Security Scan Report: domclinica.com.br

Submitted: Oct 9, 2026, 6:47:27 PMCompleted: Oct 9, 2026, 6:48:06 PMpubliccompleted

AI Security Verdict

Confirmed Scam

Confidence: 90%

10
Risk Score

Legitimate 8-year-old dental clinic site that has been compromised: it now serves a ClickFix fake-browser-verification overlay and EtherHiding blockchain exfiltration, with the primary domain flagged for malware by multiple feeds.

Risk Factors (4)
Compromised legitimate site serving a ClickFix fake browser-verification social-engineering overlay that instructs users to press Win+X (lure to run malware)
EtherHiding / blockchain-based exfiltration: page-behaviour scripts contact multiple public blockchain RPC endpoints
Primary domain itself carries a multi-source malware Indicator of Compromise (clearfake)
Injected off-topic SEO spam blog content (gambling/casino link injection) indicating unauthorized content injection
Domain age information unavailable

Details

Page Title

Página Principal Dom Odontologia Avançada - Dom Odontologia Avançada %Nome Da Empresa

Scan Type

public

Domain Name Analysis

You're looking at domain 'domclinica.com.br' on the Brazilian country-code top-level domain (.com.br) with no subdomain. The core label 'domclinica' covers 10 characters with 4 vowels and six consonants. Breaking it apart gives three words: dom, clinic, a. Median word length comes out to three characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://domclinica.com.br

Page Load Overview

4.17s
Total Load Time
1.8 MB
Total Size

Language Analysis

Primary Language

🇵🇹Portuguese
Code: pt
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:pt-BR
Text Length:17,302 chars
Detector Agreement:75%

Website Classification

Primary Category

healthcare medical95% confidence
Type: spa
Method: ml+structural

All Detected Categories

healthcare medical
95%
corporate
35%
news/blog
20%
forum
20%

Detected Features

Articles
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
17191.6.223.205Brazil
AS28299LWSA S/A
11142.251.110.95Google · CDNUnited States
AS15169Google LLC
11150.136.141.142Oracle · CLOUDAshburn, Virginia, United States
AS31898Oracle Corporation
11178.16.52.101Frankfurt am Main, Hesse, Germany
AS202412Omegatech LTD
11142.250.154.94Google · CDNUnited States
AS15169Google LLC
11172.67.70.207Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1135.227.193.242Google · CDNKansas City, Missouri, United States
AS396982Google LLC
11104.26.4.88Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
948--

Detected Technologies8

WordPressv7.1.3
100%
JQueryv3.7.1
100%
Bootstrapv7.1.3
100%
50%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T14A9454330348537EB29489C19224B61A62F9DA37E478245DF7AB69EFBF0DC835075932

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:cQwVWGhiOdXImLcNx7F0n9l0hRAeAePftNdSfDG7hYZJ3b9ACBs/VyCpCt:cTlCPRS

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:429248:htRlGgOECdTIYmEAAU0BKAFBgbBRgggARnIFiYWPUgD+QRAWHIS6QoCACaAKQBGIMuhRcQ0VpAybSzJCCBNpgcSKBAaKA1AC

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffffc38383c1ffff
Perceptual Hash:bcc3c13c3ec36196
Difference Hash:23230b2b2f2f1f25
Wavelet Hash:fff981818181ff81
Color Hash:#d2b979

Scan History

Scan history not available

Unable to load historical scan data