Security Scan Report: www.cunhalvormarkets.net

Redirected to:
https://cunhalvormarkets.net/
Site favicon
Submitted: Completed: publiccompleted
This website contacted 5 IPs in 2 countries across 2 domains to perform 9 HTTP transactions. The main domain is cunhalvormarkets.net and was registered 1 month ago.

Submitted URL: https://www.cunhalvormarkets.net/

Effective URL:
https://cunhalvormarkets.net/
Redirected

AI Security Verdict

Confirmed Scam

Confidence: 93%

9
Risk Score

Analyst-vetted fake 'AI trading platform' lead-funnel kit confirmed by a CRITICAL YARA rule (SMS phone verification, /api/leads token injection) on a 29-day-old invented brand; do not submit any personal or phone data.

Risk Factors (6)
Known malicious phishing kit identified by analyst-vetted roster (AI-trading lead funnel with SMS verification)
CRITICAL high-precision YARA hit for lead-token injection and SMS one-time-code harvesting overlay
Obfuscated/encoded inline JavaScript with crypto APIs alongside off-domain infrastructure
External .cfd / .pro hosts unrelated to the site's brand
HIGH-severity IDS alert (Spamhaus DROP listed traffic)
Domain only 29 days old, unranked, promoting unlicensed 'AI' financial services
Domain age information unavailable

Details

Page Title

Cunhalvor Markets — Plataforma de IA para gestão de risco familiar

Scan Type

public

Domain Name Analysis

The domain 'www.cunhalvormarkets.net' uses the network infrastructure generic top-level domain (.net) with subdomain 'www'. Count 16 characters in 'cunhalvormarkets' split between five vowels and eleven consonants. It segments into 4 words: cunha, lv, or, markets. Median word length comes out to 3.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://www.cunhalvormarkets.net/

Page Load Overview

1.92s
Total Load Time
36 KB
Total Size

Language Analysis

Primary Language

🇵🇹Portuguese
Code: pt
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:pt
Text Length:4,801 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software64% confidence
Type: dynamic
Method: ml+structural+ocr_tiebreaker

All Detected Categories

technology software
64%
adult content
62%
government public service
59%
corporate
35%

Detected Features

Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
5158.94.210.119Amsterdam, North Holland, Netherlands
AS202412Omegatech LTD
1172.67.183.149Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1104.17.25.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1172.67.148.166Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1104.17.208.5Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
95--

Detected Technologies2

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T18E735C513587101512B396E7739FAB0EBA6ED2038885C991B6FD4A51DFC7EE3A026B0C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:aPpuEyOl/3EPQxFcIID6RP3GwTSgpVYa23p7rI+iT3uQ/KUrFq9LhN3REyyIQrpu:wFEPcuIIDK/TSIed0/K8y7r

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:73609:CxBBCRRKJgIhEGYNjkkFoCQsAAjwUAlIA1CihqIFUEDFkCQJJqAOmhyqQyVisbAIRUDAdbAVAAaggnAIFQUUUiCMqhSSKEUA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ff0000000000ffff
Perceptual Hash:aa4bb90ab8c3e3c9
Difference Hash:2bc5c16535c5271e
Wavelet Hash:ff0031310101ffff
Color Hash:#931f3c

Scan History

Scan history not available

Unable to load historical scan data