Security Scan: Academia Aerofisic

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/0423984f-111a-4b15-86a1-a29ae5a94295 Domain and IP registration (RDAP)/api/v1/rdap/0423984f-111a-4b15-86a1-a29ae5a94295 Certificate Transparency/api/v1/ct/aerofisic.com.br How often this domain was scanned/api/v1/domain/stats/aerofisic.com.br Scan history for this domain/api/v1/domain/history/aerofisic.com.br?limit=15

This website contacted 18 IPs in 4 countries across 20 domains to perform 79 HTTP transactions. The main domain is aerofisic.com.br and was registered 7 months ago.

Submitted URL: https://www.aerofisic.com.br/

Effective URL:

https://aerofisic.com.br/

Redirected

AI Security Verdict

Confirmed Scam

Confidence: 96%

Risk Score

Compromised WordPress site (Academia Aerofisic) serving the ErrTraffic/Exvicy ClickFix loader with EtherHiding exfiltration and injected gambling SEO spam; critical YARA/IDS hits confirm malware distribution.

Risk Factors

Compromised WordPress site serving an injected ErrTraffic/Exvicy ClickFix loader (CRITICAL YARA, roster-anchored)

Critical IDS malware/exploit-kit alerts (EtherHiding exfiltration, TA2726 CnC fake plugin, PowerShell download)

Loads multiple third-party resources reported as malware/exploit kit across 2-3 independent threat feeds

Cross-origin credential/beacon POST to a clickfix/drivesurge malware host

Multi-language gambling SEO spam injected into an unrelated fitness-academy domain

Domain age information unavailable

Details

Page Title

Academia Aerofisic

Scan Type

public

Favicon Hash

MMH3: 1622157358

MD5: d82131e9f9ce8a9a83b78e12fe8b7d38

Domain Name Analysis

The domain 'www.aerofisic.com.br' uses the Brazilian country-code top-level domain (.com.br), featuring subdomain 'www'. The core label 'aerofisic' covers 9 characters containing five vowels alongside 4 consonants. Tokenizing the label suggests 4 words: aer, of, is, ic. Median word length is 2 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

38.80s

Total Load Time

699 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:29%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:pt-BR

Text Length:4,486 chars

Detector Agreement:50%

Language mismatch: Declared as pt-BR but detected as en

Website Classification

Primary Category

gambling betting100% confidence

Type: dynamic

Method: ml+structural

All Detected Categories

gambling betting

100%

entertainment media

87%

Detected Features

Articles

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
11	191.252.83.193	Brazil	AS27715Locaweb Servicos de Internet S/A
4	188.114.96.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
4	104.18.11.59Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
4	172.66.150.162Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
4	104.26.3.238Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
4	172.67.70.207Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
4	104.26.5.88Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
4	138.124.96.160	Switzerland	AS41745Baykov Ilya Sergeevich
4	172.67.171.128Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
4	188.114.97.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
79	18	-	-