Security Scan Report: rclabor.com.br

Site favicon
Submitted: Completed: publiccompleted
This website contacted 16 IPs in 4 countries across 13 domains to perform 81 HTTP transactions. The main domain is rclabor.com.br and was registered 10 years ago.

Submitted URL: https://rclabor.com.br

AI Security Verdict

Confirmed Scam

Confidence: 95%

10
Risk Score

Legitimate RC Labor site is compromised: ClearFake/EtherHiding blockchain loader, critical malware IDS alert and injected gambling spam make it unsafe to visit.

Risk Factors (5)
Compromised site serving ClearFake/EtherHiding malware loader chain to visitors
Blockchain smart-contract payload retrieval (Polygon RPC via polygon.drpc.org) used for evasion
Critical network IDS malware/exfiltration alert
Injected third-party malicious script hosts with multi-feed corroboration
Hidden casino/gambling spam content inconsistent with legitimate business branding
Domain age information unavailable

Details

Page Title

RC LABOR - Soluções em Equipamentos Laboratoriais - Fabricante nacional de equipamentos para laboratórios com tecnologia de ponta, garantia especializada e assistência técnica permanente.

Scan Type

public

Domain Name Analysis

Within the Brazilian country-code top-level domain (.com.br), 'rclabor.com.br' is registered with no subdomain. Count 7 characters in 'rclabor' split between 2 vowels and five consonants. Segmentation suggests two words: rc, labor. Median word length is 3.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://rclabor.com.br

Page Load Overview

8.80s
Total Load Time
1.3 MB
Total Size

Language Analysis

Primary Language

🇵🇹Portuguese
Code: pt
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:pt-BR
Text Length:5,465 chars
Detector Agreement:60%

Website Classification

Primary Category

finance banking99% confidence
Type: spa
Method: ml+structural

All Detected Categories

finance banking
99%
adult content
99%
documentation technical
98%
technology software
98%
entertainment media
97%

Detected Features

Articles
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
6190.89.249.75Brazil
AS53243Brasil Site Informatica LTDA
5142.251.14.95Google · CDNUnited States
AS15169Google LLC
5142.251.110.97Google · CDNUnited States
AS15169Google LLC
5142.251.14.94Google · CDNUnited States
AS15169Google LLC
5142.251.153.119Google · CDNUnited States
AS15169Google LLC
5192.178.183.148Google · CDNUnited States
AS15169Google LLC
5216.239.34.36Google · CDNUnited States
AS15169Google LLC
5142.251.127.157Google · CDNUnited States
AS15169Google LLC
5142.251.20.94Google · CDNUnited States
AS15169Google LLC
5172.66.146.203Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
8116--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T110933A33E2581873726757D9A830772CB4BAD126CB039BA9F6FA72684BC1DF7061121D

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:e1x8yp0y+GK9cEZd1od4WAsaCAwAn87AMw+ZAbY39OA0x5ob7x/a7yLH/yZWOY1t:e5hqWAsnAwAnwAMwYAbvo/cZN0IGNhbV

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:94170:YNhqAgiO8AMIDFQ0YtbMQxQiHSFjBA2ikEIFSABkNZrB7pSUwoYAhCmISkEBAQ3AsEQQgVGgxZigxxQQHOEGEBiKqMAvuYUo

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:bfbf81fb8b8b8786
Perceptual Hash:bd8b968a96a27938
Difference Hash:20223b233b1b2e2c
Wavelet Hash:bebe81b98b818786
Color Hash:#1f5393

Other Hashes

Crop Resistant:20223b233b1b2e2c

Scan History

Scan history not available

Unable to load historical scan data