Detected as Trojan.Script.StartPage.fakt, a compliked script trojan, missed here: https://www.virustotal.com/nl/url/2af86499877abf35bd8c1045368694541ad4643caf63c5310791bde9051dff12/analysis/1415571093/
and here: http://quttera.com/detailed_report/theamericanbond.com & here: http://sitecheck.sucuri.net/results/theamericanbond.com#sitecheck-details
Detected and reported now for 7 days: http://killmalware.com/theamericanbond.com/
Gruesome defacement, advice: Do not visit!
polonus
A more recent example of such a hack: http://killmalware.com/kcrockyhorror.com/#
See: Fatal error: Call to undefined function wp() in /home/content/96/6595396/html/kcrockyhorror/wp-blog-header.php on line 14
See: http://toolbar.netcraft.com/site_report?url=http://kcrockyhorror.com
polonus
Update, another such malicious script defacemenr: http://killmalware.com/catholicchurchwebdesigns.com/#
VT does not detect these. Sucuri does:
ISSUE DETECTED DEFINITION INFECTED URL
Defacement MW:DEFACED:01 htxp://catholicchurchwebdesigns.com
Defacement MW:DEFACED:01 htxp://catholicchurchwebdesigns.com/404testpage4525d2fdc
Defacement MW:DEFACED:01 htxp://catholicchurchwebdesigns.com/404javascript.js
Defacement MW:DEFACED:01 htxp://catholicchurchwebdesigns.com/404javascript.js
Web site defaced. Details: http://sucuri.net/malware/entry/MW:DEFACED:01
function keypressed(){alert(“Hacked By Zerocore Haxor”);}
→ http://www.zone-h.org/mirror/id/21373962
→ http://www.perfectleads.com/lead/14714771/catholicchurchwebdesigns.com
Paraded here in 2013 already: http://www.webpagesthatsuck.com/worst-websites-of-2013-Jan-to-June.html
pol
Quttera misses detection completely: http://quttera.com/detailed_report/catholicchurchwebdesigns.com