Website hacked not detected by VT?

Viruses and worms
1

See: https://www.virustotal.com/en/url/6bc8e3d72a6fd67c2db249ef997699fb9f42466ca7f6fd5b421862648632e6b6/analysis/1426959244/
Detected: http://killmalware.com/studentinsidersguide.org/#
Sucuri detects: ISSUE DETECTED DEFINITION INFECTED URL
Defacement MW:DEFACED:01 htxp://studentinsidersguide.org Defacement MW:DEFACED:01 htxp://studentinsidersguide.org/404javascript.js
Web site defaced. Details: http://sucuri.net/malware/entry/MW:DEFACED:01

Hacked By Dadou Dz Server exploitable: http://www.zeroscience.mk/codes/smartenergy_sqli.txt Re: http://www.webhostingtalk.com/showthread.php?t=1462920 See: http://www.domxssscanner.com/scan?url=http%3A%2F%2Fstudentinsidersguide.org Kleissner virustracker info - -studentinsidersguide.org,192.185.224.36,-ns6589.hostgator.com,Criminals, this means only there is live malware up and active from there. tracker Tracker report attached - do not open links in browser - results for reaerch purposes only. No active ad/analytical, widget tracking detected Avast alerts here: -v.zilionfast dot in -> http://stackoverflow.com/questions/21136708/ie9-https-security-is-compromised-by-http-v-zilionfast-

polonus

2

Likewise recently hacked: See: http://killmalware.com/reinigenwaterput.be/
See: http://toolbar.netcraft.com/site_report?url=http://reinigenwaterput.be
Not flagged here as not malicious per se: https://www.virustotal.com/nl/url/1dd381a12a3eebc9793bbba5fdf0f8ea06058c93df38bde75eaf7e01ff1f3ebf/analysis/1441886275/

ISSUE DETECTED DEFINITION INFECTED URL
Defacement MW:DEFACED:01 -http://www.reinigenwaterput.be
Defacement MW:DEFACED:01 -http://www.reinigenwaterput.be/404testpage4525d2fdc
Defacement MW:DEFACED:01 -http://www.reinigenwaterput.be/404javascript.js
Web site defaced. Details: http://sucuri.net/malware/entry/MW:DEFACED:01

Hacked By Dadou Dz

Method consider: http://www.radiomonpais.fr/test/spip.php?rubrique1

Excessive server info proliferation:
Server Type: Apache/2.2.29 (Unix) mod_ssl/2.2.29 OpenSSL/1.0.1e-fips mod_bwlimited/1.4
IP address: 37.187.35.157

Server Time: Thu, 10 Sep 2015 12:05:24 GMT
Extra: HTTP/1.1 200 OK
Content-Type: text/html

polonus (volunteer website security analyst and website error-hunter)