Website with illegal content...

Gimpymoo · 4 Mar 2016 at 23:39

While searching for a nightie for my daughter, my wife came across a google link which to her looked OK, the root domain was...

http://www.vanishinghighstreet.com/

The link however shown very disturbing content but still showing the above URL in the address bar.

When manually copying the URL from the Google search page, it brings up a 404 error on the domain, HOWEVER, when clicking the link on the Google search page, the content appears. Google appears to be adding &usg syntax to the URL for some reason which is causing the problem.

I reported the site and content to iwf.org.uk

I also tweeted the guy whose name, face and Twitter account is plastered all over the domain to let him know.

He then tweets me with:

Bill Grimsey @Billgrimsey

I thought I was doing the responsible thing and not just turning a blind eye?

Finners · 4 Mar 2016 at 23:52

ummm I'm not really sure what whats going on here.

I ciick that link and it takes me to the correct site with no apparent illegal content.

Gimpymoo · 5 Mar 2016 at 00:00

www.vanishinghighstreet.com is the root domain.

I am not going to post the actual link to the content as purposefully posting it here could get me into something I do not want to be involved in and also a ban from the forum.

On Holiday · 5 Mar 2016 at 00:00

Gimpymoo · 5 Mar 2016 at 00:04

Any idea what is happening with the URL when you click it in Google?

The &usg syntax is what is causing it to redirect but somehow retain the root URL? Is it similiar to metadata? Is it a hack?

Gimpymoo · 5 Mar 2016 at 00:09

Archeum said:
I found it... (via your tweet)
This is why WordPress and plugins need to be kept up to date with security hardening too!

Hard to believe that guys worth money.

The thing is, his name and face is all over the site.

It looks like the site was setup by his book publisher.

http://www.filamentpublishing.com/

Oh my lord, just look at that site.

The WHOIS points to:

http://chrisdaycreative.com/

Facepalm is not enough.

Mynight · 5 Mar 2016 at 00:37

Lol what kind of response is that...

Rozzy85 · 5 Mar 2016 at 02:12

Looks like he's a victim of referral spam.

Gimpymoo · 5 Mar 2016 at 02:55

Rozzy85 said:
Looks like he's a victim of referral spam.

How does that work?

mtalk · 5 Mar 2016 at 06:50

Might be done via .htaccess file?

Gimpymoo · 5 Mar 2016 at 11:07

mtalk said:
Might be done via .htaccess file?

That is possible.

When searching for the domain with an invalid sub directory, the same happens.

Definitely a lesson on how NOT to secure a website

Would love to know what the backdoor is.

Gimpymoo · 5 Mar 2016 at 11:29

He now says:

What is he on about? Hoax? He gets lots of these then?

Mynight · 5 Mar 2016 at 12:59

Sue him for slander

.

Wonder why target such a site with that content.

Wouldn't modifying htaccess require server permissions? Or is it the case the htaccess hasn't been set up correctly? Unless I'm getting the wrong end of the stick here.

d_brennen · 5 Mar 2016 at 13:04

I remember a LOOOONG time ago a mortgage broker/estate type place had their website plastered with (really) harcore porn and their slogan changed to something like "tie you down, **** you up!".

E: What was the illegal content?

Rroff · 5 Mar 2016 at 13:06

Gimpymoo said:
What is he on about? Hoax? He gets lots of these then?

Dunno context in this case - but sites with reasonable levels of traffic or more get targeted by all sorts of rubbish - when I was hosting the backend for a load of gaming services was getting people trying on all sorts of stuff (largely scams/attempts to hijack the domains).

Gimpymoo · 5 Mar 2016 at 19:16

d_brennen said:
I remember a LOOOONG time ago a mortgage broker/estate type place had their website plastered with (really) harcore porn and their slogan changed to something like "tie you down, **** you up!".

E: What was the illegal content?

The very dark side of the internet

I guess he has done something...

http://www.vanishinghighstreet.com/

Forbidden

You don't have permission to access / on this server.

I want to know what he was going to say to Twitter?

Rroff · 5 Mar 2016 at 19:19

Not sure why you messaged the person in question (or posted about it here until it was resolved) - innocent or not the best thing to do would be to contact relevant law enforcement and/or IWF as you did and leave it at that - if he was involved in something you've now given him a heads up to clear his tracks.

Gimpymoo · 5 Mar 2016 at 19:19

Mynight said:
Sue him for slander .

Wonder why target such a site with that content.

Looking at the site when it was up, I would say it had a backdoor the size of a castle entrance.

ZombieFan · 12 Mar 2016 at 09:10

Gimpymoo said:
He now says:

What is he on about? Hoax? He gets lots of these then?

I think he's apologing to you for his previous tweet. He presumed your tweet was a hoax, since he get's a lot of them.

And yes, you were doing the responsible thing!