A Gmail account of mine was apparently hijacked (I just found out today, its an account I stopped using ages ago). In the outgoing messages box there was a message sent containing the link hxxp://mcsett.com/index-sl19.php .
This message was sent to my contacts (a whopping one person other than myself).
Anubis analysis of link
Wondering if anyone is willing to check out the site and see how things go, or what the site even is.
All I know is I didn’t send the email, and Gmail made me jump through a couple hoops to get my email back because it knew my email was compromised.
The hxxp://mcsett.com seems to be spanish website, something with clocks…
if i try the hxxp://mcsett.com/index-sl19.php then i am redirected to aqugalwoti.com/
The last one is listed as Phishing site by Opera
http://www.virustotal.com/url-scan/report.html?id=356521043baa2a23cad7bea14d5284e0-1297411855
also detected at URLVoid 4/18 - DANGEROUS
Scanning site with: AMaDa CLEAN
Scanning site with: BrowserDefender CLEAN
Scanning site with: DNS-BH CLEAN
Scanning site with: Google Diagnostic CLEAN
Scanning site with: hpHosts UNRATED
Scanning site with: joewein.de LLC CLEAN
Scanning site with: Malware Domain List CLEAN
Scanning site with: Malware Patrol CLEAN
Scanning site with: MyWOT DETECTED
Scanning site with: Norton SafeWeb CLEAN
Scanning site with: ParetoLogic URL Clearing House CLEAN
Scanning site with: PhishTank CLEAN
Scanning site with: SURBL DETECTED
Scanning site with: Threat Log CLEAN
Scanning site with: TrendMicro Web Reputation DETECTED
Scanning site with: URIBL DETECTED
Scanning site with: Web Security Guard UNRATED
Scanning site with: ZeuS Tracker CLEAN