<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=Windows-1252">
</head>
<body>
<div>
<div>
<div style="direction: ltr;">Is this something you could be hired to take care of?</div>
<div><br>
</div>
<div style="direction: ltr;">If yes, what would you estimate as the cost?</div>
<div><br>
</div>
<div style="direction: ltr;">If not, do you recommend someone else?</div>
<div><br>
</div>
<div style="direction: ltr;">Thanks </div>
<div><br>
</div>
<div style="direction: ltr;">Ira</div>
</div>
<div><br>
</div>
<div class="ms-outlook-ios-signature">
<div style="direction: ltr;">Ira Bryck</div>
<div style="direction: ltr;">irabryck.com</div>
<div style="direction: ltr;">fambizpv.com</div>
<div style="direction: ltr;">413-575-5850</div>
<div><br>
</div>
<div><br>
</div>
</div>
</div>
<hr style="display:inline-block;width:98%" tabindex="-1">
<div id="divRplyFwdMsg" dir="ltr"><font face="Calibri, sans-serif" style="font-size:11pt" color="#000000"><b>From:</b> Rich@tnr <rich@tnrglobal.com><br>
<b>Sent:</b> Wednesday, December 18, 2019 4:49:33 PM<br>
<b>To:</b> Ira Bryck <ira@fambizpv.com>; hidden-discuss@lists.hidden-tech.net <hidden-discuss@lists.hidden-tech.net><br>
<b>Subject:</b> Re: malicious redirect? 2 sites with related problems, different symptoms</font>
<div> </div>
</div>
<div>
<p>I am not seeing any specific issue - although I see some odd behavior<br>
<br>
This might help -- trying the URL <a href="http://www.fambizpv.com/">http://www.fambizpv.com/</a> works<br>
BUT <a href="http://fambizpv.com/">http://fambizpv.com/</a> does not - initially<br>
It can be confusing because of caching - once it works the browser uses the www. version<br>
This looks like a godaddy setup issue</p>
<p>This consistently produces an error: <a class="x_moz-txt-link-freetext" href="https://www.umass.edu/fambiz/about/donations.html">
https://www.umass.edu/fambiz/about/donations.html</a><br>
as does clicking on the link in the comments below<br>
</p>
<p>I'd also run a web virus checker - there are web site corruptions that are browser dependent.<br>
Here are some tools: <a href="https://geekflare.com/website-malware-scanning/">https://geekflare.com/website-malware-scanning/</a><br>
Exactly which you can use depends a lot on the web server and setup in use</p>
<p>A easy test (if you can do it) is to run a diff between your wordpress install<br>
and the original wordpress sources -- there are file corruptions that can be hacked into your<br>
side that only show up when coming from a search like google.<br>
They show up when comparing the original files and usually look like either:<br>
1) and include at the bottom of the WP index.php or wp-config.php<br>
2) messy Javascript at the start of theme files -- often to the extreme right where you might miss them.<br>
</p>
<p>Rich<br>
</p>
<div class="x_moz-cite-prefix">On 12/18/2019 4:15 PM, Ira Bryck wrote:<br>
</div>
<blockquote type="cite">
<meta name="Generator" content="Microsoft Word 15 (filtered
medium)">
<style>
<!--
@font-face
{font-family:"Cambria Math"}
@font-face
{font-family:Calibri}
@font-face
{}
@font-face
{font-family:Times}
@font-face
{font-family:Consolas}
@font-face
{}
p.x_MsoNormal, li.x_MsoNormal, div.x_MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif}
h1
{margin-right:0in;
margin-left:0in;
font-size:24.0pt;
font-family:"Calibri",sans-serif;
font-weight:bold}
a:link, span.x_MsoHyperlink
{color:blue;
text-decoration:underline}
pre
{margin:0in;
margin-bottom:.0001pt;
font-size:10.0pt;
font-family:"Courier New"}
span.x_Heading1Char
{font-family:"Calibri Light",sans-serif;
color:#2F5496}
span.x_HTMLPreformattedChar
{font-family:Consolas}
span.x_EmailStyle22
{font-family:"Arial",sans-serif;
color:windowtext;
font-weight:normal;
font-style:normal}
.x_MsoChpDefault
{font-size:10.0pt}
@page WordSection1
{margin:1.0in 1.0in 1.0in 1.0in}
