Site Reviews by Chandra in the Norton Safe Web community Thu May 17 02:40:25 +0000 2012 http://safeweb.norton.com/profile/Chandra I received an email that claimed to be from Facebook support but pointing to a page on this domain. Looks like a Facebook phishing attempt Tue, 06 Jul 2010 21:06:29 +0000 http://safeweb.norton.com/report/show?url=artstud.com I received an email that claimed to be from Facebook support but pointing to a page on this domain. Looks like a Facebook phishing attempt Tue, 06 Jul 2010 21:03:16 +0000 http://safeweb.norton.com/report/show?url=magatrans.com This site advertises in spam emails claiming to sell famous replica watches and jewelry. Mon, 15 Dec 2008 15:30:57 +0000 http://safeweb.norton.com/report/show?url=redjiius.com This is a malicious pdf file server. Sites such as snowparkroma.it have been infected such that a user to that site is infected by a pdf file from ikfjcketn.com Thu, 30 Oct 2008 12:39:15 +0000 http://safeweb.norton.com/report/show?url=ikfjcketn.com There is a scrip that has been injected in to this page which sources a java script from netcfg9.ru, a known malware server. Stay away Fri, 17 Oct 2008 11:20:05 +0000 http://safeweb.norton.com/report/show?url=canon.co.in Tries to install a malicious fake codec. Wed, 15 Oct 2008 16:35:12 +0000 http://safeweb.norton.com/report/show?url=zenvideoz.com Destination sites such as karachiplus.com, greenhousecafenj.com, highland-collection.com and a lot of other sites have been infected with a malicious javascript on this chinese site. Fri, 05 Sep 2008 09:38:03 +0000 http://safeweb.norton.com/report/show?url=douhunqn.cn Even the spam email looks suspicious and claims to sell R..e..p..l...i..c..a.s...... Mon, 25 Aug 2008 15:33:40 +0000 http://safeweb.norton.com/report/show?url=hdrgse.com This site shows up spam instant messages. Definitely annoying Thu, 21 Aug 2008 12:12:18 +0000 http://safeweb.norton.com/report/show?url=yahdate.com Peddles cheap luxury watches in spam email Wed, 20 Aug 2008 12:29:21 +0000 http://safeweb.norton.com/report/show?url=jpbwgp.com This is a blog with tamil poems. No malicious content Tue, 19 Aug 2008 19:46:20 +0000 http://safeweb.norton.com/report/show?url=sozhanattan.blogspot.com Just an annoying domain parking site Mon, 18 Aug 2008 16:11:32 +0000 http://safeweb.norton.com/report/show?url=wellnesssurgical.eu This is a online drug store claiming to ship goods from India. The domain is registered to a London address and was registered on June 29, 2008 - just a month and half old. Buy at your own risk. Mon, 18 Aug 2008 16:09:35 +0000 http://safeweb.norton.com/report/show?url=womenmedicalcenter.eu Offers 500$ to your favorite restaurant. Looks suspicious to me. Mon, 18 Aug 2008 15:44:03 +0000 http://safeweb.norton.com/report/show?url=centralstreetmedia.com The site has a login form for Halifax bank. Why does it need to host that? I would be careful on this site because of this one possible phishing page. Tue, 12 Aug 2008 12:25:43 +0000 http://safeweb.norton.com/report/show?url=chip.pl Mon, 11 Aug 2008 11:26:54 +0000 http://safeweb.norton.com/report/show?url=plgou.com Fri, 08 Aug 2008 12:55:11 +0000 http://safeweb.norton.com/report/show?url=d9.pl Fri, 08 Aug 2008 12:55:04 +0000 http://safeweb.norton.com/report/show?url=vinozlomekvavra.cz Thu, 07 Aug 2008 14:56:17 +0000 http://safeweb.norton.com/report/show?url=goldwindos2000.com Fri, 01 Aug 2008 19:05:25 +0000 http://safeweb.norton.com/report/show?url=unspypc.com .... Fri, 01 Aug 2008 19:04:56 +0000 http://safeweb.norton.com/report/show?url=symentec.com Fri, 01 Aug 2008 19:04:27 +0000 http://safeweb.norton.com/report/show?url=symmantec.com Fri, 01 Aug 2008 19:04:08 +0000 http://safeweb.norton.com/report/show?url=symantic.com If you install codec from this site, a process PowerCodec starts on your PC which opens browser windows indicating that you have spyware and suggest purchasing a full version of their VirusBurst software to clean up. Thu, 31 Jul 2008 23:02:17 +0000 http://safeweb.norton.com/report/show?url=powercodec.com Thu, 31 Jul 2008 17:31:04 +0000 http://safeweb.norton.com/report/show?url=thespybotpromo.com Tue, 29 Jul 2008 09:49:11 +0000 http://safeweb.norton.com/report/show?url=t1000.net The home page of this site has an invisible iframe which downloads malicious