Author Topic: Has website been hacked?  (Read 20348 times)

0 Members and 2 Guests are viewing this topic.

Offline BorderLine

Re: Has website been hacked?
« Reply #60 on: January 17, 2014, 11:07:21 am »
* [MAF]Snoopy thinks everyone should go to the fastest, most secure, and most amazing internet browser ever.

Internet Explorer.
I use IE before. If only I could get used to it fast  :(  :L
If you read this you suck.

Offline Rob_Zamora

  • Admin
  • Posts: 597
    • View Profile
Re: Has website been hacked?
« Reply #61 on: January 17, 2014, 01:31:52 pm »
I don't get any redirects, nor do I get the cannot connect thing. The cannot connect thing only happens when server goes down.

Using Chrome, no adblock or any other plug-ins for chrome

Offline [FSR]Ush

  • Admin
  • Posts: 13,449
  • Aart
    • View Profile
Re: Has website been hacked?
« Reply #62 on: January 17, 2014, 01:44:12 pm »
Seems like the problem is Europe based

Offline nero

Re: Has website been hacked?
« Reply #63 on: January 20, 2014, 02:35:18 pm »
Just happened again, here is a screenshot of the redirect in browser history:




Browser is Mozilla Firefox 26.0
Browser Plugins:
- AdBlock Plus
- ProxTube
- ColorZilla
- FireBug
- MeasureIt
- TinEye Reverse Image Search

The redirect happened after I clicked on the "Unread posts since last visit" link.

Offline [LSR]Jalicno

  • Admin
  • Posts: 12,384
    • View Profile
Re: Has website been hacked?
« Reply #64 on: January 20, 2014, 02:56:07 pm »
I think its hosting fault cause same problems started on LSR forum 10 minutes ago...i am 100 percent sure whole forum code is clean and there no any recently mods installed

Offline pajk

Re: Has website been hacked?
« Reply #65 on: January 20, 2014, 03:27:31 pm »
Happened to me first time today on android phone. (Adultfriender)

Offline [MAF]Agus

  • Manager
  • Posts: 1,600
  • (͡° ͜ʖ ͡°)
    • View Profile
  • In-game name: [MAF]Agus
Re: Has website been hacked?
« Reply #66 on: January 20, 2014, 03:36:07 pm »
Happened for the first time to me, it redirected me to some weird page I didn't know, but I forgot to copy it :(

Offline [FSR]Ush

  • Admin
  • Posts: 13,449
  • Aart
    • View Profile
Re: Has website been hacked?
« Reply #67 on: January 20, 2014, 04:07:09 pm »
blank page..

Offline nero

Re: Has website been hacked?
« Reply #68 on: January 20, 2014, 05:31:13 pm »
Aaaaand again, this time with Chrome 32.0

Here is the browser history:


And, next story, asked a friend of mine who has a lot of knowledge with servers/databases etc., he googled "adrenalinex", clicked on link and got also redirected to:
[spoiler=Don't click link]http://saj9j6p2dg38fo9y69jhnlp.blognotu.com/index.php?y=dXFrb3NsaT1jaHNtJnRpbWU9MTQwMTIwMTUxNDgwNDU2MjQ4MSZzcmM9MTMmc3VybD1hZHJlbmFsaW5leC5jby51ayZzcG9ydD04MCZrZXk9RkE1ODJFOTYmc3VyaT0v[/spoiler]

Edit: After browsing the forum for some minutes now, I get 50 % of the time "no data recieved" messages when clicking a forum link.
« Last Edit: January 20, 2014, 05:36:16 pm by nero »

Offline Troublemaker

Re: Has website been hacked?
« Reply #69 on: January 20, 2014, 06:04:23 pm »
Edit: After browsing the forum for some minutes now, I get 50 % of the time "no data recieved" messages when clicking a forum link.

Same here, I whether get that message or redirect to some of already mentioned pages...

Offline [RSD]Seoson

Re: Has website been hacked?
« Reply #70 on: January 20, 2014, 06:09:28 pm »
Hello guys,

I've just signed up because "nero" asked me if I could investigate what's happening with your forums (And I loved AX on GTA:U). I can confirm that the website is randomly redirecting me to different sites.

One example:
Code: [Select]
http://saj9j6p2dg38fo9y69jhnlp.blognotu.com/index.php?y=dXFrb3NsaT1jaHNtJnRpbWU9MTQwMTIwMTUxNDgwNDU2MjQ4MSZzcmM9MTMmc3VybD1hZHJlbmFsaW5leC5jby51ayZzcG9ydD04MCZrZXk9RkE1ODJFOTYmc3VyaT0vDO UNDER NO CIRCUMSTANCES OPEN UP THIS LINK IF YOU DON'T KOW WHAT YOU DO!

That happened while accessing the main website, so it seems that if something is going wrong not only your forums are affected. Also I can confirm that the webserver interrupts my connection sometimes.

Without knowing further details - I will need some time to reproduce and capture what is going on -  I would highly suggest verifying the binaries of your webserver if you have access to them or contact your hosting provider to do so.
I've recently red about black hats doing exactly the same as described here: Changing the server binaries and randomly redirecting none admins.

I will update my post or push this thread when I've got anything new.

Best regards,
Seoson
« Last Edit: January 20, 2014, 06:12:11 pm by [RSD]Seoson »

Offline [FSR]Ush

  • Admin
  • Posts: 13,449
  • Aart
    • View Profile
Re: Has website been hacked?
« Reply #71 on: January 20, 2014, 06:34:52 pm »
Also admins are having redirecting problems here.

Offline [MAF]Epoxi

Re: Has website been hacked?
« Reply #72 on: January 20, 2014, 06:54:20 pm »
Stopped happening for a while but happening again for me too:


Offline [LSR]Jalicno

  • Admin
  • Posts: 12,384
    • View Profile
Re: Has website been hacked?
« Reply #73 on: January 20, 2014, 07:05:13 pm »
Also admins are having redirecting problems here.
As i wrote in upper post,doesnt matter who you are admin or regular user. I am having same problem on LSR forum. You should check your forum aswell to make sure mooman contact KJ with full list of details if same stuff happens on yours cause i am pretty sure you use clean SMF theme without any add-on if am correct  ;)

Offline [FSR]Ush

  • Admin
  • Posts: 13,449
  • Aart
    • View Profile
Re: Has website been hacked?
« Reply #74 on: January 20, 2014, 07:41:25 pm »
I didn't have problems on my page yet, but I am not much around there. I will check more often from now on, to see if there's any problem as well.
« Last Edit: January 20, 2014, 07:44:46 pm by [FSR]Ush »