See: http://maldb.com/captoon.com/# See: htxp://www.unphp.net/decode/5aed3426b8e42b8368019f623a9d2231/ / |{gzip} and avast! Webshield alerts for PHP:Redirectot-AF[Trj] there. Site with warnings not blacklisted: http://sitecheck.sucuri.net/scanner/?scan=http%3A%2F%2Fcaptoon.com See: http://sucuri.net/malware/malware-entry-mwblacklisted35 redirect link blocked by Birdefender’s TrafficLight etc: https://www.virustotal.com/nl/url/d0fae3325b67c86dfb7f160080f90119b11553694b92847828158832c6658236/analysis/ See: http://urlquery.net/report.php?id=1396880899731 IDS alert for Detected a Dynamic DNS URL → http://dnscheck.pingdom.com/?domain=korawi.4pu.com×tamp=1396880985&view=1 Missed here: http://quttera.com/detailed_report/korawi.4pu.com kraken’s Virus Tracker classifies as: korawi.4pu.com,198.71.128.88,ns2.changeip.org,Criminals, meaning there is active malware that is up there.
pol