MarksScanners (Easier to Read Manuals) Hacked?

Status
Not open for further replies.

w2lie

New York DB Admin
Database Admin
Joined
Mar 2, 2004
Messages
1,644
Location
Long Island, NY
Not sure if this is the right forum to post this. I tried a search and it looks like the new forum doesn't sort the search results by date...

I tried to view a page on MarksScanners dot com today and it looks like he's either been hacked, lost control of the domain, or failed to renew.
All pages on his site redirect to an "Online Pharmacy".

Hopefully he sees this and realizes he has a small issue with his site.

I'm sure with Christmas a few days away there will be a few people looking for Easier to Read manuals for their new toys!

I copied the page if nobody wants to risk a click.
 

Attachments

  • Screen Shot 2018-12-23 at 1.15.30 PM.png
    Screen Shot 2018-12-23 at 1.15.30 PM.png
    193.5 KB · Views: 79

simmsrep

Member
Premium Subscriber
Joined
Nov 5, 2010
Messages
304
Location
Alton, VA
Are you sure you typed in the correct address. I just checked and it came up fine for me.
Mark's Scanners
I do see it says new.marksscanners though, hadn't noticed that before.
 

RaleighGuy

Member
Premium Subscriber
Joined
Jul 15, 2014
Messages
15,962
Location
Raleigh, NC
Definitely something is wrong, even a google search shows the pages are corrupted. Viagra anyone?

Screenshot 2018-12-23 13.23.56(2).png
 

w2lie

New York DB Admin
Database Admin
Joined
Mar 2, 2004
Messages
1,644
Location
Long Island, NY
Yah, that is strange. Looks like he moved everything over to a subdomain. When I googled MarksScanners or Easier to Read BCD(fill in the blank) Manual, Google shows the 'www' domain instead of the subdomain.

I'll see if I can contact him on the 'new' domain and give him the heads up.
 

w2lie

New York DB Admin
Database Admin
Joined
Mar 2, 2004
Messages
1,644
Location
Long Island, NY
No contact form on his site, so I've made a best guess at his e-mail address and hopefully he gets back to me.
 

w2lie

New York DB Admin
Database Admin
Joined
Mar 2, 2004
Messages
1,644
Location
Long Island, NY
I think it has something to do with leaving out the www or doing www. If you go to new.marksscanners.com it works.
Now that I've visited new.marksscanners.com once, everytime I go my browser automatically redirects me to the correct site.

Even Google is showing that something is off with his site. (see attachment)
 

Attachments

  • Screen Shot 2018-12-23 at 2.15.46 PM.png
    Screen Shot 2018-12-23 at 2.15.46 PM.png
    254 KB · Views: 56

RCjim

Member
Premium Subscriber
Joined
Jun 2, 2003
Messages
272
Location
New York
Little off topic, but does anyone know if they will start covering the SDS100?
 

Ubbe

Member
Joined
Sep 8, 2006
Messages
10,014
Location
Stockholm, Sweden
Both www. and new. points at the same ip address at the DNS I use and his page is intact. It's probably a local domain server you use that have been hacked or spoofed to direct you to a viagra site. Could be some malware in your computer as well that does this. You can test by setting googles dns 8.8.8.8 in you network setting and see if that helps.

/Ubbe
 

Ubbe

Member
Joined
Sep 8, 2006
Messages
10,014
Location
Stockholm, Sweden
Google looks for that domain name and a dns server converts it to an ip address, internet only use ip addresses and no names, and that dns server could be hacked. Some of the google results are correct and some are not depending of which google server was used and which dns server have provided the ip address when google made the search that where stored for later retrival.

As I understand google has thousands of search servers over the world that help each other when someone googles. There are probably thousands of dns servers spread over the world as well and you can hack or fool a dns server to have an incorrect ip address linked to a domain name. Hackers can then set up that spoofed domain to look exactly as the correct site and when you pay for something on that site they manually enter the same info into a credit card company that you enter at their spoof site and either save the information for later use or enter a much higher sum to be paid to their own hacker account that you'll notice first when you check your bank account.

/Ubbe
 

Linkero

Member
Joined
Sep 5, 2018
Messages
97
Ubbe, I get the same "hacked" results on the search and have always used google's 8.8.8.8. Interestingly enough, googles cached version of the page is from December 19th, and all is well with it. Perhaps this issue was quickly rectified before the rest of us were able to see it. Personally, I've been redirected to new.marksscanners.com subdomain since the beginning of this topic, even using the "www."

Edit: My best guess is when the "new." subdomain was being setup, DNS server's decided to update. When certain site's expire, other stuff happens to appear. Ads, domain availability, etc. Unfortunately, the timing of the update happened at that particular time when the site was technically offline. Thus, the DNS servers loaded a cached version for the OP, and google is showing that version as well. Depending on the update frequency, this should all disappear and be normal again tomorrow. I sure hope this make sense, as I'm struggling to put my thoughts to words
 
Last edited:

Blackink

Member
Joined
Nov 30, 2012
Messages
1,119
Location
Central Vermont
Mark's Scanners will get you there (Hover your mouse over the words Mark's Scanners)
I don't know how to put in just the Web address due to it converts it to a link labeled Mark's Scanners.
 
Last edited:
Status
Not open for further replies.
Top