This question already has an answer here:
I have some unwelcome behavior on my Samsung S4 AOS 5.0.1 (unrooted) phone. A few days ago I start to get attempts to open my web pages (up to 3 times a day so far) while my phone is idle. All cases have been bit.ly links for example:
http://bit.ly/2KG1tdA+ -- http://www.gohoi.com/jaguar-xj/ http://bit.ly/30muksQ+ -- http://www.gohoi.com/lincoln-mkz/ http://bit.ly/2nVdS4m+ -- https://t.co/leK1JpzypD http://bit.ly/34WUUeL+ -- https://fb.itfactly.com/?url=https://l.facebook.com/l.php?u....
As I have no default browser I was able to capture URL and add "+" to end so I can get the detination URL on bitl.ly stats page as shown above in 2nd column. The first link went to at least 0.5 Million devices so somebody out there must have run into this phone abuse.
Is there anyway to trace what process is triggering the open web request (eg using logs, trace tools etc), so I can uninstall the app or disable it if it is builtin. Could it be "Peel remote".