Security Scan: Pórtico Esquadrias

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/02f81b17-dc41-4f77-8bc3-93c3001c4ffb Domain and IP registration (RDAP)/api/v1/rdap/02f81b17-dc41-4f77-8bc3-93c3001c4ffbHow often this domain was scanned/api/v1/domain/stats/porticoesquadrias.com.br Scan history for this domain/api/v1/domain/history/porticoesquadrias.com.br?limit=15

This website contacted 18 IPs in 2 countries across 14 domains to perform 156 HTTP transactions. The main domain is porticoesquadrias.com.br and was registered 27 years ago.

Submitted URL: https://porticoesquadrias.com.br

AI Security Verdict

Confirmed Scam

Confidence: 90%

Risk Score

The long-established Pórtico Esquadrias site appears compromised: it loads a BSC EtherHiding resource and shows a fake verification overlay telling users to run PowerShell, with the primary domain matching 'iclickfix' malware intel.

Risk Factors (5)

EtherHiding/ClickFix malware activity confirmed by 19 CRITICAL Suricata ET MALWARE alerts

Primary domain flagged as 'iclickfix' malware by two independent threat-intel feeds

Injected fake 'bot verification' page directing users to run PowerShell and paste clipboard content (ClickFix technique)

Reference to the site's own Instagram channel is not user-facing credential collection, but the page has been tampered with to serve an attack overlay

Domain is unranked in Cisco Umbrella despite claiming 35 years in business (prior only, not decisive)

Domain age information unavailable

Details

Page Title

Pórtico Esquadrias

Scan Type

public

Favicon Hash

MMH3: 750252105

MD5: 8473aaf266637b5b6d04b6dca8904c3e

Domain Name Analysis

The domain name 'porticoesquadrias.com.br' uses the Brazilian country-code top-level domain (.com.br) with no subdomain. The core label 'porticoesquadrias' covers 17 characters holding 8 vowels versus 9 consonants. Segmentation suggests 3 words: porticoes, quad, rias. Median word length is 4 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

6.70s

Total Load Time

49.6 MB

Total Size

Language Analysis

Primary Language

🇵🇹Portuguese

Code: pt

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:pt-BR

Text Length:4,230 chars

Detector Agreement:75%

Website Classification

Primary Category

real estate property100% confidence

Type: spa

Method: ml+structural

All Detected Categories

real estate property

100%

documentation technical

100%

corporate business

100%

government public service

100%

news media journalism

100%

Detected Features

OG: website

Schema.org

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
20	172.67.169.10Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
8	104.17.25.14Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
8	142.251.20.97Google · CDN	United States	AS15169Google LLC
8	142.251.20.95Google · CDN	United States	AS15169Google LLC
8	157.240.0.6Facebook · CDN	Frankfurt am Main, Hesse, Germany	AS32934Facebook, Inc.
8	142.251.14.94Google · CDN	United States	AS15169Google LLC
8	216.239.32.36Google · CDN	United States	AS15169Google LLC
8	142.251.127.155Google · CDN	United States	AS15169Google LLC
8	192.178.183.94Google · CDN	United States	AS15169Google LLC
8	157.240.0.35Facebook · CDN	Frankfurt am Main, Hesse, Germany	AS32934Facebook, Inc.
156	18	-	-