Re: Dodgy site

[M0XDF]

Hello Suspicious :-)
I think I've lost track, people are saying http://www.modecomponents.co.uk 
  are linking to images on http://fwt.txdnl.com?
I see the gif of Santa's Sledge, it’s a link to http://www.freewebtown.com/hamradio/Mode_Components/christmas_holiday.htm
And that page just lists Chris's availability between end of November  
and the New Year.

I can find no link to fwt on the home page.

I suggest someone ask Chris about this - oh look, I just have!


BTW, my AF mod shipped from Aptos yesterday, so a bit late to get it  
from Chris (I mailed to cancel the order and it had just shipped), but  
I hope he gets even more mod kits etc for K3.

Lastly, I would guess we are in danger of breaching the length and  
relevance rules of the Elecraft site, so we should perhaps hang fire  
on this until Chris responds.

73 de M0XDF, K3 #174
--
Do not meddle in the affairs of Dragons,
For you are crunchy and taste good with ketchup!

On 9 Dec 2008, at 16:42, Dave G4AON wrote:

> Hello David
>
> The issue is the site is linking to http://fwt.txdnl.com which is a
> known malicious content site. What that is about is anyone's guess,  
> but
> Kaspersky doesn't think much of the idea and it is the only site  
> where I
> have come across such alerts. See what Norton thinks of the linked  
> site:
> http://safeweb.norton.com/report/show?name=txdnl.com
>
> Call me suspicious, but I can't see any reason why they would use  
> images
> somehow linking to that dodgy site. The report from Kaspersky is (same
> for all the graphics):
>
> 09/12/2008 16:23:04    Web Traffic    Detected: fwt.txdnl.com/*
> Firefox
> http://fwt.txdnl.com/6-40/h/a/hamradio/Mode_Components/ 
> Sants_Sledge.gif
> Databases
>
>
> 73 Dave, G4AON

_______________________________________________
Elecraft mailing list
Post to: [hidden email]
You must be a subscriber to post to the list.
Subscriber Info (Addr. Change, sub, unsub etc.):
 http://mailman.qth.net/mailman/listinfo/elecraft

Help: http://mailman.qth.net/subscribers.htm
Elecraft web page: http://www.elecraft.com

[Julian, G4ILO]

I think the problem is that Mode Components is using a free web host that has some dodgy users. There is probably nothing wrong with the site itself, but Kaspersky regards Free Web Town as a bad neighbourhood, with some justification if Google is anything to go by.

Given that web hosting is available for well under a tenner in the UK from reputable hosts like 1+1, I don't know why someone would penny-pinch to the extent of using a dodgy free web host for their business site.

My hunch is that this site is safe to visit. But it is quite a common problem that malware is planted on legitimate sites by hackers exploiting weak passwords and security vulnerabilities, so even your local church website could end up delivering malware. It is wise to be cautious, and absolutely right of Dave to post this alert as soon as he received it.