New scan:

Malware Scanner report for defendoprotein.com

Malicious/Suspicious/Total urls checked
1/0/15
1 page has malicious code. See details below
Blacklists
OK
Malicious Redirects
OK
Malicious/Hidden/Total iFrames
0/0/0
Deface / Content modification
Found
Probably the website is defaced. The following signature was found:

Hacked By Crystal V1p3r  (14 websites defaced)

See details below

Free periodic scanning and alerting: setup
(requires eVuln badge or a link to eVuln.com)

Malware & Hack Repair

  • Malware Removal
  • Blacklists Removal
  • Reason Eliminating
  • 1 Month Hack Insurance

More details

Website Hack Insurance

  • Files & DB Monitoring
  • Daily Backups
  • Malware & Hack Detection
  • Unlimited Hack Repairs

More details

Scanned pages/files

RequestServer responseStatus
http://www.defendoprotein.com/
200 OK
Content-Length: 30986
Content-Type: text/html
suspicious
Malicious code - confirmed by antiviruses (see below)

<a href="indication/main.php?id=18"><html> <head> <title>Hacked By Crystal V1p3r</title> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/> <script src="http://ajax.googleapis.com/ajax/libs/jquery/1.9.1/jquery.min.js">

Antivirus reports:

Avast
HTML:Defacement-N [Trj]

Deface/Content modification. The following signature was found: Hacked By Crystal V1p3r

...[15406 bytes skipped]...
n">
<div class="col-left">
<div id="tmbestsellers" class="block">
<h4>Indications Category</h4>
<div class="block_content">
<ul>
<li class="item_odd"><a href="indication/main.php?id=17"><html> <head> <title>Hacked By Crystal V1p3r</title> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/> <script src="http://ajax.googleapis.com/ajax/libs/jquery/1.9.1/jquery.min.js"></script> <script src="http://www.mattboldt.com/demos/t</a></li><li class="item_even"><a href="indication/main.php?id=18"><html> <head> <title>Hacked By Crystal V1p3r</title> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/
...[21984 bytes skipped]...


http://www.defendoprotein.com/js/jquery-1.6.min.js
200 OK
Content-Length: 90518
Content-Type: application/javascript
clean
http://www.defendoprotein.com/js/hover-effect.js
200 OK
Content-Length: 1477
Content-Type: application/javascript
clean
http://www.defendoprotein.com/js/jquery.easing.1.3.js
200 OK
Content-Length: 8301
Content-Type: application/javascript
clean
http://www.defendoprotein.com/js/tms-0.3.js
200 OK
Content-Length: 11944
Content-Type: application/javascript
clean
http://www.defendoprotein.com/js/tms_presets.js
200 OK
Content-Length: 19268
Content-Type: application/javascript
clean
http://www.defendoprotein.com/js/jqtransform.js
200 OK
Content-Length: 14058
Content-Type: application/javascript
clean
http://www.defendoprotein.com/js/prototype.js
200 OK
Content-Length: 163313
Content-Type: application/javascript
clean
http://www.defendoprotein.com/js/js.js
200 OK
Content-Length: 22114
Content-Type: application/javascript
clean
http://www.defendoprotein.com/js/ccard.js
404 Not Found
Content-Length: 328
Content-Type: text/html
clean
http://www.defendoprotein.com/test404page.js
404 Not Found
Content-Length: 331
Content-Type: text/html
clean
http://www.defendoprotein.com/js/validation.js
200 OK
Content-Length: 37488
Content-Type: application/javascript
clean
http://www.defendoprotein.com/js/builder.js
200 OK
Content-Length: 4744
Content-Type: application/javascript
clean
http://www.defendoprotein.com/js/effects.js
200 OK
Content-Length: 38745
Content-Type: application/javascript
clean
http://www.defendoprotein.com/js/dragdrop.js
200 OK
Content-Length: 31192
Content-Type: application/javascript
clean

Malicious Redirects

First query (normal visit):
GET / HTTP/1.1
Host: defendoprotein.com

Result:
Second query (visit from search engine):
GET / HTTP/1.1
Host: defendoprotein.com
Referer: http://www.google.com/search?q=defendoprotein.com

Result:
The result is similar to the first query. There are no suspicious redirects found.

Safe Browsing / Blacklists

Query: http://www.google.com/safebrowsing/diagnostic?site=defendoprotein.com

Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://defendoprotein.com/

Result: defendoprotein.com is not infected or malware details are not published yet.