Security Report: goodnews.dev.br - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/066bd716-cfbd-4b9d-b358-d8a03015ced7 Domain and IP registration (RDAP)/api/v1/rdap/066bd716-cfbd-4b9d-b358-d8a03015ced7How often this domain was scanned/api/v1/domain/stats/goodnews.dev.br Scan history for this domain/api/v1/domain/history/goodnews.dev.br?limit=15

This website contacted 24 IPs in 2 countries across 14 domains to perform 229 HTTP transactions. The main domain is goodnews.dev.br and was registered 4 years 3 months ago.

Submitted URL: https://goodnews.dev.br

AI Security Verdict

High Risk

Confidence: 82%

Risk Score

Domain carries a multi-source 'clearfake' malware threat-intel hit and its scripts fetch from BSC testnet RPC nodes (EtherHiding/drainer pattern); likely a compromised legitimate site serving malware. Avoid.

Risk Factors (3)

Content-malware threat-intelligence match (ClearFake malware family) on the primary domain

Page JavaScript contacts blockchain RPC nodes, the on-chain payload-retrieval pattern associated with ClearFake/drainers

Urgency/countdown marketing ('OFERTA ESPECIAL LIBERADA', 'DESBLOQUEIO LIMITADO')

Domain age information unavailable

Details

Page Title

goodnews.dev.br – +Modo Turbo

Scan Type

public

Domain Name Analysis

The domain name 'goodnews.dev.br' uses the Brazilian country-code top-level domain (.dev.br) and has no subdomain. The second-level label 'goodnews' is 8 characters long containing three vowels alongside 5 consonants. Splitting it apart reveals two words: good, news. The median word length lands at 4 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

13.09s

Total Load Time

5.7 MB

Total Size

Language Analysis

Primary Language

🇵🇹Portuguese

Code: pt

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:pt-BR

Text Length:8,630 chars

Detector Agreement:50%

Website Classification

Primary Category

news media journalism87% confidence

Type: spa

Method: ml+structural

All Detected Categories

news media journalism

87%

technology software

86%

blog personal website

77%

government public service

73%

documentation technical

68%

Detected Features

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
22	172.67.191.202Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
9	142.251.14.95Google · CDN	United States	AS15169Google LLC
9	192.0.76.3	San Francisco, California, United States	AS2635Automattic, Inc
9	142.250.154.97Google · CDN	United States	AS15169Google LLC
9	188.114.96.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
9	142.215.53.55	Washington, District of Columbia, United States	AS15830Equinix (EMEA) Acquisition Enterprises B.V.
9	15.197.198.189Aws · CLOUD	United States	AS16509Amazon.com, Inc.
9	35.71.129.99Aws · CLOUD	United States	AS16509Amazon.com, Inc.
9	15.197.152.159Aws · CLOUD	United States	AS16509Amazon.com, Inc.
9	104.20.46.180Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
229	24	-	-