this site has been hacked

[cycleguy55]

Originally Posted by Brent Mills

I made some changes tonight...Anyone still seeing this?

Sorry for the problems.

Yes, re-directs on initial link - 10 hops. I captured the trail using the Link Redirect Trace extension in Chrome. Here's the trail:

1. 52.84.24.223 Seattle, Washington, United States (US) server - 52-84-24-223.sea32.r.cloudfront.net is an IPv4 address owned by Amazon Technologies Inc. and located in Seattle, United States
2. 205.185.216.42 Phoenix, Arizona, United States (US) Highwinds Network Group
3. 104.154.178.88 Mountain View, California, United States (US) Google Inc.
4. 104.154.178.88 Mountain View, California, United States (US) Google Inc.
5. 193.169.104.1 Israel (IL) Adsmarket G.M LTD
6. 23.23.85.222 Ashburn, Virginia, United States (US) Amazon.com, Inc.
7. 23.21.56.169 Ashburn, Virginia, United States (US) Amazon.com, Inc.
8. 52.2.89.31 Ashburn, Virginia, United States (US) Amazon.com, Inc.
9. 208.99.87.154 Waltham, Massachusetts, United States (US) Reflected Networks, Inc.
10. 208.99.87.154 Waltham, Massachusetts, United States (US) Reflected Networks, Inc.

The duplicate IP addresses above are not typos, they're 'double hops' on those addresses. There is more detail in the file I've captured - let me know if you'd like to see it.

BTW, I also logged in using FireFox and was re-directed there as well, but to a different site.

The initial re-direct seems to come from CC, so patrickt's link ( vBulletin Hack & Malware Removal & Monitoring Service | vBulletin Services, vBulletin Setup & vBulletin SEO ) and the the vBulletin instructions linked from that page ( http://www.vbulletin.com/forum/blogs...ve-been-hacked ) may be of value.