[Hidden-tech] One page of my site has been hacked and I can't figure out how

[Shel Horowitz]

Thanks for your responses, Rich and Alex.

@Rich: The page I am trying to load is
http://www.frugalmarketing.com/dtb/dtb-sustain.shtml The page it loads
instead is ww82.afy11.net

Just to see what happened, I tried https--and the page doesn't load at all
(but there is an https version of the overall website).

The tech person checked the  .htaccess page and didn't see any scripts. I
am not sure you mean by what web page tool. My browser is Chrome and my
File manager is part of the CPanel.

@Alex: It's actually not in WordPress. Most of my newer sites are but this
one was put up in 1999 and has about 2000 pages of content, so Inever
converted it. I did run it through the checker you suggested and discovered
three files related to a cart on a site that doesn't have  a cart. One of
those wouldn't load for the checker--and I couldn't open it in File
Manager. But that file has a 2020 modification date and there is no cart
file in the subfolder that has the domain where my shopping cart actually
lives (shelhorowitz.com, which is a directory on frugalmarketing)--so I
think it probably IS my current cart and I don't want to mess with it.

Shel Horowitz - "The Transformpreneur"
________________________________________________
Contact me to bake in profitability while addressing hunger,
poverty, war, and catastrophic climate change
* First business ever to be Green America Gold Certified
* Inducted into the National Environmental Hall of Fame
* Certified speaker: International Platform Association
https://goingbeyondsustainability.com
mailto:shel at greenandprofitable.com 413-586-2388
Award-winning, best-selling author of 10 books.
Latest: Guerrilla Marketing to Heal the World
(co-authored with Jay Conrad Levinson)

Watch my TEDx Talk,
"Impossible is a Dare: Business for a Better World"
http://www.ted.com/tedx/events/11809
(move your mouse to "event videos")
_________________________________________________



On Mon, Apr 3, 2023 at 12:33 PM Rich at tnr via Hidden-discuss <
hidden-discuss at lists.hidden-tech.net> wrote:

> care to share ? the link in question that is -- also what web page tool
> are you using ?
> Quick guess - look at .htaccess
>
> Email link directly if you won't want to share on the list
> On 4/3/2023 11:56 AM, Shel Horowitz via Hidden-discuss wrote:
>
> Oy! A key links page on one of my sites now loads a junk parked page. This
> happens whether I click to it from another link or type in the full URL.
>
> An hour chat with a human at tech support left me with nothing but
> frustration. They take zero responsibility for this security breach and say
> it was on my end and I should buy, install, and run sitelock. As I recall,
> I previously had sitelock installed and it was very annoying in the process
> required to do anything.
>
> I went into my Hostgator CPanel, changed the PW, and checked the file. It
> is the file I last updated in 2019 (which is good, as this would have been
> a very difficult page to recreate). I searched both the entire file manager
> and the file that is redirecting for the URL of the page it loads and I
> also checked the file itself for the word "redirect." Whatever they are
> hacking does not seem to be the actual file.
>
> How can I figure out what's jamming my site and get rid of it?
>
> If Passover, Easter, or Ramadan is a holiday you celebrate, I hope yours
> is blessed and joyful.
>
> Thanks, as always,
>
> Shel Horowitz - "The Transformpreneur"
> ________________________________________________
> Contact me to bake in profitability while addressing hunger,
> poverty, war, and catastrophic climate change
> * First business ever to be Green America Gold Certified
> * Inducted into the National Environmental Hall of Fame
> * Certified speaker: International Platform Association
> https://goingbeyondsustainability.com
> mailto:shel at greenandprofitable.com 413-586-2388
> Award-winning, best-selling author of 10 books.
> Latest: Guerrilla Marketing to Heal the World
> (co-authored with Jay Conrad Levinson)
>
> Watch my TEDx Talk,
> "Impossible is a Dare: Business for a Better World"
> http://www.ted.com/tedx/events/11809
> (move your mouse to "event videos")
> _________________________________________________
>
>
> _______________________________________________
> Hidden-discuss mailing list - home page: http://www.hidden-tech.netHidden-discuss@lists.hidden-tech.net
>
> You are receiving this because you are on the Hidden-Tech Discussion list.
> If you would like to change your list preferences, Go to the Members
> page on the Hidden Tech Web site.http://www.hidden-tech.net/members
>
> --
> Rich Roth
> CEO TnR Global
>
> Bio and personal blog: http://rizbang.com
> Building the really big sites:      http://www.tnrglobal.com
> Small/Soho business in the PV:        http://www.hidden-tech.net
> Places to meet for business:        http://www.meetmewhere.com
> And for Arts and relaxation:http://TarotMuertos.com - Artistic Tarot Deck
>    http://www.welovemuseums.com
>    http://www.artonmytv.com/
> Shakers: http://www.shakerpedia.com/
> Helping move the world:             http://www.earththrives.com
>
> _______________________________________________
> Hidden-discuss mailing list - home page: http://www.hidden-tech.net
> Hidden-discuss at lists.hidden-tech.net
>
> You are receiving this because you are on the Hidden-Tech Discussion list.
> If you would like to change your list preferences, Go to the Members
> page on the Hidden Tech Web site.
> http://www.hidden-tech.net/members
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.hidden-tech.net/pipermail/hidden-discuss/attachments/20230403/76b6914c/attachment-0001.html>