Parkingcrew.net hijacking our domain

Asked Oct 22 '14 at 19:30

Active Apr 03 '15 at 20:44

Viewed 8,483 times

We are experiencing a very bizarre sort of hijack on our domain www.lbps.co.uk .

It seems to render fine on desktop systems and on mobile devices over WIFI it also seems fine.

However when WIFI is disabled on the mobile devices the site instead redirects to a parkingcrew.net spam link page displaying mortgage info links. This bizarrely at present seems restricted to the UK.

After spending 4 days and sleepless nights over this (I'm not a huge tech expert) with our developers we are thinking that possibly there is a DNS issue or virus?

If anyone can help it would be hugely appreciated!

edited Apr 03 '15 at 20:44

peterh

4,914
13
29
44

asked Oct 22 '14 at 19:30

Justin Berkovi

Someone probably injected malicious code into your CMS/scripts. If you give us the actual domain name we can probably offer more info. – ceejayoz Oct 22 '14 at 19:40
1

From a quick look I didn't see any malicious scripts. You may have had the DNS hijacked on your local network. – Michael Hampton Oct 22 '14 at 19:44
Hi there - the domain is lbps.co.uk - Is it possible the DNS can be hijacked just for a cellular network? I've never seen anything like this in my life – Justin Berkovi Oct 22 '14 at 19:58
Might it be an IPv4 vs IPv6 name resolution difference? – Ryan Bolger Oct 22 '14 at 20:58
Thanks Ryan - how is this tested / resolved? – Justin Berkovi Oct 22 '14 at 22:01
You would need a client that has a working IPv6 WAN connection. Then you could issue a DNS lookup for the AAAA record (the IPv6 equivalent of a DNS A record) on your site. – Ryan Bolger Oct 22 '14 at 22:12

Parkingcrew.net hijacking our domain

0 Answers0