ScanMalware.com

Security Scan Report: drlogan.com.br

Site favicon
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/03ffa1a6-31aa-4895-8415-c650a2789078Domain and IP registration (RDAP)/api/v1/rdap/03ffa1a6-31aa-4895-8415-c650a2789078How often this domain was scanned/api/v1/domain/stats/drlogan.com.brScan history for this domain/api/v1/domain/history/drlogan.com.br?limit=15
This website contacted 32 IPs in 3 countries across 16 domains to perform 227 HTTP transactions. The main domain is drlogan.com.br and was registered 4 years 9 months ago.

Submitted URL: https://drlogan.com.br

AI Security Verdict

Confirmed Scam

Confidence: 95%

9
Risk Score

Legitimate Brazilian healthcare site that is compromised: injected ClickFix fake Cloudflare overlay plus EtherHiding loader push Terminal-paste malware to visitors. Do not interact.

Risk Factors (5)
Compromised site injecting a ClickFix 'Human Verification' overlay instructing Windows users to open Terminal and paste commands (leads to infostealer execution)
EtherHiding blockchain-based payload hosting/rotation via Polygon smart contract lookups
Primary domain drlogan.com.br reported as 'iclickfix' malware in threat intel (single-source, unverified)
Obfuscated loader script contacting multiple threat-feed-flagged hosts, including unranked script host cloud-browse.codes
CRITICAL IDS malware alerts and Spamhaus DROP inbound traffic
Domain age information unavailable

Details

Page Title

Dr. Logan

Scan Type

public

Domain Name Analysis

Within the Brazilian country-code top-level domain (.com.br), 'drlogan.com.br' is registered. The second-level label 'drlogan' is 7 characters long holding two vowels versus five consonants. Splitting it apart reveals two words: dr, logan. Median word length comes out to 3.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://drlogan.com.br

Page Load Overview

18.89s
Total Load Time
52.4 MB
Total Size

Language Analysis

Primary Language

🇵🇹Portuguese
Code: pt
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:pt-PT
Text Length:10,007 chars
Detector Agreement:100%

Website Classification

Primary Category

healthcare medical98% confidence
Type: spa
Method: ml+structural

All Detected Categories

healthcare medical
98%
government public service
95%
corporate business
72%
adult content
58%
entertainment media
31%

Detected Features

Articles

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
10108.179.253.193Vinhedo, São Paulo, Brazil
AS31898Oracle Corporation
7172.66.150.162Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
7178.16.52.101Frankfurt am Main, Hesse, Germany
AS202412Omegatech LTD
7104.20.46.180Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
7142.251.152.4Google · CDNUnited States
AS15169Google LLC
7142.251.157.4Google · CDNUnited States
AS15169Google LLC
7142.251.151.4Google · CDNUnited States
AS15169Google LLC
7142.251.156.4Google · CDNUnited States
AS15169Google LLC
7142.251.153.4Google · CDNUnited States
AS15169Google LLC
7142.251.14.94Google · CDNUnited States
AS15169Google LLC
22732--

Detected Technologies16

WordPressv7.1.3
100%
MetaGenerator
100%
JQueryv3.7.1
100%
PHP
50%
MySQL
50%
parallax.js
40%
Elementorv4.3.5
40%
Apache HTTP Server
40%
particles.js
20%
jQuery Migrate
20%
imagesLoaded
20%
YouTube
20%
Swiper
20%
Slick
20%
Site Kitv1.149.1
20%
Google Maps
20%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T169C5669377F426AD46898CEF8405B95744F2C5B63C1E53ECB8E15A13F83FD248A66B20

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:DLHjCujZvd7+rFhyFCindkL9bi7qOJSBDLCYrMM2aBz9t3NvGBhWp171gV016C3z:/God7+rFhyFCindkL9bNFt3NJpzKsj

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:2700130:TASkkxAQHhI64JxMQyjihQAaCCATA7QKyA0ikALAAQGAihEIHEK+BEwYcQmwlIkAbUASMAwIEogqTD8hIbw0NIB5n+ZERA8I

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:cfcfc3c3ffffffff
Perceptual Hash:b03193c7c6ccc6ce
Difference Hash:1818163600000008
Wavelet Hash:fcc4c0c03c3cff00
Color Hash:#e06c8d

Other Hashes

Crop Resistant:1818163600000008

Scan History

Scan history not available

Unable to load historical scan data