I'm a developer by trade, but not that well versed in information security. I've encountered a strange problem at home:
About three times now in the past year, when I open some website - I'm thrown to some garbage domain which tries to phish me to do some kind of security audit or whatever. First time it happened - I thought I had some malware on my system. I'm normally very cautious. So I pretty much burned my drives and got a fresh everything going. Then it happened again, a few months by, and now again - after moving to a different apartment and on my GFs laptop.
I'm suspecting DNS tampering of some sort, but there's no way to verify. Opening the same domain again, just gives me the right page.
Between now and then I moved apartments, moved ISP, changed router to Google Mesh, changed DNS to 18.104.22.168 on it. So... now even DNS poisoning doesn't make much sense.
And the websites that do open, are very similar in spirit. I suspect that the problem is persistent.
AV software doesn't report any issues.
Any ideas? And what should I do to prevent this?
In response to questions:
It happened to three different websites. I honestly don't recall which, I think it's entirely possible that it wasn't any of the big ones.
Visiting the same site again just opens the normal site.
Last time it happened yesterday (my GF visited some blog. I will update again if she remembers which site it was originally), and this is the garbage result I was referring to:
I am in Estonia
The browsers and machines are completely different. Even the router and ISPs have changed between issues.
The offending original was: http://www.byronkatie.com/2018/07/how-to-be-safe-in-the-abyss-the-work-of-byron-katie/