The New And Improved Unofficial R65 Forum V2

General Category => Chit-Chat => Topic started by: JPSpen on October 04, 2012, 09:53:29 AM

Title: Main Page Redirected
Post by: JPSpen on October 04, 2012, 09:53:29 AM

When I try to go to the main page,  www.bmwr65.org  I get redirected to advertising...
Tries to get me to download something that looks like a movie player..
If I go to the forums with a longer url, Things are ok...
Looks like the home page has been infected...

John

Title: Re: Main Page Redirected
Post by: Lucky_Lou on October 04, 2012, 10:03:21 AM

Same here cannot get rid of it it links here to what looks like a Tesco page but its a scam as it will start charging  £3 per text if you give it your moble(cell) details you cannot back up to the main page i had to over ride it and log in again.
Lou

Title: Re: Main Page Redirected
Post by: Bob_Roller on October 04, 2012, 10:41:56 AM

I got that happen yesterday morning, hasn't been back since .

Title: Re: Main Page Redirected
Post by: k_enn on October 04, 2012, 10:49:16 AM

I got it just now using my usual link.  Redirecting to dsparking.com, which my anti-virus indicates is trying to download a trojan redirecter.  My anit-virus would not allow the connection.  

According to my antivirus, I was being redirected to:

http://dsparking.com/?epl=xYYmSQOQP0M-m6ODfyYeAYB-YpdiSCicIrmLny5AjLdG1JkknNcv5Qg3BD3MpcucbYU1x9TEDJx5k5AHWqpJ0-LZBfFu3wj5D2WqvKSU2h94zBCcRoUeZBWNZaz99NEIjnaC77jZBfo4ufvhPaerdSTOteowSlBucK2DgCVOSIgrZ6A21dBaukflkd20bUbWssnGEPWUTdMgTNPUjLIJjUx60jYVAQAAqIcYGsLQ0BiRACAg_v-_MEDQkvL_CQEAQIDfCgAA_cQuxVlTJllBMTZoWkK0AAAA8A


I got here safely by following a slightly different link from google.  

Title: Re: Main Page Redirected
Post by: nhmaf on October 04, 2012, 11:07:56 AM

I believe that a spammer is spoofing on our domain name through one or more DNS servers, or has planted something on the system which is hosting our site.

If you put in the full name "www.bmwr65.org/"  (note the slash - it is needed) you should not get the redirect.

I believe it will take Justin or Suraklyn to contact the hosting provider to work this out.   I don't believe that this site/forum is compromised, only that some @#$%^-tards have messed with the paths to get to it.