div.x_WordSection1
{}
-->
</style>
<div class="x_WordSection1">
<p class="x_MsoNormal"><span style="font-size:14.0pt; font-family:"Arial",sans-serif">Thank you</span></p>
<p class="x_MsoNormal"><span style="font-size:14.0pt; font-family:"Arial",sans-serif"> </span></p>
<p class="x_MsoNormal"><span style="font-size:14.0pt; font-family:"Arial",sans-serif">Irabryck.com is a wordpress site, seems like malicious redirect to Cialis ads
</span></p>
<p class="x_MsoNormal"><span style="font-size:14.0pt; font-family:"Arial",sans-serif"> </span></p>
<p class="x_MsoNormal"><span style="font-size:14.0pt; font-family:"Arial",sans-serif">Fambizpv.com is a dreamweaver site, getting the interval server error message</span></p>
<p class="x_MsoNormal"><span style="font-size:14.0pt; font-family:"Arial",sans-serif"> </span></p>
<p class="x_MsoNormal"><span style="font-size:14.0pt; font-family:"Arial",sans-serif">Both are hosted by go daddy</span></p>
<p class="x_MsoNormal"><span style="font-size:14.0pt; font-family:"Arial",sans-serif"> </span></p>
<p class="x_MsoNormal"><span style="font-size:14.0pt; font-family:"Arial",sans-serif">Thanks</span></p>
<p class="x_MsoNormal"><span style="font-size:14.0pt; font-family:"Arial",sans-serif"> </span></p>
<p class="x_MsoNormal"><span style="font-size:14.0pt; font-family:"Arial",sans-serif">I also got a long explanation from a UMass IT friend – here it is – I’m ready to get on the phone with go daddy again, if needed, but if they are not the problem or solvers,
I’d pay a reasonable amount for a local tech person to fix this:</span></p>
<p class="x_MsoNormal"><span style="font-size:14.0pt; font-family:"Arial",sans-serif"> </span></p>
<p class="x_MsoNormal"><span style="font-size:14.0pt; font-family:"Arial",sans-serif"> </span></p>
<p class="x_MsoNormal" style="background:white"><span style="font-family:"-webkit-standard",serif; color:black">The first thing I find confirms your reports. I get a server error at fambizpv.com. Specifically, When I hover over the link in the search results,
the URL that shows up in the status bar is fambizpv.com. When I click on the link, the URL in the address bar is the same, fambizpv.com. But if I copy that link in the search results, and then paste, I get the following:</span></p>
<p class="x_MsoNormal" style="background:white"><span style="font-family:"-webkit-standard",serif; color:black"><a href="https://www.google.com/url?sa=t&rct=j&q=&esrc=s&source=web&cd=3&cad=rja&uact=8&ved=2ahUKEwjk4_n9vL_mAhVRzlkKHUvpAm8QFjACegQIBBAB&url=http%3A%2F%2Ffambizpv.com%2F&usg=AOvVaw2OEMgEAOPkdGiw8JJsPoa9"><span style="color:#0563C1">https://www.google.com/url?sa=t&rct=j&q=&esrc=s&source=web&cd=3&cad=rja&uact=8&ved=2ahUKEwjk4_n9vL_mAhVRzlkKHUvpAm8QFjACegQIBBAB&url=http%3A%2F%2Ffambizpv.com%2F&usg=AOvVaw2OEMgEAOPkdGiw8JJsPoa9</span></a></span></p>
<p class="x_MsoNormal" style="background:white"><span style="font-family:"-webkit-standard",serif; color:black">When I click on the link in the search results for irabryck.com, I get the pill mill site. Again, if I enter the URL myself, again, using private
browsing, I get the proper site. When I hover over the link, the URL in the status bar shows up like this:</span></p>
<p class="x_MsoNormal" style="background:white"><span style="font-family:"-webkit-standard",serif; color:black"><a href="https://www.google.com/url?sa=t&rct=j&q=&esrc=s&source=web&cd=1&cad=rja&uact=8&ved=2ahUKEwjk4_n9vL_mAhVRzlkKHUvpAm8QFjAAegQIARAC&url=http%3A%2F%2Firabryck.com%2F&usg=AOvVaw07e6tVudvWD76Bp5dt4cQu"><span style="color:#0563C1">https://www.google.com/url?sa=t&rct=j&q=&esrc=s&source=web&cd=1&cad=rja&uact=8&ved=2ahUKEwjk4_n9vL_mAhVRzlkKHUvpAm8QFjAAegQIARAC&url=http%3A%2F%2Firabryck.com%2F&usg=AOvVaw07e6tVudvWD76Bp5dt4cQu</span></a></span></p>
