Marowhome.com opening by itself on an Infinix, Tecno, or itel phone does not currently prove that the phone has malware. Repeat reports connect the symptom to model-specific page.portals.mobi homepage URLs, but they do not identify the Android package or firmware component that launches the browser. Save the full URL, replace the custom homepage, review special access and recent app updates, then use Safe Mode to separate a downloaded-app problem from a provisioned or system-level trigger.
The important clue is that Marowhome can open in whichever browser is set as default. That means clearing Chrome alone may not solve the problem: another component can ask Android to open a web address, and Android hands the request to the current default browser.
What is confirmed — and what is not
| Observed fact | What it means |
|---|---|
| Users on Infinix, Tecno, and itel phones report the same recurring domain. | The device-family correlation is worth investigating, but it does not prove vendor intent or identify a responsible package. |
Some affected phones show a model-specific page.portals.mobi URL as a custom homepage. |
A provisioned portal or homepage path is a stronger lead than a random website notification. |
| The page may open in Chrome, Brave, or another browser after the default changes. | The trigger can sit outside the browser and launch an ordinary Android web intent. |
| Clearing browser data helps some users but not others. | Site data and permissions are only one layer. A saved homepage or another app/component can recreate the launch. |
| No public vendor statement or reproducible package attribution is available. | Do not disable TPMS or any other named system app based on forum guesses. |
Why page.portals.mobi matters
An older Google Chrome Community report documented an itel phone opening a page.portals.mobi/sp/m/itel address before redirecting to Google [2]. Current model-style test URLs for Infinix, Tecno, and itel still return a server-side 302 redirect to Google. The route can include a model, product code, UID, and advertising ID, so redact those values before sharing a screenshot publicly.
This does not prove that the portal sent every affected phone to Marowhome. It does show that a server-controlled, model-aware homepage path exists and can change its destination without changing anything in the browser. That is why a user may see the issue start suddenly even when no new app was knowingly installed.
What marowhome.com does today
Marowhome currently presents itself as a search and news portal. Its live page sends typed searches to w.maxask.com, fetches news through mx-api.sigmapop.com, and links a floating game control to s.gamifyspace.com. The page code can request an advertising ID through an Android JavaScript bridge when one is available; an ordinary browser receives an all-zero fallback value [1].
The site’s About and Privacy pages call the service “Pilot Search” and list [email protected], while the live product is branded Marowhome. That mismatch and the additional third-party hosts justify caution. They are not, by themselves, proof of credential theft, spyware, or a malicious Transsion campaign. For the current domain reputation result, use the Gridinsoft Marowhome.com report rather than assuming that every redirect has the same risk.
How to stop the Marowhome redirect safely
- Preserve one clean record. Note the time, phone model, Android build number, default browser, and the complete URL. Screenshot the address bar, then cover or crop any
uid,gaid, email address, or account name before sharing it. - Check the browser homepage. In Chrome, open Settings → Homepage. Choose Chrome’s homepage or turn the homepage off instead of keeping a custom
page.portals.mobiaddress. Google documents this control separately from the startup page [3]. Other browsers use similar Homepage, Start page, or New tab settings. - Reset Marowhome site access. Open the browser’s Site settings, find
marowhome.com, and clear its stored data and permissions. Also block pop-ups, redirects, and notifications. Our browser notification guide covers the permission-only case. - Test the default-browser clue. Change the default browser temporarily and wait for the usual recurrence window. If the new default browser opens the same domain, the old browser is probably not the launcher. Do not keep changing browsers as a permanent fix; use the result as attribution evidence.
- Review apps and special access. Sort apps by recently installed or recently updated. Check Accessibility, Device Admin, Display over other apps, Notification access, Install unknown apps, and default-app settings. Remove an unfamiliar downloaded app only when its installation time, permissions, notification history, or Safe Mode result connects it to the symptom.
- Run Google Play Protect and install updates. Update Android, the system browser, Android System WebView, Google Play services, and manufacturer system apps. A server-side portal change or firmware component may be fixed through an update rather than browser cleanup.
- Test Safe Mode. The exact key sequence differs by phone, so use the manufacturer’s instructions for your model. Android’s troubleshooting guidance says that when a problem disappears in Safe Mode, a downloaded app is likely responsible; remove recent downloaded apps one at a time and retest [4].
- Escalate with evidence. If the redirect continues in Safe Mode after updates and homepage cleanup, contact the phone maker. Provide the model, build number, timestamps, redacted full URL, default-browser test, and Safe Mode result. Ask which signed component sets or launches the portal instead of asking support to guess whether the phone has a virus.
When should you scan, change passwords, or factory-reset?
A browser opening a portal is not enough reason to reset every password. Change passwords from a clean device and revoke active sessions if you entered credentials on Marowhome or a later destination, installed an APK, granted Accessibility or Device Admin access, or approved a suspicious login. If you only saw the page and closed it, concentrate first on the launcher and browser settings.
Use the symptom checklist in our Android malware types guide if the phone also shows unknown apps, overlays, premium SMS activity, account abuse, or aggressive ads outside the browser. Those additional signs make an installed-app investigation more important.
Treat a factory reset as the last step, not the first. Back up photos and documents without copying unknown APKs, record the build and URL evidence, install every available update, and ask vendor support about the portal. After a reset, do not automatically restore every third-party app at once; otherwise a downloaded trigger can return before you know which app caused it.
FAQ
Is Marowhome.com confirmed malware?
No. The recurring launch is suspicious and the portal’s disclosures are inconsistent, but the available evidence does not prove that Marowhome is credential-stealing malware or identify a malicious Android package. Treat it as an unwanted redirect that needs attribution.
Why does Marowhome open in my default browser?
Android sends normal web requests to whichever browser is currently the default. If Marowhome moves from Chrome to Brave or another browser after you change the default, another app or provisioned component may be issuing the request.
Will turning off the Chrome homepage fix it?
It can fix a saved custom-homepage case. It will not stop another Android component from launching the same URL later, which is why the default-browser and Safe Mode tests matter when the page returns.
Should I disable TPMS or another Infinix/Tecno/itel system app?
Not without evidence tying that exact package to the launch on your build. Disabling random signed system components can break notifications, updates, power management, or other phone functions and still leave the real trigger active.
Can a factory reset remove the redirect?
It can remove a downloaded trigger, but it may not change a provisioned homepage or server-side portal behavior. Reset only after updates, Safe Mode testing, and evidence collection, then reinstall third-party apps gradually.
References
- Marowhome. “Marowhome Search — Fast Search Portal.” Marowhome.com, accessed July 17, 2026. https://marowhome.com/
- Google Chrome Community. “Need info about page.portals.mobi Page.” Google, January 25, 2025, accessed July 17, 2026. https://support.google.com/chrome/thread/320620327/need-info-about-page-portals-mobi-page
- Google Chrome Help. “Set your homepage and startup page — Android.” Google, accessed July 17, 2026. https://support.google.com/chrome/answer/95314
- Android Help. “Find problem apps by rebooting to safe mode on Android.” Google, accessed July 17, 2026. https://support.google.com/android/answer/7665064
