New scan:

Malware Scanner report for ensinas.com.br

Malicious/Suspicious/Total urls checked
0/0/16
Blacklists
OK
Malicious Redirects
OK
Malicious/Hidden/Total iFrames
0/0/3
Deface / Content modification
Found
Probably the website is defaced. The following signature was found:

Hacked by MAD $CI3NTI$T  (22 websites defaced)

See details below

Free periodic scanning and alerting: setup
(requires eVuln badge or a link to eVuln.com)

Malware & Hack Repair

  • Malware Removal
  • Blacklists Removal
  • Reason Eliminating
  • 1 Month Hack Insurance

More details

Website Hack Insurance

  • Files & DB Monitoring
  • Daily Backups
  • Malware & Hack Detection
  • Unlimited Hack Repairs

More details

Scanned pages/files

RequestServer responseStatus
http://www.ensinas.com.br/
200 OK
Content-Length: 14573
Content-Type: text/html
suspicious
Deface/Content modification. The following signature was found: Hacked by MAD $CI3NTI$T

...[154 bytes skipped]...
com/i5n0pw.gif" type="image/x-icon"><title>H_c____b_MAD_$CI3NTI$T</title></head> <body ondragstart="return false" onselectstart="return false" onload="init()" oncontextmenu="return false" onkeydown="return false"> <script language="JavaScript"> function tb5_makeArray(n){ this.length = n; return this.length; } tb5_messages = new tb5_makeArray(5); tb5_messages[0] = "Hacked by MAD $CI3NTI$T"; tb5_messages[1] = "Hacked by MAD $CI3NTI$T"; tb5_messages[2] = "Hacked by MAD $CI3NTI$T"; tb5_messages[3] = "Hacked by MAD $CI3NTI$T"; tb5_messages[4] = "Hacked by MAD $CI3NTI$T"; tb5_messages[5] = "Hacked by MAD $CI3NTI$T"; tb5_messages[6] = "Hacked by MAD $CI3NTI$T"; tb5_messages[7] = "Hacked by MAD $CI3NTI$T"; tb5_rptType = 'infinite'; tb5_rptNbr = 10; tb5_speed = 50; tb5_delay = 2000; var tb5_counter=1; var tb5_currMsg=0; var tb5_stsmsg=""; function tb5_shuffle
...[14495 bytes skipped]...


http://www.ensinas.com.br/Hac_e_%20___E_r_us%20_hilker_files/swfobject_modified.htm
HTTP/1.1 301 Moved Permanently
Connection: close
Date: Fri, 19 Jun 2015 04:35:03 GMT
Location: http://www.ensinas.com.br/Hac_e_%20___E_r_us%20_hilker_files/swfobject_modified.htm/
Server: nginx/1.8.0
Content-Type: text/html; charset=UTF-8
X-Cacheable: YES
X-Pingback: http://www.ensinas.com.br/xmlrpc.php
X-Served-From-Cache: Yes
clean
http://www.ensinas.com.br/hac_e_%20___e_r_us%20_hilker_files/swfobject_modified.htm/
200 OK
Content-Length: 48843
Content-Type: text/html
clean
http://www.ensinas.com.br/wp-includes/js/jquery/jquery.js?ver=1.8.3
200 OK
Content-Length: 93658
Content-Type: application/javascript
clean
http://www.ensinas.com.br/wp-content/plugins/progress-bar/js/wppb_animate.js?ver=3.5.1
200 OK
Content-Length: 217
Content-Type: application/javascript
clean
http://www.ensinas.com.br/wp-content/themes/superchanger/js/css_browser_selector.js?ver=3.5.1
200 OK
Content-Length: 1321
Content-Type: application/javascript
clean
http://www.ensinas.com.br/wp-content/themes/superchanger/js/jquery.easing.1.3.js?ver=3.5.1
200 OK
Content-Length: 8097
Content-Type: application/javascript
clean
http://www.ensinas.com.br/wp-content/themes/superchanger//js/jquery.pikachoose.js?ver=3.5.1
200 OK
Content-Length: 25458
Content-Type: application/javascript
clean
http://www.ensinas.com.br/wp-content/themes/superchanger//js/royalslider.min.js?ver=3.5.1
200 OK
Content-Length: 50003
Content-Type: application/javascript
clean
http://www.ensinas.com.br/wp-content/themes/superchanger/js/jquery.flexslider-min.js?ver=3.5.1
200 OK
Content-Length: 16808
Content-Type: application/javascript
clean
http://www.ensinas.com.br/wp-content/themes/superchanger/js/cycle.js?ver=3.5.1
200 OK
Content-Length: 31539
Content-Type: application/javascript
clean
http://www.ensinas.com.br/wp-content/themes/superchanger/js/easypaginate.min.js?ver=3.5.1
200 OK
Content-Length: 1510
Content-Type: application/javascript
clean
http://www.ensinas.com.br/wp-content/themes/superchanger/js/jquery.color.js?ver=3.5.1
200 OK
Content-Length: 16229
Content-Type: application/javascript
clean
http://www.ensinas.com.br/wp-content/themes/superchanger/js/jquery.form.js?ver=3.5.1
200 OK
Content-Length: 31710
Content-Type: application/javascript
clean
http://www.ensinas.com.br/wp-content/themes/superchanger/js/jquery.tools.min.js?ver=3.5.1
200 OK
Content-Length: 5993
Content-Type: application/javascript
clean
http://www.ensinas.com.br/wp-content/themes/superchanger/js/jquery.prettyPhoto.js?ver=3.5.1
200 OK
Content-Length: 23508
Content-Type: application/javascript
clean

Malicious Redirects

First query (normal visit):
GET / HTTP/1.1
Host: ensinas.com.br

Result:
Second query (visit from search engine):
GET / HTTP/1.1
Host: ensinas.com.br
Referer: http://www.google.com/search?q=ensinas.com.br

Result:
The result is similar to the first query. There are no suspicious redirects found.

Safe Browsing / Blacklists

Query: http://www.google.com/safebrowsing/diagnostic?site=ensinas.com.br

Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://ensinas.com.br/

Result: ensinas.com.br is not infected or malware details are not published yet.