<p class="x_MsoNormal" style="background:white"><span style="font-family:"-webkit-standard",serif; color:black">If I copy and paste the URL, it's exactly the same. When I follow that link, I briefly see irabryck.com in the address bar, then it redirects to
the pill mill site:<a href="https://itashopo.com/search.html?key=cialis&t=dec107_100"><span style="color:#0563C1">https://itashopo.com/search.html?key=cialis&t=dec107_100</span></a></span></p>
<p class="x_MsoNormal" style="background:white"><span style="font-family:"-webkit-standard",serif; color:black">So the server error behavior on fambiz.com seems problematic. I would normally treat that straightforwardly like it's what it appears to be, a server
error. But the fact that typing in the proper URL works, doesn't make sense in the straightforward error scenario. Clicking on the link should bring you to precisely the same place as typing the URL. The fact that one works, and the other doesn't tells me
there's something unseen happening.</span></p>
<p class="x_MsoNormal" style="background:white"><span style="font-family:"-webkit-standard",serif; color:black">With irabryck.com, it's obvious that there's a malicious redirect occurring. I don't know how you get GoDaddy to responsibly attend to this. Maybe
some of this information will help. If a technician isn't getting you somewhere, I might ask to speak to a supervisor until you get someone responsive.</span></p>
<p class="x_MsoNormal" style="background:white"><span style="font-family:"-webkit-standard",serif; color:black">The fact that those links come up at the top of the search results when I search for your name, or family business center, shows that this is not
a SEO issue. That's the correct behavior. What happens when you click on the link is not.</span></p>
<p class="x_MsoNormal"><span style="font-size:14.0pt; font-family:"Arial",sans-serif"> </span></p>
<p class="x_MsoNormal"><span style="font-size:14.0pt; font-family:"Arial",sans-serif"> </span></p>
<p class="x_MsoNormal"><span style="font-size:14.0pt; font-family:"Arial",sans-serif"> </span></p>
<p class="x_MsoNormal"><span style="font-size:14.0pt; font-family:"Arial",sans-serif"> </span></p>
<p class="x_MsoNormal"><span style="font-size:14.0pt; font-family:"Arial",sans-serif"> </span></p>
<p class="x_MsoNormal"><span style="font-size:14.0pt; font-family:"Arial",sans-serif"> </span></p>
<p class="x_MsoNormal"><span style="font-size:14.0pt; font-family:"Arial",sans-serif"> </span></p>
<p class="x_MsoNormal"><span style="font-size:14.0pt; font-family:"Arial",sans-serif"> </span></p>
<p class="x_MsoNormal"><span style="font-size:14.0pt; font-family:"Arial",sans-serif"> </span></p>
<div style="border:none; border-top:solid #B5C4DF
1.0pt; padding:3.0pt 0in 0in 0in">
<p class="x_MsoNormal"><b><span style="font-size:12.0pt; color:black">From: </span>
</b><span style="font-size:12.0pt; color:black">Hidden-discuss <a class="x_moz-txt-link-rfc2396E" href="mailto:hidden-discuss-bounces@lists.hidden-tech.net">
<hidden-discuss-bounces@lists.hidden-tech.net></a> on behalf of Hidden tech list <a class="x_moz-txt-link-rfc2396E" href="mailto:hidden-discuss@lists.hidden-tech.net">
<hidden-discuss@lists.hidden-tech.net></a><br>
<b>Reply-To: </b><a class="x_moz-txt-link-rfc2396E" href="mailto:rich@tnrglobal.com">"rich@tnrglobal.com"</a>
<a class="x_moz-txt-link-rfc2396E" href="mailto:rich@tnrglobal.com"><rich@tnrglobal.com></a><br>
<b>Date: </b>Wednesday, December 18, 2019 at 4:06 PM<br>
<b>To: </b>Hidden tech list <a class="x_moz-txt-link-rfc2396E" href="mailto:hidden-discuss@lists.hidden-tech.net">
<hidden-discuss@lists.hidden-tech.net></a><br>
<b>Subject: </b>Re: [Hidden-tech] Google AdWOrds issue</span></p>
</div>
<div>
<p class="x_MsoNormal"> </p>
</div>
<p>can't look further without knowing the real URL - hosting service might help also</p>
<div>
