Security Scan Report: solarcapricornio.com.br

Site favicon
Submitted: Oct 1, 2026, 1:04:30 PMCompleted: Oct 1, 2026, 1:07:12 PMpubliccompleted

AI Security Verdict

Confirmed Scam

Confidence: 96%

10
Risk Score

Legitimate pousada site compromised: ErrTraffic/Exvicy WordPress ClickFix loader injected, EtherHiding exfiltration and multi-feed malicious exploit-kit domains. Do not interact; do not follow on-screen verification instructions.

Risk Factors (5)
Analyst-vetted malicious kit (ErrTraffic/Exvicy ClickFix loader) identified in page body by YARA
Critical malware IDS alerts (EtherHiding Exfil) indicating live C2/exfiltration
ClickFix fake 'Cloudflare verification' overlay instructing victims to run pasted commands in Windows Terminal
Multiple multi-feed malicious exploit-kit domains loaded by the page (cloudflare-check.net, interseqf.com, clickzona.net, etc.)
Compromised WordPress site injecting attacker-controlled scripts; unrelated unranked script host browseid.codes present
Domain age information unavailable

Details

Page Title

Pousada Solar Capricórnio em Ubatuba – SP – Hospedagem e Chalés em Ubatuba / SP

Scan Type

public

Domain Name Analysis

The domain 'solarcapricornio.com.br' uses the Brazilian country-code top-level domain (.com.br) while skipping any subdomain. Count 16 characters in 'solarcapricornio' holding 7 vowels versus 9 consonants. Tokenizing the label suggests three words: solar, capricorni, o. Expect 5 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://solarcapricornio.com.br/

Page Load Overview

75.16s
Total Load Time
11.3 MB
Total Size

Language Analysis

Primary Language

🇵🇹Portuguese
Code: pt
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:pt-BR
Text Length:10,354 chars
Detector Agreement:75%

Website Classification

Primary Category

documentation technical74% confidence
Type: spa
Method: ml+structural

All Detected Categories

documentation technical
74%
download file sharing
65%
technology software
44%
adult content
32%
cryptocurrency blockchain
31%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
19187.45.240.3Brazil
AS27715Locaweb Servicos de Internet S/A
4192.178.170.95Google · CDNUnited States
AS15169Google LLC
4142.250.154.97Google · CDNUnited States
AS15169Google LLC
4142.251.110.132Google · CDNUnited States
AS15169Google LLC
4104.21.3.152Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
413.33.187.28Cloudfront · CDNNew York, New York, United States
AS16509Amazon.com, Inc.
4142.251.110.94Google · CDNUnited States
AS15169Google LLC
4142.251.14.97Google · CDNUnited States
AS15169Google LLC
413.33.187.25Cloudfront · CDNNew York, New York, United States
AS16509Amazon.com, Inc.
4142.251.14.94Google · CDNUnited States
AS15169Google LLC
16337--

Detected Technologies7

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T15852A3B2D44D64DCF7A0C853F346B74C51EAB4B9A2501E55F40EA21F29F0BAB09C1E2E

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:o3BhocqIYT4faVBX11U5VW0DUBcwBzg1M2KATZsO3+xnBX:o3BuHb4fa/11Df2PPyX

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:14241:GAhClpwYVhAiIEjbIr2giBhkARgg1SaI6CBMA2BLQqkMPrBRioAEYuFhKJCBywANACIB0ABAIIBQhiw5OaxgVuLBoGR6QBEx

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0101010301010101
Perceptual Hash:aa295256adad5e52
Difference Hash:052943538125a901
Wavelet Hash:01ff0103ff0143ff
Color Hash:#862d7a

Other Hashes

Crop Resistant:052943538125a901

Scan History

Scan history not available

Unable to load historical scan data