php.net currently flagged as "suspicious site" blocked in Chrome/Firefox [Update: Back up]

If you're trying to get to the php.net website, you'll likely see the above result, instead of the site loading.

Chrome and Firefox is currently flagging the site as "suspicious" and further warns that visiting it "may harm your computer".

In the advanced settings details page of Chrome it offers up the additional information that the site was listed for suspicious activity in the past 90 days, with 4 pages supposedly installing malware without user consent.

What is the current listing status for php.net?

Site is listed as suspicious - visiting this web site may harm your computer.

Part of this site was listed for suspicious activity 1 time(s) over the past 90 days.

What happened when Google visited this site?

Of the 1613 pages we tested on the site over the past 90 days, 4 page(s) resulted in malicious software being downloaded and installed without user consent. The last time Google visited this site was on 2013-10-24, and the last time suspicious content was found on this site was on 2013-10-23.

Malicious software includes 4 trojan(s).

Malicious software is hosted on 4 domain(s), including cobbcountybankruptcylawyer.com/stephaniemari.com/northgadui.com/.

3 domain(s) appear to be functioning as intermediaries for distributing malware to visitors of this site, including stephaniemari.com/northgadui.com/satnavreviewed.co.uk/.

This site was hosted on 79 network(s) including AS36752 (YAHOO-SP1)AS23148 (TERREMARK)AS36444 (NEXCESS-NET).

The creator of php, Rasmus Lerdorf, was on the case hours ago but has yet to see any turnaround from Google, in what is likely a false flag.

According to Lerdorf, one report shows at least one of the pages flagged appears to be throwing up the error, but despite looking into it, he can find nothing wrong with the page.

According to the Webmaster Tools, Lerdorf says the problem seems to originate to a javascript injection on one or more pages, but no further info on how that is done can be seen, leaving him a bit stumped.

Six hours on from when the report started appearing, It looks like Google will have to help out here to find out exactly why the pages are being flagged, and get them back up again.

Update: Apparently the site was compromised according to Netcraft, but the code is no longer accessible, and the site is back again.

Report a problem with article
Previous Story

Microsoft builds massive 27x13-foot Surface 2 in London

Next Story

Stardock helps to form Oxide Games; making new 64-bit Nitrous Engine

15 Comments

Commenting is disabled on this article.

"It looks like Google will have to help out here to find out exactly why the pages are being flagged, and get them back up again."

...and what makes php.net deserve such "special" treatment from Google? ...they should have to go through the same process as anyone else's site that's been flagged by Google has to go through!

Works without any problems here (Firefox 24). No pages down as far as I can tell.

Why do you keep spelling Rasmus's sirname wrong?

SK[ said,]Chrome working fine here also.
It's 'surname' btw. Looks like were all able to make mistakes?

Ah there goes my being perfect

They are offering new version of their site as a beta for quite some time I think may be for 90 days, may be this is the reason they have been flaged.