Security Report: aguiasmarketing.com.br - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/36fda68c-c2f7-4b4b-a975-9813f286562c Domain and IP registration (RDAP)/api/v1/rdap/36fda68c-c2f7-4b4b-a975-9813f286562cHow often this domain was scanned/api/v1/domain/stats/aguiasmarketing.com.br Scan history for this domain/api/v1/domain/history/aguiasmarketing.com.br?limit=15

This website contacted 38 IPs in 3 countries across 24 domains to perform 119 HTTP transactions. The main domain is aguiasmarketing.com.br and was registered 3 years 9 months ago.

Submitted URL: https://aguiasmarketing.com.br

AI Security Verdict

Confirmed Scam

Confidence: 96%

Risk Score

Legitimate Brazilian marketing agency site that has been compromised: injected ClearFake/ClickFix code serves a fake 'Human Verification' overlay and loads a PowerShell payload via EtherHiding. Do not visit; do not follow any overlay instructions.

Risk Factors (5)

Injected ClearFake/ClickFix malware loader (3 roster-anchored malicious kits) on the page

4 CRITICAL YARA matches for ClickFix Win+X/Terminal overlay and Polygon contract loader

EtherHiding exfiltration and ClickFix C2 DNS/TLS traffic flagged by 13 CRITICAL IDS alerts

Fake 'Human Verification' overlay coercing Windows visitors to run a pasted PowerShell command

Page scripts query multiple public blockchain RPC nodes to resolve the next-stage payload host

Domain age information unavailable

Details

Page Title

Agência Águias Marketing – Agência de Marketing Digital

Scan Type

public

Favicon Hash

MMH3: -481912229

MD5: 579a48e973444a67b9077cd65ca55f34

Domain Name Analysis

The domain name 'aguiasmarketing.com.br' uses the Brazilian country-code top-level domain (.com.br) without a subdomain. The second-level label 'aguiasmarketing' is 15 characters long split between 7 vowels and 8 consonants. Tokenizing the label suggests 4 words: a, gui, as, marketing. Median word length comes out to 2.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

5.81s

Total Load Time

2.2 MB

Total Size

Language Analysis

Primary Language

🇵🇹Portuguese

Code: pt

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:pt-BR

Text Length:15,531 chars

Detector Agreement:100%

Website Classification

Primary Category

corporate business89% confidence

Type: spa

Method: ml+structural

All Detected Categories

corporate business

89%

government public service

63%

corporate

25%

Detected Features

OG: website

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
8	162.241.203.186	Vinhedo, São Paulo, Brazil	AS31898Oracle Corporation
3	142.251.127.95Google · CDN	United States	AS15169Google LLC
3	172.67.70.207Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
3	192.178.183.97Google · CDN	United States	AS15169Google LLC
3	142.251.20.94Google · CDN	United States	AS15169Google LLC
3	188.114.97.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
3	132.145.155.63Oracle · CLOUD	Ashburn, Virginia, United States	AS31898Oracle Corporation
3	142.251.153.119Google · CDN	United States	AS15169Google LLC
3	142.250.154.149Google · CDN	United States	AS15169Google LLC
3	157.240.0.6Facebook · CDN	Frankfurt am Main, Hesse, Germany	AS32934Facebook, Inc.
119	38	-	-