Google poisoning, IST, rogues and 250+ reasons to avoid 209.44.* ......

[MysteryFCM]

Following on from the IST (Internet Service Team) and their blackhat SEO involving Google, we've got yet another example of Google poisoning, this time from Netelligent Hosting Services Inc and going via SteepHost and Layered Tech.

Unlike the previous one, that contained the script directly, this one contains random rubbish on the site itself, but loads a file called script.js;

vURL Online - Dissect - http://test-file-and-windows-defender.mycepi.net
http://vurl.mysteryfcm.co.uk/?url=618085

script.js is pretty much the same as the last one, in that it checks the referer, and ONLY redirects to the malware, if you've come from a search engine result;

Read more!
http://hphosts.blogspot.com/2009/05/google-poisoning-ist-rogues-and-250.html