1. Advertising
    y u no do it?

    Advertising (learn more)

    Advertise virtually anything here, with CPM banner ads, CPM email ads and CPC contextual links. You can target relevant areas of the site and show ads based on geographical location of the user if you wish.

    Starts at just $1 per CPM or $0.10 per CPC.

HTTP and HTTPS lead to different sites.

Discussion in 'Security' started by Embrance, Feb 27, 2015.

0
  1. #1
    My WP site got hacked this morning,but I Have the CRemote in cPanel and restored everything.However there is something weird:
    While the http:// version works fine and point to the site and the content I have,the https:// version doesnt! while same domain (apparently) show an Arabian forum,probably the hackers.How do I fix this?I have no clue

    Thanks in advance.
     
    Embrance, Feb 27, 2015 IP
  2. PoPSiCLe

    PoPSiCLe Illustrious Member

    Messages:
    4,623
    Likes Received:
    725
    Best Answers:
    152
    Trophy Points:
    470
    #2
    Probably a DNS-setting that redirects anonymously (keeps the original domain name in the address bar) - check your DNS records (also check .htaccess and so on on your host)
     
    PoPSiCLe, Feb 27, 2015 IP
  3. PDD

    PDD Greenhorn

    Messages:
    67
    Likes Received:
    3
    Best Answers:
    0
    Trophy Points:
    23
    #3
    you should try to find the vulnerability as soon as possible. chances are they or someone else will just do it again.
     
    PDD, Feb 27, 2015 IP
  4. Embrance

    Embrance Well-Known Member

    Messages:
    192
    Likes Received:
    2
    Best Answers:
    0
    Trophy Points:
    103
    #4
    I changed the htaccess files and used a plugin to further secure the site.I looked into the DNS zone setting of cPanel and still nothing.
    Even when I deleted everything in the root folder of the site,where the index is along with others,It still redirects to the other site.
     
    Embrance, Feb 27, 2015 IP
  5. PoPSiCLe

    PoPSiCLe Illustrious Member

    Messages:
    4,623
    Likes Received:
    725
    Best Answers:
    152
    Trophy Points:
    470
    #5
    DNS hijacking? That's more advanced, though... are you absolutely sure you don't have any CNAME-settings or similar somewhere in the DNS-settings? Or... hm. You have https enabled - how is the security sertificate applied? I'd suggest reinstalling the SSL-sertificate (re-issue).
     
    PoPSiCLe, Feb 27, 2015 IP
  6. Embrance

    Embrance Well-Known Member

    Messages:
    192
    Likes Received:
    2
    Best Answers:
    0
    Trophy Points:
    103
    #6
    Still no luck.I dont know what happened.Dam it.
    Looked into cname settings,dns setting,everywhere.Also I never had a SSL certificate in the first place.
    The guys who did this must be really bored for sure.
     
    Embrance, Mar 1, 2015 IP