This list is dedicated to none governmental and none educational websites that currently being Hacked. For the list of government and education website that currently being hacked, it can be found at http://kevinhng86.iblog.website/2017/04/12/website-that-got-hacked-list-of-150-international-education-government-websites/. Anytime a website is being listed on to this list, at the time of listing, the website was still being hacked. If its come to my attention that any website on this list is fixed, I will put the word fixed next to the website name.
From all the web addresses below, if you go onto the website using a browser, then view the source code of the page. Unless stated, within the source code, search for the word escort. In most browser, when viewing the source code of a webpage, you can just press Ctrl + F to search for a phrase or word in the source code. There will be some link that links to porn sites that would be hidden from the browser rendering engine by having the 0 font size, out of area display or with hidden HTML attribute. This is done by the same group as I stated on my list of hacked government and education websites.
*** This list is live and may update from time to time. If a website on this list become clean and you know please e-mail me at [email protected], thank you. ***
Link Injection
- ajanlar.org
- http://www.programmallp.it
- http://lepian-paint.pl/
- www.savfrbay-wecare.co.za
- www.forumzirve.net
- capm.asso.fr
- http://www.yilmazmuh.com/
- http://avt.tusur.ru/
- destek.mybb.com.tr
- edu.taipeiads.com
- sevenninehd.com
- www.alvamedia.com/index.php/eskisehir-escort-bayan/
- http://www.cerr.info/about.php
- http://www.sanspiert.ch/
- http://viangtan-sao.go.th/index.php
- http://www.mpgk.chelm.pl/
- http://www.esaamlg.org/
- http://www.finansexe.com/
- http://www.luksvekonfor.com/
- http://interstudio.ru/
- http://ase91.free.fr/
- http://www.sanspiert.ch/
- http://benevento.helendoron.it/
- http://planetzog.co.za/
- http://www.irmed.com.pl/
- http://www.harald-schulz-art.de/
- http://www.fanfaredeguipavas.fr/
- http://www.bibabalansa.nl/
- http://sanspiert.ch/
- http://irmed.com.pl/
- http://www.capm.asso.fr/
- http://tepozteca.com/
- http://filmlervehaberler.blogspot.ca/
- http://smileaf.org/
- http://www.lesmodesdevie-lmdv.fr/
- http://www.bronsebukkene.no/
- http://onlinealemm.blogspot.ca/
- http://videofilmizlesene.blogspot.ca/
- http://dobrelodowkichlodziarki.pl/
- http://wp.hm-lifestyle.com/
- http://www.eklebul.com/
- http://www.jouster.com/forums/activity.php
- http://www.filmseyretfull.net/
- http://dobrepiekarniki.pl/
- http://illerhaberleri.blogspot.ca/
- http://www.warwickshireonline.com/forum/
- http://www.gncfb.org/
- http://www.troyangeorgiev.com/
- http://www.forumayyildiz.net/
- http://trdublajizlee.blogspot.ca/
- http://go-letour.co.uk/walk/
- http://www.goldenpokerbonus.ru/
- http://www.regionkarkonoski.pl/
- http://www.alsted-music.dk/
- http://haberiokurmusun.blogspot.ca/
- http://www.stuttgart-21-aktuell.de/
- http://nn74.ru/
- http://www.icaseipadmini.com/
- http://www.filmseyret.org/
- http://www.geyik.com.tr/
- http://www.mukemmelkadinlar.com/
- http://izlersin.net/
- http://www.ersinuzgun.com/
- http://www.receitasdebacalhau.net/
- http://poznaj-ka.ru/
- http://www.riteofspring.org/
- http://teklinkdizi.net/
- http://www.palmaandfriends.de/
- http://www.720pfilmizlee.net/
- http://www.hdfilmizlemee.org/
- http://dynamikpaintinginc.com/
