Security Scan Report: kidscoaching.com.br

Site favicon
Submitted: Oct 2, 2026, 10:25:23 AMCompleted: Oct 2, 2026, 10:27:38 AMpubliccompleted

AI Security Verdict

Confirmed Scam

Confidence: 90%

9
Risk Score

Legitimate Kids Coaching site has been compromised and serves an injected ClickFix fake 'Cloudflare' verification overlay that tricks Windows users into pasting malware commands into Terminal; domain itself flagged as malware.

Risk Factors (4)
Compromised site carrying injected ClickFix fake 'Human Verification' overlay instructing Windows users to press Win+X and paste malicious commands into Terminal
Primary domain flagged as malware (iclickfix) matching the detected overlay kit
CRITICAL IDS alert for EtherHiding malware exfiltration
Page loads threat-intel-flagged third-party resources (polygon.gateway.tenderly.co, browseid.codes)
Domain age information unavailable

Details

Page Title

Homepage - Kids Coachingsecondary capture

Scan Type

public

Domain Name Analysis

Domain 'kidscoaching.com.br' uses the Brazilian country-code top-level domain (.com.br) without a subdomain. The core label 'kidscoaching' covers 12 characters holding four vowels versus eight consonants. Breaking it apart gives two words: kids, coaching. Average segment length settles at six characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://kidscoaching.com.br/

Page Load Overview

75.13s
Total Load Time
1.0 MB
Total Size

Language Analysis

Primary Language

🇵🇹Portuguese
Code: pt
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:pt-BR
Text Length:36,970 chars
Detector Agreement:75%

Website Classification

Primary Category

education learning43% confidence
Type: spa
Method: ml+structural

All Detected Categories

education learning
43%
news/blog
20%

Detected Features

Articles
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
550.6.138.125Vinhedo, São Paulo, Brazil
AS31898Oracle Corporation
5142.251.110.95Google · CDNUnited States
AS15169Google LLC
5142.250.154.97Google · CDNUnited States
AS15169Google LLC
5188.114.96.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
535.227.193.242Google · CDNKansas City, Missouri, United States
AS396982Google LLC
5142.250.154.94Google · CDNUnited States
AS15169Google LLC
5178.16.52.101Frankfurt am Main, Hesse, Germany
AS202412Omegatech LTD
5192.178.183.102Google · CDNUnited States
AS15169Google LLC
523.194.190.166Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
5157.240.0.6Facebook · CDNFrankfurt am Main, Hesse, Germany
AS32934Facebook, Inc.
14028--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1ED74C632A4423536623709D9B266A30931D7920BDF578D9AF7BEC3984FC5CE4A62334D

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

6144:/KsEhm3ywrf4stAPngS+oJAHUblWK1ofT7Emw8KsEhm3ywK:/KsEhmiwsstAPngS+oJ8U5WK1ofT79wl

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:349961:EBCJRFchpWV0CFMhoDPYxIUC4REYXACzIEjg5CIizB6aIDAMAIICQCCkIlCkGzIiEAgcEFUGCAEgdomucmqj6ACAKEBDA40S

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ff3f06060600017f
Perceptual Hash:9692e9e996926aa6
Difference Hash:7b65ecec6c73edcd
Wavelet Hash:ff3f0706060007ff
Color Hash:#2d864f

Scan History

Scan history not available

Unable to load historical scan data