<p class="x_MsoNormal">On 12/18/2019 2:43 PM, Al Canali via Hidden-discuss wrote:</p>
</div>
<blockquote style="margin-top:5.0pt; margin-bottom:5.0pt">
<div>
<p class="x_MsoNormal">A client of mine cannot run their Google Adwors account because, according to Google, there is a 500 error caused by this url
<a href="https://websitename.com/favicon.ico">https://websitename.com/favicon.ico</a>
</p>
<div>
<h1><span style="font-family:Times; color:black">Internal Server Error</span></h1>
<p><span style="font-size:13.5pt; font-family:Times; color:black">The server encountered an internal error or misconfiguration and was unable to complete your request.</span></p>
<p><span style="font-size:13.5pt; font-family:Times; color:black">Please contact the server administrator at to inform them of the time this error occurred, and the actions you performed just before this error.</span></p>
<p><span style="font-size:13.5pt; font-family:Times; color:black">More information about this error may be available in the server error log.</span></p>
<p><span style="font-size:13.5pt; font-family:Times; color:black">Additionally, a 500 Internal Server Error error was encountered while trying to use an ErrorDocument to handle the request.</span></p>
<p><span style="font-size:13.5pt; font-family:Times; color:black">Anyone have any experience with this? What did you do? </span></p>
<div>
<p class="x_MsoNormal"> </p>
</div>
<p class="x_MsoNormal"> </p>
</div>
</div>
<p class="x_MsoNormal"><br>
<br>
</p>
<pre>_______________________________________________</pre>
<pre>Hidden-discuss mailing list - home page: <a href="http://www.hidden-tech.net">http://www.hidden-tech.net</a></pre>
<pre><a href="mailto:Hidden-discuss@lists.hidden-tech.net">Hidden-discuss@lists.hidden-tech.net</a></pre>
<pre> </pre>
<pre>You are receiving this because you are on the Hidden-Tech Discussion list.</pre>
<pre>If you would like to change your list preferences, Go to the Members</pre>
<pre>page on the Hidden Tech Web site.</pre>
<pre><a href="http://www.hidden-tech.net/members">http://www.hidden-tech.net/members</a></pre>
</blockquote>
<pre>-- </pre>
<pre>Rich Roth</pre>
<pre>CEO TnR Global</pre>
<pre> </pre>
<pre>Bio and personal blog: <a href="http://rizbang.com">http://rizbang.com</a></pre>
<pre>Building the really big sites: <a href="http://www.tnrglobal.com">http://www.tnrglobal.com</a></pre>
<pre>Small/Soho business in the PV: <a href="http://www.hidden-tech.net">http://www.hidden-tech.net</a></pre>
<pre>Places to meet for business: <a href="http://www.meetmewhere.com">http://www.meetmewhere.com</a></pre>
<pre>And for relaxation: <a href="http://www.welovemuseums.com">http://www.welovemuseums.com</a></pre>
<pre> <a href="http://www.artonmytv.com/">http://www.artonmytv.com/</a></pre>
<pre>Helping move the world: <a href="http://www.earththrives.com">http://www.earththrives.com</a></pre>
</div>
</blockquote>
<pre class="x_moz-signature" cols="72">--
Rich Roth
CEO TnR Global
Bio and personal blog: <a class="x_moz-txt-link-freetext" href="http://rizbang.com">http://rizbang.com</a>
Building the really big sites: <a class="x_moz-txt-link-freetext" href="http://www.tnrglobal.com">http://www.tnrglobal.com</a>
Small/Soho business in the PV: <a class="x_moz-txt-link-freetext" href="http://www.hidden-tech.net">http://www.hidden-tech.net</a>
Places to meet for business: <a class="x_moz-txt-link-freetext" href="http://www.meetmewhere.com">http://www.meetmewhere.com</a>
And for relaxation: <a class="x_moz-txt-link-freetext" href="http://www.welovemuseums.com">http://www.welovemuseums.com</a>
<a class="x_moz-txt-link-freetext" href="http://www.artonmytv.com/">http://www.artonmytv.com/</a>
Helping move the world: <a class="x_moz-txt-link-freetext" href="http://www.earththrives.com">http://www.earththrives.com</a></pre>
</div>
</body>
</html>