- http://www.biggestodds.co.uk/
- http://www.avorioeventi.com/?lang=it
- http://www.filmseyret.org/
- http://freiporno.tumblr.com/
- http://www.green-trotter.fr/
- http://www.ersinuzgun.com/
- http://www.stuttgart-21-aktuell.de/
- http://vttclubjura.ch/
- http://wmofisi.com/
- http://pornodeutsch.tumblr.com/
- http://www.vtstechnology.com/
- http://www.aquicontigo.com/
- http://www.pico-case.com/
- http://sitefiyatlari.com/liste/151.html
- http://www.ceretlapampa.org.ar/
- http://www.icmonteodorisio.com/
- http://deterhervikommerfra.no/
- http://eko-piana.pl/
- http://metalprofiling.co.za/
- http://www.automotolanik.cz/
- http://www.brasiluso.org/
- http://gfuc.com.br/
- http://www.marceloadnet.blog.br/
- http://konstantin-volke.de/
- http://universulromanesc.ro/
- http://www.finemellow.dk/
- http://102news.ru/
- http://hoteltirrenia.it/
- http://frez.ru/
- http://dcmasesores.es/
- http://bibabalansa.nl/
—– April 17 —–
- http://sao-nongbua.go.th/
- http://kohloy.go.th/
- http://lahansailocal.go.th/
- http://psic.gop.pk/
- http://medep.org.np/
- http://nongtaphan.go.th/
- http://kohkwang.go.th/
- http://ptabank.org/
- http://whats-app-plus.com/
- http://www.lucet.fi/
- http://www.tifr.res.in/~koti/
- http://placement.uniparthenope.it/
- http://www1.unipa.it/archiviodellamemoria/
- http://rpp.fvtm.ujep.cz/
- http://excops.unep.ch/
- http://www.tifr.asia/~koti/
- http://news.msu.ac.th/web/
- http://www.fullindirgezginler.net/
- http://www.bucurestiivechisinoi.ro/
- http://720phdfullizlet.com/
- http://okulara.com/
- http://www.gamesector.dk/
- http://konyapostasi.com.tr/
- http://cataratashoy.com.ar/
- http://www.bvrit.ac.in/
- http://www.troyuncu.org/
- http://www.ilgincfikir.net/
- http://www.yazmak.org/
- http://www.add.com.pl/
- http://www.atsaklamaz.com/
- http://www.haberburda.net/
- http://www.newsky24.com/
- http://www.agrimotor.com.br/
- http://www.liammellows.ie/
- http://fierforjatelemente.ro/
- http://www.e-connectsolutions.com/
- http://www.butunoyunlar.net/
- http://nutritionforeverybody.net/
- http://www.studiospinning.cz/
- http://www.capitaltyping.com/
- http://kwert.ru/
- http://teleco.as/
- http://www.mwd.com.ph/
- http://excops.unep.ch/
- http://www.idsdesign.co.za/
- http://www.kralgezginler.com/
- http://victoriapointlakeside.com.au/
- http://www.psichologeskonsultacijos.lt/
- http://rytmlancut.pl/
- http://www.bukshfoundation.org/
- http://sonduzluk.com/
- http://www.kspcommunityculture.ca/ (Phone Contacted)
- http://www.avelanza.lt/
- http://drawakrzyz.pl/
- http://photosbycrewe.com/
- http://www.teicrete.gr/olivegrove/
- http://thecorporateimageinc.com/
- http://www.firesnet.pl/
- http://hotelcitymax.co.ke/
- http://cvdii.bireme.br/tiki-view_articles.php
- http://www.bergzichtguesthouse.co.za/
- http://www.cecage.uem.mz/
- http://hajduk.pl/
- http://www.centla.gob.mx/
- http://123probefahren.de/
- http://www.lukabar.me/index.php/me/
- http://kadinvehastaliklari.com/
- http://www.sofiastreetstyle.com/
- http://www.isyeriacilisi.com/
- http://www.toptanbayim.com/
- http://www.hobiegitimdunyasi.com/
- https://mertcankolatan.com/
- http://www.pinroti.com/
- http://www.magazinekstra.com/
- http://www.edremit.bel.tr/
- http://www.tamfilm.net/
- http://efe-tek.com/
- https://www.elisihobiler.com/
- http://www.faydalarinedir.com/
- http://speeddatingwarszawa.pl/
- http://www.tuzlaspor.org.tr/
- http://timecook.ru/
- http://www.icondilakademisi.com/
- http://www.aktabilgisayar.com/
