Hi everyone,
I’m a first time user of this site because the website I run, MuggleNet.com, has been considered a ‘Reported Attack Site’ by Google.
We’re having a hard time figuring out what’s causing the problem. We assume it’s one of our ads. We’ve already removed our pop up ads and resubmitted to Google, and after they reviewed it the problem still exists.
Any help would be really appreciated. Feel free to ask any questions you have and I’ll provide you with answers. Thanks in advance!
Hello,
I ran a quick scan of your site and found malicious code on the homepage. You can see the results of my scan here: http://www.blacklistdoctor.com/bld/diagnose.php?URL=MuggleNet.com&scan_id=9848
There is some javascript being sourced in that brings in a *.gif file, but in fact it appears to be malicious code.
You can request a full scan of your site from the link above. Please remove the malicious code from your site, and then request another review from Google webmaster tools. If your site is clean, Google will remove the warning.
Best,
Ameet
Hello :-),
Jaal Scan ID # 313442-447 output
Malicious code detected on line 513 of mugglenet.com
starts with
<!—pi.ning.com/files/ZxMx-ugkeqimfV6NkxGQBHsdvFlAS6VAfLwJItosnSmgGaibURF*43sEAYkCtvi-ZQbRsIf8JwN7GoGdsos4t9rjLfzr2qfL/label.gif>
Please look at the copy of the page on the server, if you cannot locate this code, it is probably being injected at runtime, when a user is requesting the page. It might be useful to then wipe out the hosting directory and check for malware, on the server and in the backend database. You can also ask for help from your hosting provider. Please check out other pages too.
If you have any specific issues feel free to ask for help.
Also, I am collecting info from people affected by attacks like this, if it would be possible for you to share your experience, could you kindly shoot me a mail at a.banerje e @ s top the hac ker .com (please remove the spaces).
We also provide vulnerability identification and mitigation services to help websites from being infected in the first place.
Hope this helps,
-A
Dr. Anirban Banerjee,
Jaal LLC, Riverside, CA.
www.stopthehacker.com
Jaal: Protecting the Internet, one website at a time™
Its a typical CPanel XSS attack.
-A
Dr. Anirban Banerjee,
Jaal LLC, Riverside, CA.
www.stopthehacker.com
Jaal: Protecting the Internet, one website at a time™
