On October 20, a report from CCTV News unveiled a concerning trend: numerous users across multiple provinces in China have recently encountered abnormal redirects to gambling websites. This issue poses a significant threat to both the security of people's assets and their right to uninterrupted internet access. Investigations by the National Internet Emergency Center disclosed that attackers took advantage of the overseas autonomous system AS 402425. They did so by announcing false routes to hijack internet traffic and tampering with DNS resolution data, thereby steering users towards malicious websites. Notably, this autonomous system is registered under the US-based company QOREXA LABS, which is mainly engaged in Bitcoin-related operations. Technical assessments have confirmed that all instances of domain name tampering occurred within the purview of AS 402425. To mitigate such attacks, it is advisable for pertinent global organizations to swiftly revoke malicious AS resources. Network operators should implement route filtering policies, internet platforms ought to enhance their monitoring of domain name resolution, and internet users are encouraged to utilize reliable DNS services and maintain up-to-date systems.