Security Report: aemt.com.br - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/0a2594f2-0f16-4e1c-a18d-6d7a8f767aae Domain and IP registration (RDAP)/api/v1/rdap/0a2594f2-0f16-4e1c-a18d-6d7a8f767aaeHow often this domain was scanned/api/v1/domain/stats/aemt.com.br Scan history for this domain/api/v1/domain/history/aemt.com.br?limit=15

This website contacted 28 IPs in 3 countries across 18 domains to perform 120 HTTP transactions. The main domain is aemt.com.br and was registered 8 years ago.

Submitted URL: https://aemt.com.br

AI Security Verdict

Confirmed Scam

Confidence: 95%

Risk Score

Legitimate law-firm site evidently compromised: a fake Cloudflare/robot check copies a PowerShell command to the clipboard (pastejacking), with EtherHiding and CRITICAL IDS malware alerts. Do not paste or run anything.

Risk Factors (8)

Clipboard hijacking / pastejacking delivering a PowerShell command to the victim

ClickFix-style fake 'verify you are human' prompt coaching manual command execution

EtherHiding: malicious script fetches its next stage from a blockchain smart contract

Multiple CRITICAL IDS malware alerts for EtherHiding exfiltration

Threat-feed domains concealed in obfuscated script (known attacker, Vidar malware)

Fake Cloudflare verification branding used to lend legitimacy to a malicious prompt

Primary domain reported as an unknown malware loader (single-source)

Six cross-domain redirects in the capture

Domain age information unavailable

Details

Page Title

Andrade & Maakaroun Tucci - Andrade & Maakaroun Tucci

Scan Type

public

Domain Name Analysis

Domain 'aemt.com.br' uses the Brazilian country-code top-level domain (.com.br) without a subdomain. The registrable portion 'aemt' spans 4 characters holding 2 vowels versus two consonants. It segments into two words: a, emt. Median word length comes out to two characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

6.72s

Total Load Time

3.9 MB

Total Size

Language Analysis

Primary Language

🇵🇹Portuguese

Code: pt

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:pt-BR

Text Length:5,585 chars

Detector Agreement:33%

Website Classification

Primary Category

government public service85% confidence

Type: spa

Method: ml+structural

All Detected Categories

government public service

85%

corporate

25%

Detected Features

OG: website

Schema.org

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
12	162.241.61.238	Vinhedo, São Paulo, Brazil	AS31898Oracle Corporation
4	142.251.14.95Google · CDN	United States	AS15169Google LLC
4	142.251.110.154Google · CDN	United States	AS15169Google LLC
4	104.20.24.117Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
4	52.223.48.152Aws · CLOUD	United States	AS16509Amazon.com, Inc.
4	172.66.146.203Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
4	15.197.198.189Aws · CLOUD	United States	AS16509Amazon.com, Inc.
4	15.197.152.159Aws · CLOUD	United States	AS16509Amazon.com, Inc.
4	3.33.196.84Aws · CLOUD	United States	AS16509Amazon.com, Inc.
4	142.215.53.55	Washington, District of Columbia, United States	AS15830Equinix (EMEA) Acquisition Enterprises B.V.
120	28	-	-