[Scgeeks] Query: watch.ru

rooster acmeanvil at fishnet.com
Sat Aug 23 22:29:08 EDT 2008


watch.ru

McAFee's overview indicates watch.ru is relatively benign, albeit; 
”Reliable sources indicate that this site may be a legitimate business 
under attack by spammers.”

The html on the site presents enticements to d/l “macromedia flash 
player“ (“fp...macromedia.com/go/getflashplayer", as well as to click on 
“iframe” <.../cgi-bin/lasttopic.cgi>.

As a general rule, both of these kinds of objects present potential 
malware threats.  Checks on embedded links on watch.ru to other sites 
(e.g., liveinternet.ru, alltime.ru) didn't yield anything especially 
damning. I suspect there might be click fraud or malware involved since 
watch.ru has a history of vulnerability and the recent incidence of spam 
linking to watch.ru correlates with other click fraud, phishing and 
malware attempts I'm seeing.
Are any of y'all set up to drill down any further to see if this is just 
an intermittently spammy site that resembles a dangerous site or if it's 
actually currently dangerous?

IMWTK
-- 
Happy trails,
rooster
boundary beach, bc


More information about the SCgeeks mailing list