ISP's DNS server receives a request for a name that is not recognized or is unavailable, some ISPs spoof the NX (null) response and instead return the IP address of a search or advertising page to the client. When the client is using a web browser, this will display a search page that contains possible suggestions on the proper address and a small explanation of the error. These search pages often contain advertising that is paid to the ISP.

Sometimes, a customer can opt-out of this service, but the opt-out is frequently not implemented at the same layer as the spoofing. Opt-out procedures vary from ISP to ISP in both their method of implementation and effectiveness.

Consequences

ISPs have written that redirect pages are intended to help lost users. ISP customers have complained that the pages are instead misleading to users, and that their purpose is to generate advertising revenue for the ISP. The practice has been controversial since ISP redirect pages were introduced in 2006.^[2]

ISP redirects can fool the ping networking utility. Ping may falsely report that a website is responsive when in truth it is unavailable but redirected.^[3] ISP redirects also interfere with web archiving tools like ArchiveTeam Warrior^[4]

References

^ Bode, Karl (19 May 2007). "Cox Tests DNS Redirection". Retrieved 17 August 2022.
^ Bode, Karl (April 8, 2006). "DSLExtreme Scraps Redirect Service". DSLReports. Retrieved January 26, 2021.
^ Gookin, Dan (2009). Troubleshooting and Maintaining Your PC All-in-One Desk Reference For Dummies. Wiley. p. 394. ISBN 9780470477953.
^ "ArchiveTeam Warrior". ArchiveTeam. Retrieved January 26, 2021.

[1] Bode, Karl (19 May 2007). "Cox Tests DNS Redirection". Retrieved 17 August 2022.

[2] Bode, Karl (April 8, 2006). "DSLExtreme Scraps Redirect Service". DSLReports. Retrieved January 26, 2021.

[3] Gookin, Dan (2009). Troubleshooting and Maintaining Your PC All-in-One Desk Reference For Dummies. Wiley. p. 394. ISBN 9780470477953.

[4] "ArchiveTeam Warrior". ArchiveTeam. Retrieved January 26, 2021.

[1]

[2]

[3]

[4]