[Hidden-tech] One page of my site has been hacked and I can't figure out how
Rich@tnr
rich at tnrglobal.com
Mon Apr 3 19:11:31 UTC 2023
not much tech from that techie
A simple page download shows a javascript that does a forward to
https://ad.afy11.net/srad.js?azId=198107"
Which is an ad - which looks like it might be corrupted or simply no
longer valid
I'd remove that javascript and see that does for you.
R.
On 4/3/2023 1:51 PM, Shel Horowitz wrote:
> Thanks for your responses, Rich and Alex.
>
> @Rich: The page I am trying to load is
> http://www.frugalmarketing.com/dtb/dtb-sustain.shtmlThe page it loads
> instead is ww82.afy11.net <http://ww82.afy11.net>
> Just to see what happened, I tried https--and the page doesn't load at
> all (but there is an https version of the overall website).
> The tech person checked the .htaccess page and didn't see any
> scripts. I am not sure you mean by what web page tool. My browser is
> Chrome and my File manager is part of the CPanel.
>
> @Alex: It's actually not in WordPress. Most of my newer sites are but
> this one was put up in 1999 and has about 2000 pages of content, so
> Inever converted it. I did run it through the checker you suggested
> and discovered three files related to a cart on a site that doesn't
> have a cart. One of those wouldn't load for the checker--and I
> couldn't open it in File Manager. But that file has a 2020
> modification date and there is no cart file in the subfolder that has
> the domain where my shopping cart actually lives (shelhorowitz.com
> <http://shelhorowitz.com>, which is a directory on
> frugalmarketing)--so I think it probably IS my current cart and I
> don't want to mess with it.
>
> Shel Horowitz - "The Transformpreneur"
> ________________________________________________
> Contact me to bake in profitability while addressing hunger,
> poverty, war, and catastrophic climate change
> * First business ever to be Green America Gold Certified
> * Inducted into the National Environmental Hall of Fame
> * Certified speaker: International Platform Association
> https://goingbeyondsustainability.com
> mailto:shel at greenandprofitable.com 413-586-2388
> Award-winning, best-selling author of 10 books.
> Latest: Guerrilla Marketing to Heal the World
> (co-authored with Jay Conrad Levinson)
>
> Watch my TEDx Talk,
> "Impossible is a Dare: Business for a Better World"
> http://www.ted.com/tedx/events/11809
> (move your mouse to "event videos")
> _________________________________________________
>
>
>
> On Mon, Apr 3, 2023 at 12:33 PM Rich at tnr via Hidden-discuss
> <hidden-discuss at lists.hidden-tech.net> wrote:
>
> care to share ? the link in question that is -- also what web page
> tool are you using ?
> Quick guess - look at .htaccess
>
> Email link directly if you won't want to share on the list
>
> On 4/3/2023 11:56 AM, Shel Horowitz via Hidden-discuss wrote:
>> Oy! A key links page on one of my sites now loads a junk parked
>> page. This happens whether I click to it from another link or
>> type in the full URL.
>>
>> An hour chat with a human at tech support left me with nothing
>> but frustration. They take zero responsibility for this security
>> breach and say it was on my end and I should buy, install, and
>> run sitelock. As I recall, I previously had sitelock installed
>> and it was very annoying in the process required to do anything.
>>
>> I went into my Hostgator CPanel, changed the PW, and checked the
>> file. It is the file I last updated in 2019 (which is good, as
>> this would have been a very difficult page to recreate). I
>> searched both the entire file manager and the file that is
>> redirecting for the URL of the page it loads and I also checked
>> the file itself for the word "redirect." Whatever they are
>> hacking does not seem to be the actual file.
>>
>> How can I figure out what's jamming my site and get rid of it?
>>
>> If Passover, Easter, or Ramadan is a holiday you celebrate, I
>> hope yours is blessed and joyful.
>>
>> Thanks, as always,
>>
>> Shel Horowitz - "The Transformpreneur"
>> ________________________________________________
>> Contact me to bake in profitability while addressing hunger,
>> poverty, war, and catastrophic climate change
>> * First business ever to be Green America Gold Certified
>> * Inducted into the National Environmental Hall of Fame
>> * Certified speaker: International Platform Association
>> https://goingbeyondsustainability.com
>> mailto:shel at greenandprofitable.com 413-586-2388
>> Award-winning, best-selling author of 10 books.
>> Latest: Guerrilla Marketing to Heal the World
>> (co-authored with Jay Conrad Levinson)
>>
>> Watch my TEDx Talk,
>> "Impossible is a Dare: Business for a Better World"
>> http://www.ted.com/tedx/events/11809
>> (move your mouse to "event videos")
>> _________________________________________________
>>
>>
>> _______________________________________________
>> Hidden-discuss mailing list - home page:http://www.hidden-tech.net
>> Hidden-discuss at lists.hidden-tech.net
>>
>> You are receiving this because you are on the Hidden-Tech Discussion list.
>> If you would like to change your list preferences, Go to the Members
>> page on the Hidden Tech Web site.
>> http://www.hidden-tech.net/members
>
> --
> Rich Roth
> CEO TnR Global
>
> Bio and personal blog:http://rizbang.com
> Building the really big sites:http://www.tnrglobal.com
> Small/Soho business in the PV:http://www.hidden-tech.net
> Places to meet for business:http://www.meetmewhere.com
> And for Arts and relaxation:
> http://TarotMuertos.com <http://TarotMuertos.com> - Artistic Tarot Deck
> http://www.welovemuseums.com
> http://www.artonmytv.com/
> Shakers:http://www.shakerpedia.com/
> Helping move the world:http://www.earththrives.com
>
> _______________________________________________
> Hidden-discuss mailing list - home page: http://www.hidden-tech.net
> Hidden-discuss at lists.hidden-tech.net
>
> You are receiving this because you are on the Hidden-Tech
> Discussion list.
> If you would like to change your list preferences, Go to the Members
> page on the Hidden Tech Web site.
> http://www.hidden-tech.net/members
>
--
Rich Roth
CEO TnR Global
Bio and personal blog:http://rizbang.com
Building the really big sites:http://www.tnrglobal.com
Small/Soho business in the PV:http://www.hidden-tech.net
Places to meet for business:http://www.meetmewhere.com
And for Arts and relaxation:
http://TarotMuertos.com - Artistic Tarot Deck
http://www.welovemuseums.com
http://www.artonmytv.com/
Shakers:http://www.shakerpedia.com/
Helping move the world:http://www.earththrives.com
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.hidden-tech.net/pipermail/hidden-discuss/attachments/20230403/a307e7c6/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: rich.vcf
Type: text/vcard
Size: 4 bytes
Desc: not available
URL: <http://lists.hidden-tech.net/pipermail/hidden-discuss/attachments/20230403/a307e7c6/attachment.bin>
More information about the Hidden-discuss
mailing list