Security Report: marileia.adv.br - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/09fcdbcd-773d-4a13-b5db-e47c209653fe Domain and IP registration (RDAP)/api/v1/rdap/09fcdbcd-773d-4a13-b5db-e47c209653fe Certificate Transparency/api/v1/ct/marileia.adv.br How often this domain was scanned/api/v1/domain/stats/marileia.adv.br Scan history for this domain/api/v1/domain/history/marileia.adv.br?limit=15

This website contacted 18 IPs in 2 countries across 13 domains to perform 181 HTTP transactions. The main domain is marileia.adv.br and was registered 21 years ago.

Submitted URL: https://marileia.adv.br

AI Security Verdict

Confirmed Scam

Confidence: 93%

Risk Score

Legitimate Brazilian real-estate law site that has been compromised and injected with a ClickFix/EtherHiding kit: fake Cloudflare verification tells Windows users to paste shell commands, with EtherHiding exfiltration IDS hits and malware threat-intel on the domain.

Risk Factors (7)

Known malicious ClickFix (Win+X Terminal paste) kit injected into the page

High-precision YARA hit for the ClickFix_WinX_Terminal_Lure phishing pattern

Fake Cloudflare-style 'human verification' overlay using a Ray ID and 'Performance and Security by Cloudflare' wording to pressure users into running copied shell commands

19 CRITICAL IDS alerts: ET MALWARE EtherHiding Exfil M2 (network trojan)

Page JavaScript contacts blockchain RPC endpoints (BSC testnet data-seeds/drpc) consistent with EtherHiding payload retrieval

Primary domain flagged as malware (clearfake) by two corroborating threat-intel feeds

eval() dynamic code execution present in page scripts

Domain age information unavailable

Details

Page Title

Marileia Costa – Direito Imobiliário, Administração de Imóveis, Sucessões e Cobrança Condominial. – Desde o ano 2000 administrando seus bens com seriedade, profissionalismo, transparência, segurança e de forma humanizada. Aqui você não é apenas mais um número!

Scan Type

public

Domain Name Analysis

The domain name 'marileia.adv.br' uses the Brazilian country-code top-level domain (.adv.br) with no subdomain. The core label 'marileia' covers 8 characters split between five vowels and three consonants. Tokenizing the label suggests two words: mari, leia. Median word length comes out to four characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

18.96s

Total Load Time

3.0 MB

Total Size

Language Analysis

Primary Language

🇵🇹Portuguese

Code: pt

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:pt-BR

Text Length:4,075 chars

Detector Agreement:75%

Website Classification

Primary Category

real estate property99% confidence

Type: spa

Method: ml+structural

All Detected Categories

real estate property

99%

government public service

49%

adult content

30%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
11	191.252.96.63	Brazil	AS27715Locaweb Servicos de Internet S/A
10	142.251.20.95Google · CDN	United States	AS15169Google LLC
10	104.20.24.117Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
10	3.33.155.121Aws · CLOUD	United States	AS16509Amazon.com, Inc.
10	142.215.53.55	Washington, District of Columbia, United States	AS15830Equinix (EMEA) Acquisition Enterprises B.V.
10	3.33.196.84Aws · CLOUD	United States	AS16509Amazon.com, Inc.
10	15.197.198.189Aws · CLOUD	United States	AS16509Amazon.com, Inc.
10	104.20.46.180Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
10	52.223.48.152Aws · CLOUD	United States	AS16509Amazon.com, Inc.
10	142.251.14.94Google · CDN	United States	AS15169Google LLC
181	18	-	-