[PPRAANet] Web Site

[Eric - N0EHX]

That's a key bit of information right there.  Typically this is seen in
what's called Pharma Hacks.  It's not as bad as it sounds, but it's on the
server side (ppraa site itself).  Have the webmaster do some searches on
pharma hack / pharmacy hack and there's a lot of detail on where to look.

Basically for those that are interested.  It's a way to boost the SEO
rating of a "questionable site" in Google by getting fake or accidental
clicks into it.  Something on the server side (ppraa server) looks at the
referrer header and if they come from Google, it redirects them to the
pharma site.  If they don't come from Google, they get the regular and
expected site.

Typically this is seen in the .htaccess files on the web server, but can be
elsewhere as well.  Change the site passwords, including any FTP access,
and clear out the redirect code when found.

--
73,

Eric - N0EHX


*Sent with Shift
<https://tryshift.com/?utm_source=SentWithShift&utm_campaign=Sent+with+Shift+Signature&utm_medium=Email+Signature&utm_content=General+Email+Group>*


On Tue, Mar 16, 2021 at 8:03 PM Warren Volz <warren at warrenvolz.com> wrote:

> Steve,
>
> I’m having your issue as well but only when I use google to search for
> ppraa. If I type in the website ie: ppraa.org it works fine.
>
> -Warren
>
> > On Mar 16, 2021, at 3:17 PM, Steve KT0DX <kt0dx at q.com> wrote:
> >
> > Did what you suggested but it still goes to the drug web site.....NO
> JOY!
> >
> > Steve
> >
> >> On 3/16/2021 20:32, K3ILC wrote:
> >> Try this on the affected PC Steve (assuming it's running Windows):
> >>
> >> Open up a Command Prompt Window.
> >> Type in ipconfig /flushdns   (There's a space after ipconfig)
> >> Press enter
> >> If successful, Command Prompt should report:  "Successfully flushed the
> DNS Resolver Cache"
> >> Then type in "exit" to exit Command Prompt.
> >>
> >> When your type in the URL for a web site, your PC has to use a server
> to tell it what the IP is for the web site.
> >> These look ups get stored in your PC's DNS cache (so your PC doesn't
> have to look up the IP every single time).
> >> You may have a malicious entry in your DNS cache for ppraa.org  --
> this will clear it, if that's the case.
> >>
> >> 73
> >> Jim K3ILC
> >>
> >> BTW ppraa.org works OK on my PC.
> >> ______________________________________________________________
> >> PPRAANet mailing list
> >> Home: http://mailman.qth.net/mailman/listinfo/ppraanet
> >> Help: http://mailman.qth.net/mmfaq.htm
> >> Post: mailto:PPRAANet at mailman.qth.net
> >>
> >> This list hosted by: http://www.qsl.net
> >> Please help support this email list: http://www.qsl.net/donate.html
> >
> > --
> > This email has been checked for viruses by AVG.
> > https://www.avg.com
> >
> > ______________________________________________________________
> > PPRAANet mailing list
> > Home: http://mailman.qth.net/mailman/listinfo/ppraanet
> > Help: http://mailman.qth.net/mmfaq.htm
> > Post: mailto:PPRAANet at mailman.qth.net
> >
> > This list hosted by: http://www.qsl.net
> > Please help support this email list: http://www.qsl.net/donate.html
> ______________________________________________________________
> PPRAANet mailing list
> Home: http://mailman.qth.net/mailman/listinfo/ppraanet
> Help: http://mailman.qth.net/mmfaq.htm
> Post: mailto:PPRAANet at mailman.qth.net
>
> This list hosted by: http://www.qsl.net
> Please help support this email list: http://www.qsl.net/donate.html