- http://www.gamyun.gen.tr/
- http://www.istanbullugelin.org/
- https://www.ajansltd.com/
- http://www.tadilatdekorasyon.net/
- http://www.tcaasansor.com/
- http://tekinotoservis.com.tr/
- http://www.guryildiz.bel.tr/
- http://www.uiportal.net/
- http://www.uisp.it/nazionale/
- http://www.beypazari.bel.tr/
- http://youthfoundation.az/
- http://woodwonk.com/
- http://blog.kozmodi.com/
- http://paparazzi.mn/
- http://www.uh.cu/
- http://www.haberpazar.com/
- http://www.archeryclub.net.au/
—– April 18 —–
- http://all-mar.pl/
- http://www.aspireacs.co.uk/
- http://sociology.soc.uoc.gr/
- http://www.teknikyapim.com/
- http://www.twilightcaravanpark.com.au/
- http://jnr.by/
- http://www.haberhepsi.com/
- http://www.liguefootcasa.ma/
- http://www.fthm.uniri.hr/
- http://complex.ulb.ac.be/
- http://www.cap.ufpe.br/
- http://www.rogwebs.com/site/
- http://teenviewsofia.com/
- https://www.fthm.uniri.hr/
- http://www.silvopastoral2016.uevora.pt/
- http://ciftlikoyunu.com.tr/
- http://visnyk-mmi.kpi.ua/
- http://istlist.com/
- http://www.arabnewsreview.com/
- http://prodir.pl/
- http://www.webforumlari.net/
- http://tygodnikjutrzenka.com/
- http://www.rismarken.dk/
- http://studio2.tv/
- http://processtanks.co.za/
- http://investorpower.com.au/
- http://forum.illpumpyouup.com/
- http://arsip.ugm.ac.id/
- http://www.ogretmensitesi.info/
- http://aenimae.eu/
- http://placement.uniparthenope.it/
- http://www.gpef.fe.usp.br/
- http://tomwatsoninc.net/
- http://forum.wmtikk.com/
- http://www.3yasoyunlari.gen.tr/eda-giysi-giydirme.html
- http://www.inthemindofamountie.ca/
- http://geschenker.com/
- http://cizgifilmler.co/
- http://www.yoncali.bel.tr/
- http://guryildiz.bel.tr/
- http://teak.com.tr/
- https://kayweb.net/
- http://www.vhscar.com/
- http://jxzhgc150324.sk5.yithin.com/
- http://www.xljdgs.com/
- http://www.yiqinghong.com/
- http://www.yabogift.com/
- http://www.oukemujh.com/
- http://din140120.sk5.yithin.com/
- www.dingxinnz.com
- http://www.chinashenju.com/
- http://caiyuanxiaopu.com/
- http://www.zhongguancun365.com/index.php
- http://hlyhg.com/
- http://qa.bu.ac.th/buqa/
- http://candicemay.ca/2015/10/06/eskisehir-escort/
- http://histoire.uqam.ca/
- http://www.harbourliving.ca/
- http://lifeovereasy.com/
- site:wccog.ca “escort” “eskişehir” OR “bayan”
- http://www.sistembirebir.com/
- http://bookindustrybailout.ca/
- http://www.footdelles.com/
- http://cliphai.us/
- http://tbhp.vn/
- http://chishop.vn/
- http://www.apico.com.vn/
- http://quochung.com.vn/
- http://thammylotus.vn/
- http://www.mecanica.ufrj.br/ufrj-em/index.php?lang=en
- http://www.camnpal.com.br/
- http://redepizzafrita.com.br/
- http://viaromana.com.br/shinchan/
- http://www.leonardi.com.br/
- http://www.consultoriapacto.com.br/
- http://posmec2015.swge.inf.br/
- http://www.comune.mogliano-veneto.tv.it/
- http://www.astef.ufc.br/
- http://www.coep.org.in/
—– April 19 —–
- http://mathbox.miigaik.ru/
- http://chemsud.enscm.fr/
- http://avt.tusur.ru/
- http://futsal.wuc2012.uminho.pt/
- http://www.aedi.ufpa.br/
Spam Posting & Spam Account
- “inurl:smartreklam.com” “escort”
- http://escortarama.blogspot.com/2015/
- “inurl:gazetekent.com” “escort”
- “site:kespres.ca” “escort”
Forum That Showing Off Or Condone To Selling Hacked Links
- http://www.wmroot.com/
Site That Maybe Setup As Spam Link Farm
