Hacked website ?

[CharlieH]

If the main url of a website has somehow been "re-directed" to a chinese casino, where would this "infection" be ?

Would deleting the whole thing and re-publishing solve it ?

Have tried deleting the main index page and re-publishing but makes no difference.

Any help or guidance would be appreciated.

[noikrit]

Sorry Charlie , no can help .... But Luv your Avatar .. Smoking Hot !! ... Good Luck !!

[Guest]

If you are using apache2 or similar on linux,

Check the .htaccess file on your website root.

Check the apache configuration files /etc/apache2/

- apache2.conf

- sites-enabled/*

- conf.d/*

Check that there is no other web-servers or other applications which answer to the port 80.

Edited December 26, 2013 by Guest

[CharlieH]

If you are using apache2 or similar on linux,

Check the .htaccess file on your website root.

Check the apache configuration files /etc/apache2/

- apache2.conf

- sites-enabled/*

- conf.d/*

Check that there is no other web-servers or other applications which answer to the port 80.

Appreciate the reply but unfortunately thats way beyond me.

[RichCor]

In order to find the cause, you need to isolate what component of the server system has been compromised and contains or pushes the redirect.

DNS

WebServer control software

html, or php (or other dynamic language routines)

DBMS (mySQL)

If your url goes directly to the redirected site then it might just be a dns issue and not a server issue.

If the site partially loads, then redirects then it could be in the page code (html, php, etc.), the DataBase (mySQL) if your site uses one, or in the WebServer software.

I would rename (or delete) your index page and put a simple html code in it's place, clear the cache on your web browser, then try to access the site. It should only serve the new html page and not be redirected. This would tell me to focus my efforts on those pages and mySQL (if used) that the main page accesses to display the page.

[Somtamnication]

Check in cpanel (if you use that to admin the site) and see if any redirects are there.

Have you been able to duplicate it in 3-4 different browsers? Maybe your browser is hijacked, not your site.

[rakman]

I think the OP is getting a Chinese site instead of his favorite site.

This could be from DNS redirection or hijacking, or you have a virus that is directing to the Chinese Casino site.

Check your C:\Windows\system32\drivers\etc\hosts file if anything amiss.

check you DNS server selection (open elevated cmd window) and run ipconfig /all check for the proper external dns server.

try a different DNS server to see if the problem continues.

Give a little more information on this site so the problem can be isolated.

[Aachen]

If it is YOUR website, check the root directory for

index.htm

index.html

index.php

etc.

Do you have more than one? Check them, delete the wrong one.

[CharlieH]

Thanks to everyone who responded. The problem has been resolved.

Just for info,

The main index.html had a hosted geo redirect java script, it was their service that had been corrupted, when their script was removed from the site, the problem was removed.