TIP: Click on subject to list as thread! ANSI
echo: alt-comp-anti-virus
to: ALL
from: JAX
date: 2014-10-08 12:34:00
subject: Re: Google search redirec

"Ant"  wrote in
news:bv6dndsOKrTXHa_JnZ2dnUVZ7t-dnZ2d@brightview.co.uk: 

>  wrote:
> 
>> I currently have a website www .thegreatwall.ca which works fine
>> if you access it directly.  However, when you actually search it
>> on google and follow the search result, it redirects to a
>> different site. 
> 
> Others have described what to do about your compromised server, so
> I'll just have a quick laugh at the name of your host:
> 
> thegreatwall.ca -> 33.27.168.184
> 33.27.168.184   -> p3nw8shg326.shr.prod.phx3.secureserver.net.
> 
> (so much for secure) and explain the technicalities of what's
> going on. 
> 
> The instruction to load a script has been injected into the top of
> your web page. The script checks the referrer header in the
> browser and if it contains "google", "bing", "yahoo" or "aol" you
> are redirected to www .bagonstyle .com which looks like a site
> selling fake designer handbags. If you haven't navigated via one
> of those search providers your page loads normally. This is why
> you can go there directly.
> 
> Incidently, you may get more help if you post to a group about web
> hosting or web mastering.

Ant great find! It seems to be his web page creator that's to blame. I 
wonder if Bagonstyle infected it with some malware to redirect traffic 
to their site.

-- 
Jax        
--- NewsGate v1.0 gamma 2
* Origin: News Gate @ Net396 -Huntsville, AL - USA (1:396/4)

SOURCE: echomail via QWK@docsplace.org

Email questions or comments to sysop@ipingthereforeiam.com
All parts of this website painstakingly hand-crafted in the U.S.A.!
IPTIA BBS/MUD/Terminal/Game Server List, © 2025 IPTIA Consulting™.