*** You do not need to go into the source code for sites below. The sites below are different languages but they are holding the same links and setup with a very similar pattern. Just look through them for a bit and you can see the pattern. ***
- http://www.afirmacion.net/
- http://www.newzealandleader.com/
- http://www.narodninoviny.com/
- http://www.caucasianreview.com/
- http://www.danskobservator.com/
- http://www.dieneuzeit.com/
- http://www.nyenorge.net/
- http://www.qatardailystar.com/
- http://www.stonebrosmovie.com.au/
- http://www.la-regeneration.com/
- http://www.narodnojedinstvo.com/
- http://pwmonatsblatter.com/
- http://www.russianreview.net/
- http://www.oarauto.net/
- http://www.labuenaesperanza.com/
- http://www.el-nacional.es/
- http://www.careview.info/category/uncategorized/
- http://www.euroworld.info/
- http://www.orient-zeitung.de/category/uncategorized/
- http://www.chinesereporter.net/category/uncategorized/
- http://7billionactions.us/
- http://www.yentel.ca/eskisehir-escort/
Conclusion
The three tools that aided me in this investigation are Moz Site Explorer, SemRush Backlink Checker and Ahrefs.com Backlink Checker. Besides the tools, I also use Google Search Engine for aiding and tracking down websites that been hacked. Tools I mentioned may not be able to tracked link from .gov and .edu Domains, nevertheless, Google could.
To know how much websites these hackers once hacked I took a snapshot from my investigation. I used one of the domains that I suspected to be associated with this hacker group and check for the history of their backlink using ahref.com tool. The domain is www.ankaralikizlar.com.
As you can see in this snapshot below, before January the 8th of 2016, there are some domains that referring to ankaralikizlar.com but that numbers were below 400 domains. Just on January 3th of 2016, the amount of domain that referring to ankaralikizlar.com went down to 137 domains. Now, just on January the 8th of 2016, ankaralikizlar.com’s referring domain counts went up to 2,067 referring domains. That mean on January the 8th, there are 2,067 domains that had at least one link pointing to ankaralikizlar.com. Those numbers do eventually drop because websites’ owners found out and reinstall their server or data. Nevertheless, when going through the list of websites that been hacked, I found it sad that some websites did get banned and it is not their fault.
At the height of this hack scheme for this single domain, bases on backlink history record from ahref.com, there could have been 2300+ websites that been hacked and carried ankaralikizlar.com’s link unknowingly. Take into consideration that ahref.com does not regularly crawl country’s domains extension that is not well known, including others country’s .gov and .edu domains. This below is the four snap of this lone domain from ahref.com. As of today, ahref.com report the amount of domain pointing to ankaralikizlar.com is a bit under 200 domains, nevertheless, combine with others country’s TLD, there are still 300+ domains that are pointing to ankaralikizlar.com at the time of this writing. The majority of sites that were hacked were either running a CMS system and bases on ahref.com data, a large percentage were running a version of WordPress.
This post was written by Kevin and was first post @ http://kevinhng86.iblog.website.
Original Post Name: "Hacked Website – List of None Govermental and None Educational Website".
Original Post Link: http://kevinhng86.iblog.website/2017/04/16/hacked-website-list-of-none-govermental-and-none-educational-website/.
