Due to the system architecture of iOS/iPadOS, unless jailbroken, your iPad is not susceptible to traditional malware infection per-se. However, as with all computer systems, there are still vulnerabilities and exploits to which you remain vulnerable.
Browser-based attacks can largely be mitigated by installing a good, trusted, Content and Ad-blocking product. One of the very best and most respected within the Apple App Store - designed for iPad, iPhone and Mac - is 1Blocker for Safari.
https://apps.apple.com/gb/app/1blocker-for-safari/id1365531024
1Blocker is a browser extension for Safari. It is highly configurable - and crucially does not rely upon an external proxy-service of dubious provenance. All processing takes place on your device - and contrary to expectations, Safari and your iPad will run faster and more efficiently.
Unwanted content is not simply filtered after download (a technique used by basic/inferior products), but instead undesirable embedded content blocked from download. A further benefit on metered services, such as cellular connections where you data may be capped or chargeable, this not only improves speed but also saves you money.
When using an effective Content Blocker product, a high proportion of otherwise inescapable risk when using your Safari browser, or linking to external sources from email, is effectively mitigated before it even reaches you.
If you are using third-party browsers, it becomes a little more complicated. Some, such as Firefox, have their own content blocking “built-in” (but are less flexible or more limited in their ruleset and configuration). Others, such as Google Chrome, offer very little control; these browsers are designed to serve advertising.
For these third-party browsers that do not provide adequate content blocking or filtering, an alternative class of Content Blocker can be utilised. Some Content Blockers utilise a proxy service, through which all your internet traffic is effectively “tunnelled”. Operators of some proxy-based blockers have two revenue streams - (1) your paying for a subscription service, and (2) commercial advertisers who pay for their content to be whitelisted (and therefore forwarded to you).
A further measure to improve protection is to use a trusted Recursive DNS Service in preference to automatic settings. This can either be set on a per-device basis in Settings, or can be set-up on your home Router. I strongly recommend using one of the following services - for which IPv4 and IPv6 server addresses are listed:
Quad9 (recommended)
9.9.9.9
149.112.112.112
2620:fe::fe
2620:fe::9
OpenDNS
208.67.222.222
208.67.220.220
2620:0:ccc::2
2620:0:ccd::2
Cloudflare+APNIC
1.1.1.1
1.0.0.1
2606:4700:4700::1111
2606:4700:4700::1001
Use of the above DNS services will help to shield you from “known bad” websites and URLs - and when used alongside 1Blocker, provides defense in depth. This technique inhibits unwanted content by blocking malicious content by inhibiting resolution of malicious IP Addresses. Use of a security focussed Recursive DNS provider adds a layer of protection for the entire device - and therefore does provide some additional protection for browsers, such as Chrome, where controls are otherwise absent.
I hope this information proves to be helpful in addressing - and hopefully resolving - any issues that you may be experiencing.
