I.T help needed. Website re-directing from google
Discussion
A customer of mine had lost our contact number this week so did a google search for us, he then clicked the link to our website and it auto re-directs to what appears to be a website selling dodgy christian louboutin shoes! See: frontier-mail.co.uk
How the hell do i stop this from happening?? If our web address is typed in full then it works fine, it seems to be only re-directing from our website link on google
How the hell do i stop this from happening?? If our web address is typed in full then it works fine, it seems to be only re-directing from our website link on google
frontier-mail.co.uk isn't your domain, I guess, so what is yours - what did the client use as a search term ?
It's difficult to say what's happening without being able to look at the chain of events that follows the Google search.
ETA : It's more likely to be a problem at the customer's end, btw. There are some nasty bits of malware that modify browsers to hijack searches to do exactly what you describe.
It's difficult to say what's happening without being able to look at the chain of events that follows the Google search.
ETA : It's more likely to be a problem at the customer's end, btw. There are some nasty bits of malware that modify browsers to hijack searches to do exactly what you describe.
Edited by marshalla on Saturday 6th June 10:35
Unless you're Chinese, you don't own the .co.uk.
http://www.nominet.org.uk/whois/lookup?query=front...
Here's a funny thing. When I did the search the first time, it mentioned an address in England. Closed the tab, then went to do the search again and it gave me China.
PS frontiermail.co.uk is available. I'd grab that one as it's better without a hyphen. I'll give you 20 minutes to buy it for £10 otherwise I'll grab it and sell it to you for £1000.
Edit: Ah, did you forget to renew it? http://who.is/domain-history/frontier-mail.co.uk
http://www.nominet.org.uk/whois/lookup?query=front...
Here's a funny thing. When I did the search the first time, it mentioned an address in England. Closed the tab, then went to do the search again and it gave me China.
PS frontiermail.co.uk is available. I'd grab that one as it's better without a hyphen. I'll give you 20 minutes to buy it for £10 otherwise I'll grab it and sell it to you for £1000.
Edit: Ah, did you forget to renew it? http://who.is/domain-history/frontier-mail.co.uk
Edited by Hoofy on Saturday 6th June 10:44
We have had this a number of times - is your site running on Wordpress by any chance? If so, very, likely it has been exploited. Easiest fix is probably to re-install or upgrade Wordpress and ensure all plugins are up to date.
Once you have your site working again look at installing the WP all in one security plugin and setting it up, has been successful for us in stopping it happening again (touches wood)
Once you have your site working again look at installing the WP all in one security plugin and setting it up, has been successful for us in stopping it happening again (touches wood)
jcborden said:
We have had this a number of times - is your site running on Wordpress by any chance? If so, very, likely it has been exploited. Easiest fix is probably to re-install or upgrade Wordpress and ensure all plugins are up to date.
Once you have your site working again look at installing the WP all in one security plugin and setting it up, has been successful for us in stopping it happening again (touches wood)
No idea if its running on wordpress -WP, security plug in etc is like a foreign language to me! Once you have your site working again look at installing the WP all in one security plugin and setting it up, has been successful for us in stopping it happening again (touches wood)
The frontier-mail website is not ours this is the one our site re-directs to. Our client searched our company name which brings us up first on google, clicking the link to our site(from the google results page) then lands on the frontier-mail page.
I've done a whois search on our web address and it appears to be still registered with myself.
Site isn't running any of the obvious CMS. Domain registration and DNS are fine.
Someone's modified the static html to include some Javascript which detects the referrer and redirects if the browser has come via Google, Bing, Yahoo or AOL. They've also added a bit of script to the bottom of the page to hide a bunch of links to various sites in a lame attempt to perform SEO. As a result, the HTML won't pass validation.
I've sent a more detailed analysis and suggestions for remediation to the OP.
Someone's modified the static html to include some Javascript which detects the referrer and redirects if the browser has come via Google, Bing, Yahoo or AOL. They've also added a bit of script to the bottom of the page to hide a bunch of links to various sites in a lame attempt to perform SEO. As a result, the HTML won't pass validation.
I've sent a more detailed analysis and suggestions for remediation to the OP.
Gassing Station | Business | Top of Page | What's New | My Stuff