Security Scan Report: fozengenharia.com.br

Redirected to:
https://www.fozengenharia.com.br/
Site favicon
Submitted: Oct 9, 2026, 9:07:11 AMCompleted: Oct 9, 2026, 9:08:17 AMpubliccompleted

This website contacted 9 IPs in 2 countries across 5 domains to perform 118 HTTP transactions. The main domain is fozengenharia.com.br and was registered 14 years ago.

Submitted URL: https://fozengenharia.com.br

Effective URL:

https://www.fozengenharia.com.br/
Redirected

AI Security Verdict

High Risk

Confidence: 80%

8
Risk Score

Established Brazilian engineering site appears compromised: its primary domain is flagged as 'clearfake' malware by two independent feeds, plus 'unknown loader' reports, and page scripts fetch BSC testnet RPC nodes. No credential or payment forms; do not interact.

Risk Factors (5)
Multi-feed threat-intelligence label of 'clearfake' malware on the primary domain (2 independent feeds)
Additional 'unknown loader' malware indicator on the bare domain
Unexplained page-script fetches to BSC testnet RPC nodes (crypto-infrastructure traffic on a non-crypto site)
Fake security-verification / CAPTCHA gate text prompting user action
Site appears to be a compromised CMS (WordPress components loaded from third-party hosts)
Domain age information unavailable

Details

Page Title

Foz Engenharia – Engenharia Personalizada

Scan Type

public

Domain Name Analysis

The domain 'fozengenharia.com.br' uses the Brazilian country-code top-level domain (.com.br) without a subdomain. The registrable portion 'fozengenharia' spans 13 characters split between six vowels and seven consonants. Tokenizing the label suggests 5 words: f, ozen, gen, hari, a. Median word length comes out to 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://fozengenharia.com.br

Page Load Overview

12.72s
Total Load Time
12.7 MB
Total Size

Language Analysis

Primary Language

🇵🇹Portuguese
Code: pt
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:pt-BR
Text Length:151 chars
Detector Agreement:100%

Website Classification

Primary Category

blog personal website63% confidence
Type: spa
Method: ml+structural

All Detected Categories

blog personal website
63%

Detected Features

OG: article

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
14186.202.153.85Brazil
AS27715Locaweb Servicos de Internet S/A
13104.18.10.207Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
13142.251.20.95Google · CDNUnited States
AS15169Google LLC
13104.17.25.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
13142.251.155.119Google · CDNUnited States
AS15169Google LLC
13142.251.14.94Google · CDNUnited States
AS15169Google LLC
13177.153.51.56Brazil
AS27715Locaweb Servicos de Internet S/A
13142.251.110.97Google · CDNUnited States
AS15169Google LLC
13216.239.34.36Google · CDNUnited States
AS15169Google LLC
1189--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T144A1B67339F889A34C4385D199D7E75A9C90D00BF600889872DC07609FECDEA9253E6C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

48:TXJ+CCmyN9hZCCley3f7lOVV0ZTp5MzGpvCVGyVRxtNUVd0KdvWz:Tkhhsyv7YzqvCEyVLAVd0Kdg

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:4700:UVxCAACAlQBkRSEIBhAYKACYGhAAAACQEoAqBIQJgAAHAUBAUGABEBACGDIBEk6IAgQgaAIBBKO0hAAAAGsBwIIBEAwgMEAE

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:e7c3c3c3c3ffffff
Perceptual Hash:b433c3c6e6999964
Difference Hash:080e1e1e0f000400
Wavelet Hash:e781818181f7f0f0
Color Hash:#7f79d2

Other Hashes

Crop Resistant:080e1e1e0f000400

Scan History

Scan history not available

Unable to load historical scan data