Security Scan: Engetec Serviços de Engenharia

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/2da21c90-7f95-4576-ba68-96d96330eaf7 Domain and IP registration (RDAP)/api/v1/rdap/2da21c90-7f95-4576-ba68-96d96330eaf7 Certificate Transparency/api/v1/ct/engetecengenharia.com How often this domain was scanned/api/v1/domain/stats/engetecengenharia.com Scan history for this domain/api/v1/domain/history/engetecengenharia.com?limit=15

This website contacted 12 IPs in 3 countries across 4 domains to perform 4 HTTP transactions. The main domain is engetecengenharia.com and was registered 14 years ago.

Submitted URL: https://www.engetecengenharia.com

Effective URL:

https://engetecengenharia.com/

Redirected

AI Security Verdict

Confirmed Scam

Confidence: 92%

Risk Score

Legitimate-looking Brazilian engineering firm WordPress site whose page body carries injected ErrTraffic/Exvicy loader and ClickFix/FileFix lures; primary domain matches multi-feed malware Indicators of Compromise. Treat as compromised malware distributor.

Risk Factors (6)

Analyst-vetted ClickFix/FileFix malware kit injected into page (fake 'human verification' lures that copy shell commands to the clipboard)

ErrTraffic/Exvicy injected WordPress loader present in page body (base64 XOR-decoded blob run via new Function)

Threat-intelligence Indicators of Compromise match on the primary domain (clearfake malware, multi-source)

Third-party resource interseq.at flagged as exploit kit 'ek clearfake-1' across 3 feeds

Blockchain RPC connections from an otherwise non-crypto business page

Scanner-vs-client content mismatch (bot-protection/challenge served to datacenter scanner) alongside the above malicious content

Domain age information unavailable

Details

Page Title

Engetec Serviços de Engenhariaother network

Scan Type

public

Favicon Hash

MMH3: -1850780179

MD5: bee8b0c1587b57f07a658356831003ad

Domain Name Analysis

You're looking at domain 'www.engetecengenharia.com' on the commercial generic top-level domain (.com), featuring subdomain 'www'. The registrable portion 'engetecengenharia' spans 17 characters containing 8 vowels alongside nine consonants. Word splitting yields seven words: en, get, ece, n, gen, hari, a. The median word length lands at three characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

3.88s

Total Load Time

1 KB

Total Size

Language Analysis

Primary Language

🇵🇹Portuguese

Code: pt

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:pt-PT

Text Length:14,532 chars

Detector Agreement:100%

Website Classification

Primary Category

documentation technical98% confidence

Type: spa

Method: ml+structural

All Detected Categories

documentation technical

98%

corporate business

85%

government public service

82%

Detected Features

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
4	108.179.253.84	Vinhedo, São Paulo, Brazil	AS31898Oracle Corporation
0	104.26.5.88Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
0	104.16.248.249Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
0	188.114.96.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
0	104.21.16.209Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
0	142.251.20.97Google · CDN	United States	AS15169Google LLC
0	35.227.193.242Google · CDN	Kansas City, Missouri, United States	AS396982Google LLC
0	104.21.3.152Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
0	104.20.24.117Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
0	104.20.38.203Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
4	12	-	-