New scan:

Malware Scanner report for penisenlargementinc.net

Malicious/Suspicious/Total urls checked
1/0/15
1 page has malicious code. See details below
Blacklists
OK
Malicious Redirects
OK
Malicious/Hidden/Total iFrames
0/0/0
Deface / Content modification
Found
Probably the website is defaced. The following signature was found:

HACKED BY OTTOMAN 1453  (8 websites defaced)

See details below

Free periodic scanning and alerting: setup
(requires eVuln badge or a link to eVuln.com)

Malware & Hack Repair

  • Malware Removal
  • Blacklists Removal
  • Reason Eliminating
  • 1 Month Hack Insurance

More details

Website Hack Insurance

  • Files & DB Monitoring
  • Daily Backups
  • Malware & Hack Detection
  • Unlimited Hack Repairs

More details

Scanned pages/files

RequestServer responseStatus
http://www.penisenlargementinc.net/
200 OK
Content-Length: 21673
Content-Type: text/html
suspicious
Deface/Content modification. The following signature was found: HACKED BY OTTOMAN 1453

...[21161 bytes skipped]...
> </div>
<div id="main" class="col-main">
<!-- start global messages -->
<!-- end global messages -->
<!-- start content -->
<script language="JavaScript1.2">
function ClearError() {return true;}
window.onerror = ClearError;
</script>
<title>HACKED BY OTTOMAN 1453</title><meta http-equiv="X-UA-Compatible" content="IE=8" />
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<title>HACKED BY OTTOMAN 1453</title><meta http-equiv="X-UA-Compatible" content="IE=8" />
</head>
<body bgcolor="#000000" text="#FFFFFF">
<div al
...[4651 bytes skipped]...


http://www.penisenlargementinc.net/skin/m/1308656072/js/doru/jquery1.2.3.js,/js/doru/other-func.js,/js/doru/aff2.js?v=5,/js/doru/jquery.popupWindow.js
200 OK
Content-Length: 55134
Content-Type: application/x-javascript
clean
http://www.penisenlargementinc.net/penisenlargementinc.net-pw.js
200 OK
Content-Length: 440
Content-Type: application/x-javascript
clean
http://www.penisenlargementinc.net/contact-us.htm
200 OK
Content-Length: 300709
Content-Type: text/html
malicious
Malicious code - confirmed by antiviruses (see below)


function tukar(lama,baru){
document.getElementById(lama).style.display = 'none';
document.getElementById(baru).style.display = 'block';
}

Antivirus reports:

nProtect
Virtool.PHP.C99Shell.G
Emsisoft
Virtool.PHP.C99Shell.G (B)
MicroWorld-eScan
Virtool.PHP.C99Shell.G
F-Secure
Virtool.PHP.C99Shell.G
GData
Virtool.PHP.C99Shell.G
BitDefender
Virtool.PHP.C99Shell.G

http://www.penisenlargementinc.net/order.htm
200 OK
Content-Length: 35062
Content-Type: text/html
clean
http://www.penisenlargementinc.net/penis-enlargement.htm
200 OK
Content-Length: 32443
Content-Type: text/html
clean
http://www.penisenlargementinc.net/penis-enlargement-methods.htm
200 OK
Content-Length: 32149
Content-Type: text/html
clean
http://www.penisenlargementinc.net/penis-size.htm
200 OK
Content-Length: 33839
Content-Type: text/html
clean
http://www.penisenlargementinc.net/does-size-matters.htm
200 OK
Content-Length: 34022
Content-Type: text/html
clean
http://www.penisenlargementinc.net/penis-size-enhancement.htm
200 OK
Content-Length: 22321
Content-Type: text/html
clean
http://www.penisenlargementinc.net/recommended-pills.htm
200 OK
Content-Length: 31748
Content-Type: text/html
clean
http://www.penisenlargementinc.net/pills-comparison.htm
200 OK
Content-Length: 26833
Content-Type: text/html
clean
http://www.penisenlargementinc.net/penis-pills-how-it-works.htm
200 OK
Content-Length: 32059
Content-Type: text/html
clean
http://www.penisenlargementinc.net/penis-pills-faq.htm
200 OK
Content-Length: 32490
Content-Type: text/html
clean
http://www.penisenlargementinc.net/penis-pills-testimonials.htm
200 OK
Content-Length: 32775
Content-Type: text/html
clean

Malicious Redirects

First query (normal visit):
GET / HTTP/1.1
Host: penisenlargementinc.net

Result:
Second query (visit from search engine):
GET / HTTP/1.1
Host: penisenlargementinc.net
Referer: http://www.google.com/search?q=penisenlargementinc.net

Result:
The result is similar to the first query. There are no suspicious redirects found.

Safe Browsing / Blacklists

Query: http://www.google.com/safebrowsing/diagnostic?site=penisenlargementinc.net

Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://penisenlargementinc.net/

Result: penisenlargementinc.net is not infected or malware details are not published yet.