Blogger Blogs Redirecting To "sendptp.com"

This week, we are seeing a few reports from anxious bloggers that their blogs are redirecting to mysterious URLs containing the domain "sendptp.com". This is somewhat reminiscent of the "searchinvented.com / smashingfeeds.com" hijacks of January 2010.

I can log in to my blog, but then in a few seconds the page goes blank, and in the URL it says..sendptp.com/ramk2.html...at the bottom it says redirecting and flashing back and forth...

Immediate reports suggest a "falling snow" decoration, apparently acquired before Christmas 2009, as one known culprit. Other reports mention a possible variant, "falling hearts" (Valentines Day?).

http://everything-u-need-is-here.blogspot.com/2008/12/snow-effect-widget-for-blogger.html
http://h1.ripway.com/anand2360375/snow.js

---

In one case, the "searchinvented.com" / "smashingfeeds.com" redirect is being found on a blog that has a "falling snow" gadget.

---

I wouldn't bet that this is the only cause of this hijack, but it looks to be one place where you can look, should your blog show this problem.

So far, the problem code has been easily corrected, with a simple removal of the HTML / JavaScript gadget containing the offending code.

After removing the offending code, don't forget to clear cache, before testing your change!

>> Top