I would avoid till further notice, this site is infectedEvidence or source, please? QUOTE from: CBMatt on September 29, 2010, 12:22:54 AM

Evidence or source, please?

www.spywareinfo.com is a squatter site.

http://www.spywareinfoforum.com/ is fine.

I wouldn't doubt the problem is similar to this one:

http://www.techsupportforum.com/security-center/general-computer-security/349967-solved-http-www-spywareinfo-com-articles-p2p-hacked.html

IE: the person thought that the site was hacked despite the link pointing to the wrong domain. It's not uncommon. Wether that's the case here I haven't a clue, the forum you've linked isn't viewable to me (even after registering...).

They were working on cleaning the site, and it seems to be back up again; however, considering they have been hacked three times since the 11th of August, I would advise exercising caution when visiting the site.

When a site is infected three times within such a short period of time, something is wrong.

With sites like that, they have to deal with being under constant gunfire, so to speak.  Of course, I don't think I've ever seen a site get nearly as bad as CastleCops.  If they weren't being attacked every few hours, something was wrong.

I don't think I've ever seen a site get nearly as bad as CastleCops.  If they weren't being attacked every few hours, something was wrong.

SWI is hosted at Dixiesys, which was sold to 451press in 2008... it hasn't been the same since.

The two prior SWI infections were server infections. It was my understanding that SWI had a dedicated server at Dixiesys. However, the same infection also impacted a number of other sites hosted at Dixiesys. :dontknow:

It might be prudent for SWI to give some consideration to MOVING the site elsewhere