Page 2 of 2

Not anymore

Posted: Fri Dec 17, 2010 1:00 am
by Warxas
[cite] What is the current listing status for www.cafepress.com?
This site is not currently listed as suspicious. [/cite]

RE: Not anymore

Posted: Fri Dec 17, 2010 2:18 pm
by Guest
@ Warxas, Indeed .

Still wondering if bncpj.org/supple-scoliosis-tingling-right-side-of-body/ has been deleted or there is always malware hosted elsewhere since they also redirects to several external links and cafepress have been compromised as well.

Thank you

RE: Hp hosts

Posted: Fri Dec 17, 2010 7:29 pm
by Objective Zero
Hey charrox, HP hosts isn't the only black listing site. I use www.Urlvoid.com and www.ipvoid.com because it uses more than 1 blacklist site.

FYI

Posted: Sun Dec 19, 2010 4:29 am
by MysteryFCM
The site was infected by one of the blackhat SEO gangs, you can see an example of this here;

hxxp://bncpj.org/mf-ati-replacement-recoil-pad-forums/

The malicious script that does the redirection has indeed now gone (was there a few days ago), but it must be pointed out, this type of infection will ONLY work if you feed it a Google referer (otherwise, all you tend to see is a page such as the above, full of search terms the scripts use to poison Google results).

Info on this type of infection can be found in many places, including;

http://hphosts.blogspot.com/2010/10/sur ... -move.html
http://hphosts.blogspot.com/2010/10/sur ... -just.html
http://hphosts.blogspot.com/2010/05/war ... again.html