My blog has been possibly hacked

• 

  r3553n191217 · Member · May 12, 2020 at 5:10 pm

  • Copy link
  • Add topic to favorites

  I checked my latest post that published this morning, and after a few seconds the browser forwarded to this website:

  https://ssd.saaviwk.site/AwFVifw8ppcNkk7VAEke0xCJeYz9VS1kJj6vZwWq5e9k0yBvvKhvBjL5s-cvjCK5WZyu7ZI560vvEYYiOCJCPIHZaZnaJxci-L73o_aNgSjgsA==?p2=918296a2384f392a28c7d88538e83dc3&ci=wvu4t97icscbog0vhftvsnpm&n3er=m8eayA==&uu=lIaJhrzOpHZ6iH54dXaPfXx4g3s=

  …Please help, I do not want this to be happening at all. I think my blog has been tampered with.

  Thank you

  Dustin

• 

  obt28 · Member · May 12, 2020 at 5:14 pm

  • Copy link

  Hello @r3553n191217 –

  What is your website address?

  Have you tried accessing your blog from another web browser to see if the issue persist?

  Best,

• 

  r3553n191217 · Member · May 12, 2020 at 6:40 pm

  • Copy link

  obt28,

  Have only had it happen while using Safari browser on desktop, couldn’t get Firefox to do it. It doesn’t happen on each viewing, only randomly. Maybe the site hasn’t been tampered with, but an ad is loading that may be questionable?

  It’s a free blog, so I can’t get in and look through the files and can’t disable the ads.

  The address is: mellowdork.home.blog

• 

  staartmees · Member · May 12, 2020 at 6:47 pm

  • Copy link

  It’s unlikely a wordpress.com got hacked. Check your Safari browser for malware to solve this problem.

• 

  r3553n191217 · Member · May 12, 2020 at 6:51 pm

  • Copy link

  startmees,

  Will give that try, thanks

• 

  obt28 · Member · May 12, 2020 at 7:46 pm

  • Copy link

  Hello @r3553n191217 –

  In addition to @staartmees this could be malware on your Safari browser. Please try another browser to confirm.

  Best,

• 

  r3553n191217 · Member · May 12, 2020 at 9:39 pm

  • Copy link

  Thanks obt28,

  Went through and cleared website data and cleared cache in safari as suggested by a few message boards to ‘remove malware’. Loaded the blog a few times and once it was forwarded to the questionable address again.

  Thanks for the continued help, appreciate it!

• 

  obt28 · Member · May 12, 2020 at 9:42 pm

  • Copy link

  Happy to help @r3553n191217 glad it’s working again as expected.

• 

  r3553n191217 · Member · May 12, 2020 at 9:51 pm

  • Copy link

  After loading my blog, I checked Safari’s ‘manage website data’ preference panel, this address was saved to the browser data again ‘ssd.saaviwk.site’. This is the suspect address that it gets forwarded to. Neither Firefox or chrome are affected, only Safari gets forwarded to the suspect site.

• 

  obt28 · Member · May 12, 2020 at 9:55 pm

  • Copy link

  @r3553n191217 You need to scan your Safari browser for malware and remove it. It would only take some time before it affects the other browser.

• 

  r3553n191217 · Member · May 12, 2020 at 10:01 pm

  • Copy link

  What is the preferred browser scanner or method to use, I don’t know much about it. Thanks

• 

  obt28 · Member · May 12, 2020 at 10:06 pm

  • Copy link

  @r3553n191217 don’t know any specifically, but you can just do a little bit of Google searching on how to remove malware from your Safari browser.

• 

  r3553n191217 · Member · May 12, 2020 at 10:07 pm

  • Copy link

  Cool, will read more about it. What I had read and did this afternoon hasn’t solved the issue. Will keep trying. Thanks

• 

  obt28 · Member · May 12, 2020 at 10:09 pm

  • Copy link

  I hope you have it resolved soon.