"Ant" wrote in
news:bv6dndsOKrTXHa_JnZ2dnUVZ7t-dnZ2d@brightview.co.uk:
> wrote:
>
>> I currently have a website www .thegreatwall.ca which works fine
>> if you access it directly. However, when you actually search it
>> on google and follow the search result, it redirects to a
>> different site.
>
> Others have described what to do about your compromised server, so
> I'll just have a quick laugh at the name of your host:
>
> thegreatwall.ca -> 33.27.168.184
> 33.27.168.184 -> p3nw8shg326.shr.prod.phx3.secureserver.net.
>
> (so much for secure) and explain the technicalities of what's
> going on.
>
> The instruction to load a script has been injected into the top of
> your web page. The script checks the referrer header in the
> browser and if it contains "google", "bing", "yahoo" or "aol" you
> are redirected to www .bagonstyle .com which looks like a site
> selling fake designer handbags. If you haven't navigated via one
> of those search providers your page loads normally. This is why
> you can go there directly.
>
> Incidently, you may get more help if you post to a group about web
> hosting or web mastering.
Ant great find! It seems to be his web page creator that's to blame. I
wonder if Bagonstyle infected it with some malware to redirect traffic
to their site.
--
Jax
--- NewsGate v1.0 gamma 2
* Origin: News Gate @ Net396 -Huntsville, AL - USA (1:396/4)
|