content from a different site. Stay away. Fri, 25 Jul 2008 13:06:26 +0000 http://safeweb.norton.com/report/show?url=olympicvisit.com Wed, 23 Jul 2008 15:33:47 +0000 http://safeweb.norton.com/report/show?url=citizenhawk.com Fri, 18 Jul 2008 10:11:31 +0000 http://safeweb.norton.com/report/show?url=veritas.com Fri, 18 Jul 2008 10:11:21 +0000 http://safeweb.norton.com/report/show?url=altiris.com Thu, 17 Jul 2008 16:26:06 +0000 http://safeweb.norton.com/report/show?url=tech-pro.net Thu, 17 Jul 2008 11:57:37 +0000 http://safeweb.norton.com/report/show?url=imdb.com Thu, 17 Jul 2008 09:53:20 +0000 http://safeweb.norton.com/report/show?url=ndtv.com Fri, 11 Jul 2008 13:07:48 +0000 http://safeweb.norton.com/report/show?url=topforcheapairlineticket.blogspot.com Noticed this site in spam emails peddling drugs. Thu, 10 Jul 2008 13:55:17 +0000 http://safeweb.norton.com/report/show?url=vovnellwwk.info Visting this site would drop the peacomm trojan on your machine. It starts a number of processes which take up most of your system resources. Thu, 10 Jul 2008 11:45:54 +0000 http://safeweb.norton.com/report/show?url=tredinsa.com This site appears in Google Ads. It advertises free coupons but on their site shows a big button to receive free samples. Clicking on that, opens qualityhealth.com in a new browser window which has a text box for users to enter email addresses - beware of spam. Trying to close the mycouponsfree.com opens annoying windows. Thu, 10 Jul 2008 10:15:02 +0000 http://safeweb.norton.com/report/show?url=mycouponsfree.com Wed, 09 Jul 2008 15:32:00 +0000 http://safeweb.norton.com/report/show?url=hankooktireusa.com This is another site trying to take advantage of the Disney brand. The domain owner is startlogic.com which is a website hosting service. Just visiting the homepage of this site drops a downloader on your PC. Wed, 09 Jul 2008 15:30:18 +0000 http://safeweb.norton.com/report/show?url=disney4you.com The domain owner is not Disney. It has some content about Disney resorts and prominently placed Google ads. This is a site trying to take advantage of the Disney brand name. Wed, 09 Jul 2008 14:20:31 +0000 http://safeweb.norton.com/report/show?url=waltdisneyworldresorthotels.com Wed, 09 Jul 2008 12:00:32 +0000 http://safeweb.norton.com/report/show?url=adobe.com This is a typo squatter of southwestairlines.com. The domain owner has opted for a private registration which makes it suspicious. The DNS servers used are ns1.ecparking.com indicating it is a parking domain. Wed, 09 Jul 2008 11:52:22 +0000 http://safeweb.norton.com/report/show?url=southwestairlanes.com Tue, 08 Jul 2008 15:54:54 +0000 http://safeweb.norton.com/report/show?url=stolenprofiles.com This is a ecommerce store for medicines and baby food. They have very good prices and at first look seems to be a great deal. BBB gives this site a 'F' rating based on 2 complaints which have not been answered. I would be careful buying anything from this site. Tue, 08 Jul 2008 13:42:12 +0000 http://safeweb.norton.com/report/show?url=i-medica.com Very nice site for creating a personalized music channel which plays songs similar to your music interests. This site had a flaw by which users could store the songs being played. Not sure if this flaw has been addressed. Mon, 30 Jun 2008 16:30:33 +0000 http://safeweb.norton.com/report/show?url=pandora.com Fri, 20 Jun 2008 16:39:37 +0000 http://safeweb.norton.com/report/show?url=moviesfoundonline.com Fri, 20 Jun 2008 15:01:38 +0000 http://safeweb.norton.com/report/show?url=revenue-taxes.com Thu, 19 Jun 2008 16:06:59 +0000 http://safeweb.norton.com/report/show?url=campusist.com This is a very nice community website for people living in Bangalore, India. Thu, 19 Jun 2008 10:13:34 +0000 http://safeweb.norton.com/report/show?url=citizenmatters.in Wed, 18 Jun 2008 12:00:04 +0000 http://safeweb.norton.com/report/show?url=matrindo.com Tue, 17 Jun 2008 16:34:48 +0000 http://safeweb.norton.com/report/show?url=forestandthetrees.com Tue, 17 Jun 2008 16:33:26 +0000 http://safeweb.norton.com/report/show?url=geocities.com%2Fmarina.clostest Mon, 16 Jun 2008 22:29:58 +0000 http://safeweb.norton.com/report/show?url=seekingalpha.com Mon, 16 Jun 2008 22:28:45 +0000 http://safeweb.norton.com/report/show?url=symamtec.com This is Google's search site