gchq Posted November 7, 2011 ID:492430 Share Posted November 7, 2011 Hi thereI have been asked to assist (no direct access to site settings) with a possible false positive being thrown up by Google, so I guess it's on your database as well..The site is saioe.comI would be very grateful if you could confirm the issue(s), if any, affecting this domain.Thanks Link to post Share on other sites More sharing options...
gchq Posted November 7, 2011 Author ID:492469 Share Posted November 7, 2011 It looks like they have links that have been added toadekaacamcp dot comandghjnlhggyus dot comOnce they have deleted these and done something to prevent it happening again it should be safe... Link to post Share on other sites More sharing options...
MysteryFCM Posted November 7, 2011 ID:492502 Share Posted November 7, 2011 We don't use Google's database, so please post the actual IP being shown as blocked. Link to post Share on other sites More sharing options...
gchq Posted November 7, 2011 Author ID:492511 Share Posted November 7, 2011 This would appear to be the problemhttp://news.softpedia.com/news/New-Mass-Web-Injection-Attack-Spreading-125278.shtml Link to post Share on other sites More sharing options...
gchq Posted November 7, 2011 Author ID:492512 Share Posted November 7, 2011 We don't use Google's database, so please post the actual IP being shown as blocked.According to ping results 208.109.229.60 Link to post Share on other sites More sharing options...
MysteryFCM Posted November 7, 2011 ID:492513 Share Posted November 7, 2011 No, I need the IP Malwarebytes actually blocked if this is an F/P report. Link to post Share on other sites More sharing options...
MysteryFCM Posted November 7, 2011 ID:492526 Share Posted November 7, 2011 Where did you get that IP from btw? (i.e. which domain, as the one domain I'm aware of that points to that IP, doesn't have anything malicious on it) Link to post Share on other sites More sharing options...
detrine Posted November 7, 2011 ID:492532 Share Posted November 7, 2011 This would appear to be the problemhttp://news.softpedia.com/news/New-Mass-Web-Injection-Attack-Spreading-125278.shtmlThis report is from 2009 ? Is there relevance to this issue on the ip in 2011 ? If you have further details on this please share the information as I have personally checked a bunch of urls on that IP and only see old issues and some odd JS. Link to post Share on other sites More sharing options...
gchq Posted November 8, 2011 Author ID:492641 Share Posted November 8, 2011 This report is from 2009 ? Is there relevance to this issue on the ip in 2011 ? If you have further details on this please share the information as I have personally checked a bunch of urls on that IP and only see old issues and some odd JS.What are the 'old issues' you have seen - what was 'odd' about the javascript?Thanks Link to post Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now