We have been hosting our website 1Lit.com with the same webhost for a long time. It has always worked perfectly fine until now.
However, instead of showing the index.html file content, the website is now showing some Chinese text! We have never seen this before, in over 20 years of owning this domain name.
Please see below for screenshot of the page we see in any browser:
The text that appears translated into English is ‘Verifying your request, please wait…’ and then trying to redirect the user to what we imagine is the hacker’s chosen website.
You may see the source code for the page is not the index.html code as on our webhost ( view-source:https://www.1lit.com/ ).
The other files and URLs for 1lit.com we’ve checked are showing perfectly fine, as per the files hosted on Clook e.g.
It work fine to me.
Perhaps at some point it was hacked (the server, somebody was able to get inside the server and change the index.html).
Your website it is being cached locally. Clear your browser cache and try again.
Have you checked the DNS? Since the home page works when you specify index.html explicitly it is likely a problem with the DNS configuration. I see many A records for 1lit.com and that is not how my sites are configured. Normally there is one A record for the root (1lit.com) and another for the subdomain (or whatever it is called) (www.1lit.com).
For me when I try to go to www.1lit.com or 1lit.com I just get a message saying Please wait while your request is being verified and that message does not go away, it is being refreshed about every second.
Does anybody have any idea what could be causing the HTML showing the Chinese text with redirect to appear rather than our actual index.html file? It seems like some kind of hack?
Can you check the list of files in your remote site to see if there is more than one “index” file? If so, that could be the reason “index.html” isn’t showing up when you just type the domain name. You’re seeing one of the other “index” files instead.
Thanks for the suggestion. I’ve double-checked and there is only one index file.
I have stopped using Cloudflare, which seemed to have cached the Chinese hack page, and the index page is showing correctly now. I don’t know it if is for you or not?
The annoying matter is that whenever I switch Cloudflare back on, the index page begins to show the Chinese copy again. I don’t quite understand these matters, but it is bizarre. So I’m having to leave Cloudflare off.
You can switch Cloudflare to “Developer Mode” and “Purge Cache”. This may solve some caching problem. And try with another browser for testing with another browser cache.
