"View Source" - Strange Coding...Web Help

My friend owns this company and they use a webpage designer in California. I checked on the site recently and noticed a number of pictures were missing. I took a peek at the souce and to my surprise, there was a slue of strange coding on the bottom of the text document.

I'm going to inform the owners about this, but does anyone have an idea how this could have gotten onto their site; as well as what it means? I'm going to get them to delete that whole paragraph later today; since it seems so suspicious.

It looks like some sort of Viagra advertisement, but it doesn't visually show up anywhere on the webpage.

Here's the link, just right click anywhere on the homepage and "View Source"

http://www.mpasucker.c​om/

Thanks in advance,

--Chris
http://www.mpasucker.c​om/

WIthin the paragraph of code are a number of "www.rolling.net" references, after trying to visit that site, it takes me nowhere...

This is really strange to me, but I'm not a code savvy designer.

I don't want to click in case the page is malicious. Want to copy and paste it into here surrounded by (code) tags - make them square brackets.

Sounds darn suspicious to me.

Here's a JPEG of the code; just in case it tries to do something fishy by copy/pasting it on this site.

HOSTED PHOTO
please log in to view hosted photos in full size.

Sorry it's so small...

I've converted the content into a PDF so it will be security safe. Hope this helps.

Thanks for any help.

Style=display:none would hide the following stuff from view.

Is it possible that this is a deliberate attempt to get into the search engines against "viagra"?

Or is it likely to be a hack?

Pauls9 wrote in post #3357599
Style=display:none would hide the following stuff from view.

Is it possible that this is a deliberate attempt to get into the search engines against "viagra"?

Or is it likely to be a hack?

The business owners have no idea why this code would be on their site; since they are a Motorcycle shop and have nothing to do with Viagra. Their webpage designer is based in California, so contacting him has been tough. I'm hoping someone has experience with this sort of code; and what it means?

Someone's hacked the website and put links to their own website selling v1agra and such. Tell them to remove it and talk to their hosting company about the security. Or it could be a problem at their end.

If it weren't for the "style=display:none", the bottom of the page would be filled with dozens of links "viagra", "Uk viagra", etc, all linking to pages on the rolling.net site.

Not the sort of thing a reputable business would want.

I'd recommend they have a strong word with their web designer.

Edit: unless it was put there by someone else, i.e. a hacker. But why would a hacker make it invisible?

Not sure how it got there, but it is in a separate frame, it looks like, from the rest of the site. (Using frames isn't really "state of the art") anymore, but lots of people still do it. The domain name was purchased through godaddy.com and is hosted somewhere called wildwestdomains in Arizona. Not sure if they sneak something in or not. I'd check out the hosting situation and make sure it isn't some sort of free hosting provided that the web designer is using. Just a thought.

Pauls9 wrote in post #3357666
Edit: unless it was put there by someone else, i.e. a hacker. But why would a hacker make it invisible?

It's hidden by css so it won't show in a browser, but google will see it and increase the pagerank of the target site. Except they know v1agra links are bad, so the ranking of the site this page is hosted on will drop through the floor.

Thank you everyone for the useful information and very speedy responses! I'll let them know the news and how best to remove the code.

Best Regards

Get it removed IMMEDIATELY. Having those non-displayed links won't make Google increase the pageranks of those sites for Viagra, as intended. Rather, they're liable to just drop your friend's site altogether for having hidden links like that (no, the Googlebot isn't stupid).