Avatar of Scott McDaniel (EE MVE )
Scott McDaniel (EE MVE )Flag for United States of America

asked on 

Search results in browser point to spam links

When I search for my website (infotrakker.com), I see the following results in the search engine, which I think means they've been hijacked. What can I do to fix this:

User generated image
Web DevelopmentAnti-Virus AppsWeb Browsers

Avatar of undefined
Last Comment
skullnobrains
ASKER CERTIFIED SOLUTION
Avatar of Kimputer
Kimputer

Blurred text
THIS SOLUTION IS ONLY AVAILABLE TO MEMBERS.
View this solution by signing up for a free trial.
Members can start a 7-Day free trial and enjoy unlimited access to the platform.
See Pricing Options
Start Free Trial
SOLUTION
THIS SOLUTION IS ONLY AVAILABLE TO MEMBERS.
View this solution by signing up for a free trial.
Members can start a 7-Day free trial and enjoy unlimited access to the platform.
Avatar of Dave Baldwin
Dave Baldwin
Flag of United States of America image

When I try to go to infotrakker.com, I get sent to a site that sells drugs.  It appears that you are on Godaddy.  ??
Avatar of Kimputer
Kimputer

With so many different results, could also have been a DNS hack. Since Dave has the "wrong" site, maybe he can provide the IP nr?

I'm currently seeing the "correct" website at 45.40.184.147

Avatar of Dave Baldwin
Dave Baldwin
Flag of United States of America image

Kimputer, that is the IP address I get thru looking up infotrakker.com .
Avatar of Kimputer
Kimputer

Probably code running on the website serving different pages to different visitors.

The full security sweep it is!

Avatar of Scott McDaniel (EE MVE )

ASKER

I'm the only one in control of the website.


Yes, I'm on Godaddy.


Thanks for the help. How do I run the full security sweep? Is this something I can do on my end, or do I need to have GoDaddy do this?

Avatar of Kimputer
Kimputer

Full security sweep is: Restore files from earlier backup (virus scanned) but also DB from backup, change database/web/ftp/email passwords. Then make sure all code is up to date (newest version of WP, and plugins). As you can see, these are all things you can do yourself. No help from Godaddy needed.

I don't use Wordpress for the site, it's an ASPX site. I'll review over the weekend and see if I can determine anything.


Thanks for the help.

Avatar of skullnobrains
skullnobrains

i guess the hack was fixed a long time ago but for those wandering about the point, best guess is this is a preparation phase before a spamming campaign in order to evade uri blacklisting and sell crap.

typically, your site would piggy-back a small fraction of a botnet. the corresponding email would only flow for a few minutes at a time once in a couple of days. once the url or ip gets blacklisted, the botnet will usually automatically exclude it.

based on the contents, your hacker is most likely john andrew ( call this his official alias ), resident of malta and responsible for the "canadian pharmacy" campaigns which allow him to sells both potent and fake meds. you may be able to say hello in person if you sail the mediterranean sea.

Web Development
Web Development

Web development includes all aspects of presenting content on intranets and the Internet, including delivery development, protocols, languages and standards, server software, browser clients, databases and multimedia generation.

78K
Questions
--
Followers
--
Top Experts
Get a personalized solution from industry experts
Ask the experts
Read over 600 more reviews

TRUSTED BY

IBM logoIntel logoMicrosoft logoUbisoft logoSAP logo
Qualcomm logoCitrix Systems logoWorkday logoErnst & Young logo
High performer badgeUsers love us badge
LinkedIn logoFacebook logoX logoInstagram logoTikTok logoYouTube logo