for India. Tue, 22 Apr 2008 16:50:08 +0000 http://safeweb.norton.com/report/show?url=google.co.in This is a popular portal and a search site. Tue, 22 Apr 2008 16:43:42 +0000 http://safeweb.norton.com/report/show?url=msn.com Mon, 21 Apr 2008 12:28:47 +0000 http://safeweb.norton.com/report/show?url=digg.com This is a popular news site. I think it is unlikely to have malware on it. Mon, 21 Apr 2008 12:15:59 +0000 http://safeweb.norton.com/report/show?url=news.com Wed, 02 Apr 2008 11:00:49 +0000 http://safeweb.norton.com/report/show?url=buynorton.com This is a site with just ads trying to take advantage of the symantec brand. Wed, 02 Apr 2008 09:42:59 +0000 http://safeweb.norton.com/report/show?url=shopsymantec.com This site hosts _qbotnti.exe which is an executable which can monitor applications, manipulate other programs. Wed, 02 Apr 2008 09:36:07 +0000 http://safeweb.norton.com/report/show?url=madway.net Their IE toolbar tracks the user Wed, 02 Apr 2008 09:33:00 +0000 http://safeweb.norton.com/report/show?url=dhanish.com Wed, 02 Apr 2008 09:31:56 +0000 http://safeweb.norton.com/report/show?url=dler.org This site appears in search ads for popular search terms like "wii" and redirects to amazon.com likely for referral fees. This is a questionable business practice. Tue, 01 Apr 2008 17:46:13 +0000 http://safeweb.norton.com/report/show?url=amazons.com This is the site for a good charity focused on eliminating blindness in India. Tue, 01 Apr 2008 17:20:01 +0000 http://safeweb.norton.com/report/show?url=giftofvision.org This site has been involved in a malware attack on a number of popular sites such as walmart.com, USAToday.com, ABCNews.com, News.com, Target.com, Packard Bell.com, Walmart.com, Rediff.com, MiamiHerald.com, Bloomingdales.com, PatentStorm.us, WebShots.com, Sears.com, Forbes.com, Ugo.com, Bartleby.com, Linkedwords.com, Circuitcity.com, Allwords.com, Blogdigger.com, Epinions.com, Buyersindex.com, Jcpenney.com, Nakido.com, Uvm.edu, hobbes.nmsu.edu, jurist.law.pitt.edu, boisestate.edu using a poison Iframe. Do not download anything from this site or better do not visit this site. Tue, 01 Apr 2008 17:17:06 +0000 http://safeweb.norton.com/report/show?url=malware-scan.com This is a community contributed content site which has come in handy for me on a number of occasions. This is a very popular site and I would expect this to be a safe site. Tue, 26 Feb 2008 13:47:52 +0000 http://safeweb.norton.com/report/show?url=wikipedia.com Stay away from greetings that link to this site as they are malicious. Fri, 18 Jan 2008 17:33:30 +0000 http://safeweb.norton.com/report/show?url=newyearwithlove.com There are New year greetings being sent out which have malicious content. Make sure that you click on greetings only from known friends/family. Fri, 18 Jan 2008 17:32:01 +0000 http://safeweb.norton.com/report/show?url=familypostcards2008.com Fri, 18 Jan 2008 17:25:15 +0000 http://safeweb.norton.com/report/show?url=poposjjw.com This site appears in spam emails advertising gambling. Fri, 18 Jan 2008 17:24:23 +0000 http://safeweb.norton.com/report/show?url=suntrustcasino.com This site appears in spam emails peddling drugs. Stay away from this site. Fri, 18 Jan 2008 17:21:57 +0000 http://safeweb.norton.com/report/show?url=thejobsvip.com Mon, 14 Jan 2008 22:46:29 +0000 http://safeweb.norton.com/report/show?url=micros0ft.cn This site is a typo squatter which just has a bunch of advertisements. These are annoying but I try to stay away from them as they could be dangerous and no good comes out of visiting them. Thu, 13 Dec 2007 23:01:17 +0000 http://safeweb.norton.com/report/show?url=symantc.com This is a typo squatter for www.symantec.com. You get redirected to megago.com which has links which lead to ads. This site megago.com used to infect users before but has since atleast become clean with just obnoxious ads. Better stay away from it as visiting it will come to no good. Thu, 13 Dec 2007 03:58:09 +0000 http://safeweb.norton.com/report/show?url=symante.com This is the website for a Best Inn in Redwood City, CA which has been hacked. Stay away from it as it will drop a downloader and other malicious stuff on your machine as soon as you visit it. Thu, 13 Dec 2007 03:55:07 +0000 http://safeweb.norton.com/report/show?url=bestinnredwoodcity.com