Google flags Tulsa PAC website

| | Comments (2) | TrackBacks (0)

I was looking for the remaining schedule for Tulsa Ballet's presentation of The Nutcracker, and saw this on the Google search results:

Tulsa Performing Arts Center

This site may harm your computer.

The Nutcracker (Tulsa Ballet-Tulsa). The well-known holiday fairy tale springs to life through the dreams of a child as The Nutcracker and Mouse King battle ...

www.tulsapac.com/ - Similar pages -

Google's Safe Browsing diagnostic site gives the following explanation for the Tulsa PAC website:

What is the current listing status for www.tulsapac.com?

Site is listed as suspicious - visiting this web site may harm your computer.

Part of this site was listed for suspicious activity 1 time(s) over the past 90 days.

What happened when Google visited this site?

Of the 26 pages we tested on the site over the past 90 days, 2 page(s) resulted in malicious software being downloaded and installed without user consent. The last time Google visited this site was on 2008-12-15, and the last time suspicious content was found on this site was on 2008-12-13.

Malicious software includes 2 scripting exploit(s), 1 trojan(s). Successful infection resulted in an average of 4 new processes on the target machine.

Malicious software is hosted on 4 domain(s), including 17gamo.com/, dbios.org/, yrwap.cn/.

1 domain(s) appear to be functioning as intermediaries for distributing malware to visitors of this site, including yrwap.cn/.

This site was hosted on 1 network(s) including AS40139 (JACKSON).

Has this site acted as an intermediary resulting in further distribution of malware?

Over the past 90 days, www.tulsapac.com did not appear to function as an intermediary for the infection of any sites.

Has this site hosted malware?

No, this site has not hosted malicious software over the past 90 days.

How did this happen?

In some cases, third parties can add malicious code to legitimate sites, which would cause us to show the warning message.

Google advises, "If you are the owner of this web site, you can request a review of your site using Google Webmaster Tools. More information about the review process is available in Google's Webmaster Help Center."

(BatesLine is clean, by the way.)

0 TrackBacks

Listed below are links to blogs that reference this entry: Google flags Tulsa PAC website.

TrackBack URL for this entry: http://www.batesline.com/cgi-bin/mt/mt-tb.cgi/4716

2 Comments

W. said:

I found this two days ago with the site of a legitimate art gallery (not in Tulsa). It sounds like some Webmasters are getting sloppy with their coding, and Google is finding them.

It may be the advertisements. There have already been a good set of exploits done through ads, even on large sites. My guess is some neat use of Flash to deliver payloads to unsuspecting IE installations but it could just be clever cross site scripting.

About this Entry

This page contains a single entry by Michael Bates published on December 16, 2008 12:24 AM.

Saturday shopportunities was the previous entry in this blog.

Missing persons in Tulsa - UPDATE: Both found! is the next entry in this blog.

Find recent content on the main index or look in the archives to find all content.

Contact

Feeds

Subscribe to feed Subscribe to this blog's feed:
Atom
RSS
[What is this?]