Have you ever seen this? is it malware?

dodoboy · Mar 10, 2020

come on man , if you still get a virus in this era , you must be very (fill yourself) .... now there is vmware , sandboxie , how can one get an virus?????????????????????????????????i myself do not use antivirus ever!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

Joe 10 · Mar 10, 2020

BbHhWwVM said:
Might be there. But, are you sure he can write a rule to 404 these pages?

If I understood right, he has unlimited or a lot of pages 301 to his website and he do not know the exact URL of almost any of em.

Can he still write a rule in this situation? If so, please share it.

This is actually a very good point.

I can enter this URL:

mywebsite.com/dubai-club-dubai-club-dubai-club/best-f

and it will redirect to a page on my site.

Or I can write:

mywebsite.com/football-football-football-football/best-f

and it will redirect

it doesnt matter what I write it will redirect to a page on my site.

Danieljarto · Mar 10, 2020

avast saying me that is "Phising"

Index Sites · Mar 10, 2020

Have you tried running a full WordFence sensitive scan? I'm not sure, but I think I had the same problem as you a while ago just slightly different I had a bunch of spammy weird links that pointed to my site. The links didn't exist on my site but would still appear on my domain if I clicked them.

Joe 10 · Mar 10, 2020

Index Sites said:
Have you tried running a full WordFence sensitive scan? I'm not sure, but I think I had the same problem as you a while ago just slightly different I had a bunch of spammy weird links that pointed to my site. The links didn't exist on my site but would still appear on my domain if I clicked them.

Hey bro. Did wordfence found malware in your case when this happened to you?

Index Sites · Mar 10, 2020

Joe 10 said:
Hey bro. Did wordfence found malware in your case when this happened to you?

Yes, plenty from a theme I downloaded from a site called themeslide or freethemes something like that. I used the theme on a subdomain I created for testing and that was all the malware needed to infect the main domain and build a shit ton of spammy links before I noticed. Lesson learned to stay away from shit nulled themes and plugins

blackwalker · Mar 10, 2020

Joe 10 said:
This is actually a very good point.

I can enter this URL:

mywebsite.com/dubai-club-dubai-club-dubai-club/best-f

and it will redirect to a page on my site.

Or I can write:

mywebsite.com/football-football-football-football/best-f

and it will redirect

it doesnt matter what I write it will redirect to a page on my site.

Like I said in my prevous posts you can stop that action of canonical redirects as that is essentially what it is doing. They are taking advantage that you have some plugin that is doing a canonical redirect and using that to link to their advantage. To stop it from redirecting to your site, albeit a negative seo campaign or something else, then you can just stop the canonical redirects in that path.

There is a simple one line code you can add to your theme functions.php or some other place to disable canonical redirect from loading:

Code:

remove_filter('template_redirect', 'redirect_canonical');

A 301 Redirect signals to the search engine that the page has been moved permanently, remove the page from the index and pass any acquired SEO credit to the new page. A Canonical Attribute signals to the search engine that the document has multiple versions of the page (or its content).

https://www.dev4press.com/blog/wordpress/2015/canonical-redirect-problem-and-solutions/

RebeccaThomas · Mar 10, 2020

Joe 10 said:
If I type a URL like this:

website.com/any-random-url-here/
it will give 404

but if I type a URL like:
website.com/any-random-url-here/and-here-another-piece/
it will 301 to random pages on my site

I also thought it's about some configuration thing. Do you know what I could troubleshoot? I scanned my site with Virustotal.com and it comes clean.

If there is no plugin that's causing the issue I wonder if the problem is simply in your .htaccess?

RAP · Mar 10, 2020

BbHhWwVM said:
Might be there. But, are you sure he can write a rule to 404 these pages?

If I understood right, he has unlimited or a lot of pages 301 to his website and he do not know the exact URL of almost any of em.

Can he still write a rule in this situation? If so, please share it.

Regular expressions are here to help you....

Joe 10 · Mar 10, 2020

blackwalker said:
Code:

remove_filter('template_redirect', 'redirect_canonical');

https://www.dev4press.com/blog/wordpress/2015/canonical-redirect-problem-and-solutions/

Hey mate. I put this and it totally worked. But now I removed it because I might have set up other "good" canonical redirects on this website in these past years (that I forgot about now) so this code might fuck up the good canonicals. Like for example website.com/home/ canonicalized to website.com and probably there is more with attachments page URLs canonicalized to attachment URL by yoast.

Is there any way to see all the canonical currently going on a site so I can approve the canonical I set and forbid the others?

Anyway at least I know it's not malware. Thanks everyone.

blackwalker · Mar 10, 2020

Joe 10 said:
Hey mate. I put this and it totally worked. But now I removed it because I might have set up other "good" canonical redirects on this website in these past years (that I forgot about now) so this code might fuck up the good canonicals. Like for example website.com/home/ canonicalized to website.com and probably there is more with attachments page URLs canonicalized to attachment URL by yoast.

Is there any way to see all the canonical currently going on a site so I can approve the canonical I set and forbid the others?

Anyway at least I know it's not malware. Thanks everyone.

Try this

Code:

add_filter('redirect_canonical', 'my_redirect_canonical', 10, 2);
function my_redirect_canonical($redirect_url, $requested_url) {
  if (is_singular('get') {
    return $requested_url;
  } else {
    return $redirect_url;
  }
}

didiseo · Mar 10, 2020

If they generated that page on your domain, your WP is probably compromised.

Deactivating plugins won't do anything since they already found a backdoor to your site.

Check your website here and let us know the results: https://sitecheck.sucuri.net/

Joe 10 · Mar 10, 2020

blackwalker said:

Try this

Code:

add_filter('redirect_canonical', 'my_redirect_canonical', 10, 2);
function my_redirect_canonical($redirect_url, $requested_url) {
  if (is_singular('get') {
    return $requested_url;
  } else {
    return $redirect_url;
  }
}

Yes I saw this in the article you linked to. I just don't know how to use it for specific URLs.

didiseo said:
If they generated that page on your domain, your WP is probably compromised.

Deactivating plugins won't do anything since they already found a backdoor to your site.

Check your website here and let us know the results: https://sitecheck.sucuri.net/

I checked and it came out clean. I think @blackwalker was right.

darksoultrip · Mar 10, 2020

SirLouen said:
Are you sure that is not the anchor text like this:

https://example.com/fucking-bestiality-porn-horse/page

When someone searches this and ends up here

blackwalker · Mar 10, 2020

Joe 10 said:
Yes I saw this in the article you linked to. I just don't know how to use it for specific URLs.

I checked and it came out clean. I think @blackwalker was right.

Yeah it is just how canonicals are handled. How that code works is the 'get' function is just replaced with whatever type of request and this one, being a get request are most of them to retrieve the informaton. If you dm my your site I can use a HTTP status code checker on it to find the appropriate code. And it just goes into the functions.php like the other one. Hope this gets solved for you!

Have you ever seen this? is it malware?

dodoboy

Junior Member

Joe 10

Junior Member

Danieljarto

Regular Member

Index Sites

Regular Member

Joe 10

Junior Member

Index Sites

Regular Member

blackwalker

BANNED

RebeccaThomas

Junior Member

RAP

Senior Member

Joe 10

Junior Member

blackwalker

BANNED

didiseo

Regular Member

Joe 10

Junior Member

darksoultrip

Regular Member

blackwalker

BANNED

Main Menu

Marketplace

Making Money

BlackHat World