My website started to redirect me to a "virus" page

0

Hello. I have a website hosted on amazon lightsail. the domain i use is from DNHost and the name of my website is https://www.musicanddanceproject.com/ . The problem im facing is that after almost 5 months of the site working perfectly all of a sudden it started redirecting our clients and everyone using the link to connect to the site to a new ad page with a fake iphone winning competition. i cant see any changes to the DN host or the lightsail website that i dont recognise and i dont have a clue what the root of the problem might be. anyone have any idea where should i start looking?

leo
asked 3 months ago150 views
2 Answers
0

Checking the URL you provided i could land on the correct page. I would say first you need to review your web server logs for any unusual activity or errors. Check access logs to identify the source of the redirects also run a malware scan on your Lightsail instance. Malware may have been injected into your website's files. Verify that your DNS settings at your domain registrar (DNHost) have not been tampered with and ensure that the DNS records point to the correct IP address of your Lightsail instance.

Hope it clarifies and if does I would appreciate answer to be accepted so that community can benefit for clarity, thanks ;)

profile picture
EXPERT
answered 3 months ago
  • thanks for the quick answer. I checked everything and everything seems normal to me. the only thing that is weird is that I runned an anti malware plugin called Wordfence. here is the full log from it http://3.122.165.88/?_wfsf=viewActivityLog&nonce=9618be3759 the problem is that it finds a lot of "malicious" files and the all end in .htaccess. i dont know exactly what that is but i figured it might be normal and its just the Wordfence getting confused because the file doesnt match the original due to some change that happened to it from another plugin or something. im a bit lost to be honest i cant find anything wrong. ALSO i forgot to mention that this thing happens if i send the link ( https://www.musicanddanceproject.com/ ) from instagram or messenger to another person and they open it from there its like its redirecting the user to either a fake anti ddos website that wants you to allow notifications (virus or somehting i dont know) or to the fake iphone contest. so yeah thats all i know maybe u can understand the problem more. try sending the link to yourself the same one you said that its working through instagram or facebook and you will see. i tryed through email discord skype viber and its no difference. when i use messenger or instagram it redirects to the ads. i dont know if thats relevant to the problem but it might help Sorry for the long text im just trying to explain as good as i can

0

bump :'( helpp

leo
answered 3 months ago

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.

Guidelines for Answering Questions