iPowerWeb is getting better than they used to be in terms of hacked sites, but they still have problems. Monday, I wrote about DNS hacks they still have problems with (which Micheal Horowitz was kind enough to mention).
Some brief research shows the following iPowerWeb accounts hacked (most should still be live):
voyageofwhisper,com
toysnsilk,com
tnrnelson,com
stevenlin888,com
samplesofserenity,com
reviews-reviews,com
regulatory-compliance,com
pieinear,com
palmhaven,org
mohrfamily,com
midwestwrecker,com
magiciansmarket,com
jonathanfricke,com
jerniganhouse,com
gogosportingnews,com
enshunada,com
endofendo,com
dlar,us
dealindaddy,com
confessionsrus,com
angeleyes03,com
allvisualsigns,com
The typical format for the hack is (5 character string)/adult/adult_12.html, which leads to a page pushing malware. So, confessionsrus,com/cqbku/adult/adult_12.html might show a page like this:
or this
or this
(Incidentally, these pages are only accessible through a Google search, you don’t get anything if you just go to the page itself.)
Alex Eckelberry