PDA

View Full Version : What is this?(strange referer)


cockhungryhoes
2007-06-02, 05:15 PM
I was reading over my stats today, for my site cockhungryhoes.com and I noticed this. http://www.cockhungryhoes.com.paidiji.cn/
What is that?

virgohippy
2007-06-02, 06:04 PM
paidiji.cn with a few subdomains tacked on in the back?

cockhungryhoes
2007-06-02, 08:46 PM
Ya now I happen to be doing something else and noticed that in my source code at the bottom of the page, was a bunch of code with ads for viagra, and img scr="http://www.thehun.com" I deleted that. I am now looking for it on other pages. I guess my ftp was hacked. I change that password freq.

cockhungryhoes
2007-06-02, 08:47 PM
This was the code I deleted

<center><table border=0 cellspacing=2 cellpadding=2 width=80%><tr><td align=center width=50%><a href="http://www.thehun.net"><img src="thehun_net.gif" border=0 alt="thehun.net" /></a></td><td align=center><table cellpadding=4 cellspacing=1 bgcolor=black><tr><td bgcolor=red align=center><font size=2><font color=white><b>Girls performing <br /> <a href=http://www.anal2extreme.com>Anal Gaping </a><br /> <a href=http://www.anal2extreme.com>Anal to mouth </a><br /> <a href=http://www.anal2extreme.com>Anal dildo</a></b></font></font></td></tr></table></td></tr></table><center><table border=0 cellspacing=2 cellpadding=2 width=80%><tr><td align=center width=50%><a href="http://www.thehun.net"><img src="thehun_net.gif" border=0 alt="thehun.net" /></a></td><td align=center><table width=175 border=2 cellpadding=3 cellspacing=0 bordercolor=#FF3300 bgcolor=#FFFFFF><tr> <td><div align=center><font size=2 face=Comic Sans MS><a href=http://www.viagra-market.com><strong>Viagra Online</strong></a><br /><font color=#FF0000>Cheapest Viagra <br />Buy it Online Now</font><br /><a href=http://www.viagra-market.com>Buy Viagra Online</a></font></div></td></tr></table></td></tr></table></center></center>

Nothing looks like malware or anything its just I didn't write it, and didn't put it there. Never had that happen before. I am asumming it's just some sort of back link spam. I am more worried about my FTP, and getting flagged for hiddin text.

Allfetish
2007-06-11, 03:57 AM
I was reading over my stats today, for my site cockhungryhoes.com and I noticed this. http://www.cockhungryhoes.com.paidiji.cn/
What is that?

Might be referrer spam. One form of it is sending fake hits to a page so the webmaster will see it then click on the site to investigate (as you and I did). I went to that page and noticed what looks like stats. It appears they are trying to get webmasters to sign up to that program using their affiliate code.

With the crap placed on your page, that looks like backlink spam to me. If there is no commenting system or such, yes, it looks like you got hacked. Changing your password may help, but there are many ways they may have gotten in. If you do not have a dedicated box, I would tell your host about this. Check you linking codes to sponsors especially and view source on many pages to check for adware or such that may be getting sent to your surfers.