Saturday 4 June 2011

Visiting GHA website NOT good for your health!


Anyone attempting to access the GHA website under either of its domain names (www.gha.gi, www.gha.gov.gi) using the Firefox web browser is being presented with a message that the site has been blocked as it is hosting attack ware.

Clicking on the link offering information about why this page has been blocked returns the page linked below, with the folllowing:
Of the 92 pages that we tested on the site over the past 90 days, 2 page(s) resulted in malicious software being downloaded and installed without user consent. The last time that Google visited this site was on 2011-05-20, and the last time that suspicious content was found on this site was on 2011-05-20.

Malicious software is hosted on 1 domain(s), including imgbbb.net/.

http://safebrowsing.clients.google.com/safebrowsing/diagnostic?client=Firefox&hl=en-GB&site=http://www.gha.gi/httpdocs/index.htm

So, on Googles site crawler visit of 2011-05-20, 2 pages on the GHA website were linking to harmfull content on the imgbbb.net domain.

If the GHA webmaster has removed the links to the compromising content then they just need to follow the instructions here to get the block removed.

While compromising content (and presumably compromised site security to enable it to be there) is a bad thing, this is not quite as bad as the time when the website on the DTTI domain name (and referenced in adverts running internationally at the time encouraging people to setup their ebusiness in Gibraltar) just returned a hacker 'bage of honour page' - or that it took MONTHS for it to be fixed!