Support » Plugins and Hacks » Think my blog has been hacked

Think my blog has been hacked

  • Hello,

    I think my blog http://www.carbonneutraltourism.co.uk has been hacked. I am not very ‘tech savvy’. To check if I’ve got a problem I signed up Google alerts using the key alert terms: viagra OR cialis OR levitra OR Phentermine OR Xanax site:carbonneutraltourism.co.uk.

    Recently I got the following alert response: Carbon Neutral Tourism | Richard Linington (http://www.carbonneutraltourism.co.uk/author/admin/)
    buy cialisbuy cialisBuy Cialisbuy cialisbuy accutanebuy acompliabuy cialisbuy levitrabuy viagrabuy cialis onlinebuy viagra onlinebuy levitrabuy acompliabuy …

    When I visited the page I couldn’t find these words (I used view page source) but still couldn’t find them.

    Any thoughts about sorting this out?

    Thanks for your time and help.

    Kind regards,


Viewing 5 replies - 1 through 5 (of 5 total)
  • a cpl things, without even looking at your live site.. Here is a google cached page:

    view the source of that page, and search for cialis, and you’ll see this:

    <b style='position:absolute; overflow:hidden; height:0; width:0;'><a href="http://www.nola.com/forums/profile.ssf?nickname=alson">buy <b style="color:black;background-color:#a0ffff">cialis</b></a><a href="http://www.nola.com/forums/profile.ssf?nickname=cialisbuy">buy <b style="color:black;background-color:#a0ffff">cialis</b></a><a href="http://www.nola.com/forums/profile.ssf?nickname=levitrabuy">buy levitra</a><a href="http://www.nola.com/forums/profile.ssf?nickname=orderlevitra">buy levitra</a><a href="http://www.nola.com/forums/profile.ssf?nickname=buypropecia">buy propecia</a><a href="http://www.nola.com/forums/profile.ssf?nickname=propeciaa">buy propecia</a><a href="http://www.nola.com/forums/profile.ssf?nickname=somabuy">buy soma</a><a href="http://www.epinions.com/user-somabuy/show_~View_Profile">buy soma</a><a href="http://www.epinions.com/user-levitra-cheap/show_~View_Profile">buy levitra</a><a href="http://aulavirtual.unc.edu.ar/moodleffyh/moodle_ffyh.org/user/view.php?id=4423&course=1">buy <b style="color:black;background-color:#a0ffff">cialis</b></a><a href="http://aulavirtual.unc.edu.ar/moodleffyh/moodle_ffyh.org/user/view.php?id=4424&course=1">buy propecia</a><a href="http://aulavirtual.unc.edu.ar/moodleffyh/moodle_ffyh.org/user/view.php?id=4425&course=1">buy levitra</a><a href="http://aulavirtual.unc.edu.ar/moodleffyh/moodle_ffyh.org/user/view.php?id=4426&course=1">buy soma</a><a href="http://www.drama-education.com/site/user/view.php?id=5747&course=1">buy <b style="color:black;background-color:#a0ffff">cialis</b></a><a href="http://www.drama-education.com/site/user/view.php?id=5748&course=1">buy propecia</a><a href="http://www.drama-education.com/site/user/view.php?id=5749&course=1">buy levitra</a><a href="http://www.drama-education.com/site/user/view.php?id=5750&course=1">buy soma</a><a href="http://moodle-eduhi.bmbwk.gv.at/brg_reutte/user/view.php?id=770&course=1">buy <b style="color:black;background-color:#a0ffff">cialis</b></a><a href="http://moodle-eduhi.bmbwk.gv.at/brg_reutte/user/view.php?id=771&course=1">buy levitra</a><a href="http://moodle-eduhi.bmbwk.gv.at/brg_reutte/user/view.php?id=772&course=1">buy propecia</a><a href="http://moodle-eduhi.bmbwk.gv.at/brg_reutte/user/view.php?id=773&course=1">buy soma</a></b> <!-- 9a3aab10ee58e6350b8ab5621e26886d --></p>

    that’s hacked.

    Now, your current theme is different than whats in the cached page, and looking at the source of whats live, youre theme isnt showing symptoms of being hacked.

    Thats not to say that your site isnt compromised right now, it may very be. It was at one point, after all.

    Hi Whooami,

    Many thanks for your help. I’ve visited the page and removed the hacked code next to the photo itself.

    Hopefully, that will sort the problem out. I was wondering how should I check if the site has been hacked again?

    All the best,


    How does a blog get hacked like this in the first place?

    Hopefully, that will sort the problem out.

    it wont. youve removed the symptom, not the cause.


    I was wondering how could I remove the cause of the problem?

    Many thanks


Viewing 5 replies - 1 through 5 (of 5 total)
  • The topic ‘Think my blog has been hacked’ is closed to new replies.