Network shield alert (Google search link redirection)

okay I didn’t post about it yesterday and may be I should have, see screen shot, the Network shield seems to have blocked a re-direction, from a link clicked in a Google search, to an infected site.

The original link was hxxp://11-59.com/blog-posts/secret-government/apple-iphone-4s-ands-siri-privacy-issues/

… and Google sent me there… the issue seems to come from caddylimousine.com

hxxp://wxw.google.com.url.435138767.59caddylimousine.com/url?sa=N&source=web&cd=93&ved=0xvPWsaBc&url=http://11-59.com/blog-posts/secret-government/apple-iphone-4s-ands-siri-privacy-issues/&ei=25QhfqzJ4Ki1pI2OzlAx8p21pg==&usg=FeRA-vaMgYc6xaC645oOHf&sig2=F47EjzNaEXcM6N3TTEgO9L

when the actual Google link should have been:

hxxp://www.google.com/url?sa=t&rct=j&q=iphone%204s%20and%20siri%20privacy&source=web&cd=4&sqi=2&ved=0CEUQFjAD&url=http%3A%2F%2F11-59.com%2Farchives%2F1430&ei=ZbA3T9bWJsP18QOA3MSnAg&usg=AFQjCNEpQQCTq1Bu4Y9UzTf3FHixGSDTtg

… now I’m a bit worried, no idea if that’s related but we’ve had here on the forums quite a few issues about Google links re-directions reported lately. Any comment appreciated, thanks.

no way to reproduce, I tried again from Google and it got me directly to the right page

Is there any continuance of this or does it appear to be a one off ?

Report 2012-02-12 13:33:47 (GMT 1)
Website 11-59.com
Domain Hash e201bb18c28eb0928ae60355b868a4cd
IP Address 213.175.214.126 [SCAN]
IP Hostname server.zerowasteshopping.com
IP Country GB (United Kingdom)
AS Number 29550
AS Name SIMPLYTRANSIT Simply Transit Ltd
Detections 0 / 21 (0 %)
Status CLEAN

Report 2012-02-12 13:17:10 (GMT 1)
IP Address 213.175.214.126
IP Hostname server.zerowasteshopping.com
IP Country GB
AS Number N/A
AS Name N/A
Detections 0 / 25 (0 %)
Status CLEAN

http://sitecheck.sucuri.net/results/11-59.com

  1. I get “Unable to connect to site.”

and what if the issue in on Google servers? … just a guess … I mean the redirection to caddylimousine.com is included in the initial Google search link.

ps: I guessed that the actual site I was looking for was clean, as Avast didn’t detect anything when I got able to access it directly.

Well, is it solved for you now…??
If yes, there’s no reason to dig deeper. :wink:

sorry to disagree, it’s not a matter of solving an own issue, as Avast blocked that thing yesterday so there was obviously no consequences whatsoever on my system, and I didn’t post … but I do today, because I want to know what, where, and how ;D

Well, in case that it was just a FP, there’s no way to answer this… :wink:

I don’t think that was an FP at all Asyn … the actual site is clean (11.59.com), but Google initially re-directed me to another site (caddylousine.com) that’s probably not clean at all.

Well, I can’t tell/check, as the site is down. :wink:
→ “Domain does not exist or is unaccessible.”

that’s alright :wink: