• mtsifoodbank

    (@mtsifoodbank)


    Hi

    Our website mtsifoodbank.org is displaying foreign content and I cannot login to the admin back end mtsifoodbank.org/wp-admin anymore, instead I am being forwarded to this site:

    [ Malware URL deleted ]

    Please advise.

    Thank you!

Viewing 5 replies - 16 through 20 (of 20 total)
  • kmessinger

    (@kmessinger)

    https://who.godaddy.com/whoisstd.aspx?domain=jordanshoesreal.com&prog_id=GoDaddy will show you the information on Jordan Shoes.

    I don’t know what these entries mean
    Update Date: 2015-03-31T15:30:17Z
    Creation Date: 2015-03-29T05:51:56Z
    but it initially looks someone messed up the the name servers or some record.

    Thread Starter mtsifoodbank

    (@mtsifoodbank)

    I will try the ftp loophole, thank you!

    The domain info looks like a scam to me 🙂

    kmessinger

    (@kmessinger)

    I hope that works for you. When I scanned all your javascripts about half of them were in Chinese. Good luck and please keep us posted.

    The whois records show your name then everything about Jordan Shoes. That is why I think it was done at a higher level than most hacks.

    wslade

    (@wslade)

    ICANN shows the owner of MTSIFOODBANK.ORG is Realjordans coltd

    Thread Starter mtsifoodbank

    (@mtsifoodbank)

    The registry entry changed at some point during all of this and we do not know why. The domain was renewed in February by us but it was on 3/22 when things started to go south. Thank you for the support, I will keep you posted!

Viewing 5 replies - 16 through 20 (of 20 total)

The topic ‘We've been hacked’ is closed to new replies.