hp-collection.org hacked?

[Han]

I tried to visit hp-collection.org and Firefox sent me to:

http://safebrowsing.clients.google.com/safebrowsing/diagnostic?client=Firefox&hl=en-US&site=http://www.hp-collection.org/

Is this the case for anyone else?

[Wlodek Mier-Jedrzejowicz]

Firefox blocked it for me too, quoting Google as the source of information that the page had been hacked to contain malicious software, which downloads itself to visitors. Safari took me to the home page, which looked OK, but I did not stay for long, even though my net monitor did not show any suspicious downloading. Let's see if the owner reacts.

[Bruce Bergman]

Chrome flashed the page for a second, then blocked it. It appears to have malicious javascript near the bottom. Here was the warning:

Quote:

---

The website at www.hp-collection.org contains elements from the site pipa-buzz.ru, which appears to host malware – software that can hurt your computer or otherwise operate without your consent. Just visiting a site that contains malware can infect your computer.

What is the current listing status for pipa-buzz.ru?
Site is listed as suspicious - visiting this web site may harm your computer.

What happened when Google visited this site?
Of the 7 pages we tested on the site over the past 90 days, 0 page(s) resulted in malicious software being downloaded and installed without user consent. The last time Google visited this site was on 2010-09-16, and the last time suspicious content was found on this site was on 2010-09-16.

Has this site acted as an intermediary resulting in further distribution of malware?
Over the past 90 days, pipa-buzz.ru did not appear to function as an intermediary for the infection of any sites.

Has this site hosted malware?
Yes, this site has hosted malicious software over the past 90 days. It infected 21 domain(s), including u-lit.de/, 1klein.de/, chernyshev.info/.

How did this happen?
In some cases, third parties can add malicious code to legitimate sites, which would cause us to show the warning message

---

The site is classified as one which redirects you to rogue antivirus software, presumably infecting your computer and then basically ending your life as you know it.

Thanks,

bruce

Edited: 18 Sept 2010, 12:22 a.m.

[Matthias Wehrli]

As webmaster of this site I can assure you that the site is free of malware. Time and again there appears to be trying to Russian server to break into my domain. The public part is free of malware since the closing of the guestbook. You can surf safely.
I'm currently in contact with the provider.

Best regards,
Matthias

[Alejandro Paz (Germany)]

It seems that the image logobackgr.jpg is the link to the russian site... it is referenced in the style sheet.