Anyone know of Green Mill Sportsman's Club?

I was going through and valadating some website information and Norton Securety advised me of 28 threats on their website. It is most likely not intended but, if someone is from the club and/or knows the webmaster for the club, they need to investigate it. If Norton continues to have a hard time with their website, I am going to remove them from the Range List page.
This is from Norton Safe Web...

Threats found: 28
Here is a sample: (for more information about a specific threat, click on the Threat Name below)

One example, most are similar....


Threat Name: HTTP Fake AV Redirect Request
Location: http : // greenmillsportsman.org/dpyzg.php?sell=demi%20moore%20bush%20shot




Jerry

I use this website and have no issues with AVG or Malwarebytes:

http://www.greenmillsportsman.org/gmsc/node/6

We shoot there once a month for smallbore silo.

See you in 4 days!!

demi moore bush shot??? That is what is in your web address.

I did not make it up, it was in Norton. I trust Norton more than I do the average person putting up a website

It is possible a hacker got into it and has some stuff that needs wiped off.
I still am not going there until Norton says it is alright and, it is does not get cleaned up I am not going to be forwarding people there from my site.

If you go there, I would mention it to someone from the club.

You can go to norton and ask to get a secure rating. If they do that, they will find out where the problems are.

If they can check and see what files are on the server, they should be able to see what does not belong.

Jerry

See if this link works to take you to the report...

http://safeweb.norton.com/report/show?u ... %2Fgmsc%2F

I'll see if I can pass the word on to the correct people. It's a small little club.

AZRifle wrote:See if this link works to take you to the report...

http://safeweb.norton.com/report/show?u ... %2Fgmsc%2F

Yep.

So the average user(visitor) wouldn't know anything was wrong, right?

Trent,
If I had to guess, It is a relay for a hacker. They have links somewhere that redirect people to that site/those pages. The php extensions at the page are pages that link to a database and automatically load the content based on the data followed by the question mark.

And oh yah! See you Saturday haha!
I was lost for a bit.... you were talking about shooting at the Green Mill place and then wrote, see you in 4 days. I was thinking, I am not shooting there???

Now I get it!

This is still marked as a hacked site by Norton.

Jerry

I just checked the site out, including the URLs listed in the Norton Report. All of them return HTTP 404 error codes, which mean those pages don't exist on the site now. It's not clear from the Norton report when they did exist. I'm guessing that the site owners probably don't care enough about Norton's safeweb rating enough to put forth the effort to jump through the hoops necessary to get the report removed. I'd guess that the report came from a past domain owner who had the site hosted somewhere else, as those URLs look like standard redirects designed to snag search engines years ago before the search algorithms in Bing and later Google were improved. Those URLs aren't from a site getting hacked. They're URLs that were deliberately set up by the hoster to hijack the search traffic. If it were a victim of a hacking attempt, it would be the base URL or existing legitimate pages that got redirects injected.

I'm an engineer in the online services industry and I deal with security and hacking fairly often. I've only heard safeweb mentioned a couple times in the last few years, including seeing it here. I wouldn't put a lot of stock in its validity or how current its results are. I trust actually verifying whether or not the threats exist more than blindly trusting a Norton report that's who knows how old.

My problem with it is that for one, I use Norton and, if it warns me to NOT gop to a site, I would feel foolish to ignore the warning and go anyway.

For another, I have shooting ranges and clubs listed for people that want to try Rifle Silhouette. Besides feeling foolish for me to continue to the site, I don't care to recommend others to go there if I won't.

In the interest of internet safety, I have their club removed from my listings until it is not throwing up warnings for me to go there.

Jerry