vb.org Archive - Hacked? Webgains?

vb.org Archive (https://vborg.vbsupport.ru/index.php)

- vB4 General Discussions (https://vborg.vbsupport.ru/forumdisplay.php?f=251)

- - Hacked? Webgains? (https://vborg.vbsupport.ru/showthread.php?t=306587)

Merriweather

01-03-2014 11:19 PM

Hacked? Webgains?

Today I noticed when I click a link a user has posted, it goes through a URL called "webgains". At first, I thought just one user did something odd, but now I see it's any link anyone posts. The link looks normal, and it goes to the site intended, but first goes through this webgains. So I looked and webgains is some affiliate program and I am wondering if someone hacked my site and added their own affiliate program to make money off of my site?! I certainly didn't add it. I only use Skimlinks, and I don't believe it's affiliated with webgains from what I can tell. Of course I notice this Friday after they are closed for the weekend and they have no email support on their site, only telephone. I tried to check for an account under my email but there is nothing. I want to shut this down ASAP but don't even know where to start. Ideas of if this could be some hack or where it is coming from? :(

ozzy47

01-03-2014 11:25 PM

Are you by chance using either one of these mods?
https://vborg.vbsupport.ru/showthread.php?t=241387
https://vborg.vbsupport.ru/showthread.php?t=266699

Merriweather

01-03-2014 11:37 PM

Nope. And I double checked my mods to see if anything new had been added and there's nothing. And there's no custom BB Codes added, either.

ozzy47

01-03-2014 11:42 PM

It might just be from SkimLinks

Quote:

Skimlinks already has existing relationships with major vendors such as Amazon.com, K-Mart, and Dell onboard, as well as major affiliate networks such as Affiliate Future, Affiliate Window, Google Shopping, Trade Doubler, Commission Junction, Webgains, Link Share, and Zanox.

Disable it for a moment, then click on one of the links, and see what happens.

Merriweather

01-04-2014 12:13 AM

Thank you - I could not find info like that anywhere and have never seen it do this before. Will check it now...

Ha ha, that was it. :o I was hacked last month and thought I had been hacked again. Thank you for your help!!

ozzy47

01-04-2014 12:14 AM

Not a problem, glad that was it and not something else. :)

All times are GMT. The time now is 10:53 PM.

X vBulletin 3.8.12 by vBS Debug Information
Page Generation 0.01060 seconds Memory Usage 1,725KB Queries Executed 10 (?)
More Information
Template Usage: (1)ad_footer_end (1)ad_footer_start (1)ad_header_end (1)ad_header_logo (1)ad_navbar_below (1)bbcode_quote_printable (1)footer (1)gobutton (1)header (1)headinclude (6)option (1)post_thanks_navbar_search (1)printthread (6)printthreadbit (1)spacer_close (1)spacer_open Phrase Groups Available: global postbit showthread	Included Files: ./printthread.php ./global.php ./includes/init.php ./includes/class_core.php ./includes/config.php ./includes/functions.php ./includes/class_hook.php ./includes/modsystem_functions.php ./includes/class_bbcode_alt.php ./includes/class_bbcode.php ./includes/functions_bigthree.php Hooks Called: init_startup init_startup_session_setup_start init_startup_session_setup_complete cache_permissions fetch_threadinfo_query fetch_threadinfo fetch_foruminfo style_fetch cache_templates global_start parse_templates global_setup_complete printthread_start bbcode_fetch_tags bbcode_create bbcode_parse_start bbcode_parse_complete_precache bbcode_parse_complete printthread_post printthread_complete
Messages: