New scan:

Malware Scanner report for thenapervillecosmeticdentist.net

Malicious/Suspicious/Total urls checked
2/0/16
2 pages have malicious code. See details below
Blacklists
OK
Malicious Redirects
OK
Malicious/Hidden/Total iFrames
0/0/0
Deface / Content modification
Found
Probably the website is defaced. The following signature was found:

Hacked By v1ru5 Gr0up  (7 websites defaced)

See details below

Free periodic scanning and alerting: setup
(requires eVuln badge or a link to eVuln.com)

Malware & Hack Repair

  • Malware Removal
  • Blacklists Removal
  • Reason Eliminating
  • 1 Month Hack Insurance

More details

Website Hack Insurance

  • Files & DB Monitoring
  • Daily Backups
  • Malware & Hack Detection
  • Unlimited Hack Repairs

More details

Scanned pages/files

RequestServer responseStatus
http://thenapervillecosmeticdentist.net/
200 OK
Content-Length: 8090
Content-Type: text/html
suspicious
Deface/Content modification. The following signature was found: Hacked By v1ru5 Gr0up

...[5159 bytes skipped]...
br/>
{

if(currentStyle=='inline')

{

currentStyle='none';

}

else

{

currentStyle='inline';

}

document.getElementById('blink').style.display = currentStyle;

setTimeout('blinkSpan()',400);

}msg = " Hacked By v1ru5 Gr0up";



msg = " " + msg;pos = 0;

function scrollMSG()

{

document.title = msg.substring(pos, msg.length) + msg.substring(0, pos);

pos++;

if (pos > msg.length) pos = 0

window.setTimeout("scrollMSG()",100);

}

scrollMSG();



</script>
...[4240 bytes skipped]...


http://masterendi.googlecode.com/files/salju.js
200 OK
Content-Length: 3302
Content-Type: text/plain
clean
http://masterendi.googlecode.com/test404page.js
404 Not Found
Content-Length: 1439
Content-Type: text/html
clean
http://masterendi.googlecode.com//www.google.com/
404 Not Found
Content-Length: 1425
Content-Type: text/html
clean
http://thenapervillecosmeticdentist.net//www.google.com/
HTTP/1.1 301 Moved Permanently
Cache-Control: no-cache, must-revalidate, max-age=0
Connection: close
Date: Fri, 01 Aug 2014 09:10:26 GMT
Pragma: no-cache
Location: http://thenapervillecosmeticdentist.net/www.google.com/
Server: Apache
Content-Length: 0
Content-Type: text/html; charset=UTF-8
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Last-Modified: Fri, 01 Aug 2014 09:10:26 GMT
X-Pingback: http://thenapervillecosmeticdentist.net/xmlrpc.php
clean
http://thenapervillecosmeticdentist.net/www.google.com/
404 Not Found
Content-Length: 13938
Content-Type: text/html
malicious
Malicious code - confirmed by antiviruses (see below)

new TWTR.Widget({ version: 2, type: 'profile', rpp: 10, interval: 6000, width: 250, height: 300, theme: { shell: { background: '#ffffff', color: '#000000' }, tweets: { background: '#ffffff', color: '#000000', links: '#000000' } }, features: { scrollbar: true, loop: false, live: false, hashtags: true, timestamp: false, avatars: true, behavior: 'all' }}).render().setUser('CosmeticDents').start();

Antivirus reports:

Baidu-International
[02:29:47]

http://thenapervillecosmeticdentist.net/wp-content/themes/classynsimple/js/cufon-yui.js
200 OK
Content-Length: 18263
Content-Type: application/javascript
clean
http://thenapervillecosmeticdentist.net/wp-content/themes/classynsimple/js/cufon-libsans.js
200 OK
Content-Length: 134256
Content-Type: application/javascript
clean
http://thenapervillecosmeticdentist.net/wp-content/themes/classynsimple/js/jquery-1.4.2.min.js
200 OK
Content-Length: 72328
Content-Type: application/javascript
clean
http://thenapervillecosmeticdentist.net/wp-content/themes/classynsimple/js/cufon-run.js
200 OK
Content-Length: 200
Content-Type: application/javascript
clean
http://thenapervillecosmeticdentist.net/wp-content/themes/classynsimple/js/custom.js
200 OK
Content-Length: 705
Content-Type: application/javascript
clean
http://thenapervillecosmeticdentist.net/wp-content/themes/classynsimple/js/Quicksand_Bold.js
200 OK
Content-Length: 268108
Content-Type: application/javascript
clean
http://thenapervillecosmeticdentist.net/wp-content/themes/classynsimple/js/menusm.js
200 OK
Content-Length: 2210
Content-Type: application/javascript
clean
http://thenapervillecosmeticdentist.net/wp-content/themes/classynsimple/js/coin-slider.min.js
200 OK
Content-Length: 8493
Content-Type: application/javascript
clean
http://widgets.twimg.com/j/2/widget.js
200 OK
Content-Length: 1489
Content-Type: application/javascript
clean
http://thenapervillecosmeticdentist.net/testimonials-naperville-cosmetic-dentist/
200 OK
Content-Length: 18786
Content-Type: text/html
malicious
Malicious code - confirmed by antiviruses (see below)

new TWTR.Widget({ version: 2, type: 'profile', rpp: 10, interval: 6000, width: 250, height: 300, theme: { shell: { background: '#ffffff', color: '#000000' }, tweets: { background: '#ffffff', color: '#000000', links: '#000000' } }, features: { scrollbar: true, loop: false, live: false, hashtags: true, timestamp: false, avatars: true, behavior: 'all' }}).render().setUser('CosmeticDents').start();

Antivirus reports:

Baidu-International
[02:29:47]


Malicious Redirects

First query (normal visit):
GET / HTTP/1.1
Host: thenapervillecosmeticdentist.net

Result:
HTTP/1.1 200 OK
Connection: close
Date: Fri, 01 Aug 2014 09:10:23 GMT
Server: Apache
Vary: Accept-Encoding
Content-Type: text/html; charset=UTF-8
X-Pingback: http://thenapervillecosmeticdentist.net/xmlrpc.php
Second query (visit from search engine):
GET / HTTP/1.1
Host: thenapervillecosmeticdentist.net
Referer: http://www.google.com/search?q=thenapervillecosmeticdentist.net

Result:
The result is similar to the first query. There are no suspicious redirects found.

Safe Browsing / Blacklists

Query: http://www.google.com/safebrowsing/diagnostic?site=thenapervillecosmeticdentist.net

Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://thenapervillecosmeticdentist.net/

Result: thenapervillecosmeticdentist.net is not infected or malware details are not published yet.