Security Report: br2z.com - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/4532fd0d-da1f-41a2-a286-343c7a532d44 Domain and IP registration (RDAP)/api/v1/rdap/4532fd0d-da1f-41a2-a286-343c7a532d44How often this domain was scanned/api/v1/domain/stats/br2z.com Scan history for this domain/api/v1/domain/history/br2z.com?limit=15

This website contacted 3 IPs in 2 countries across 3 domains to perform 95 HTTP transactions. The main domain is br2z.com and was registered 2 years 8 months ago.

Submitted URL: https://br2z.com/

AI Security Verdict

High Risk

Confidence: 92%

Risk Score

Legitimate-looking school canteen site compromised with an analyst-vetted ClickFix (Win+X Terminal) overlay and EtherHiding blockchain RPC malware traffic; treat as malicious, do not follow the verification prompt.

Risk Factors (5)

Compromised page carrying a ClickFix (fake CAPTCHA / Win+X Terminal) social-engineering kit

Known-malicious kit identified by analyst-vetted YARA rules (clickfix-winx-overlay-2026-10)

CRITICAL IDS alert for EtherHiding malware exfiltration and blockchain RPC abuse (MATIC via QuikNode)

Threat-intel hits on the primary domain (clearfake) and on third-party resources it loads (EtherHiding / ClearFake infrastructure)

Fake Cloudflare-branded 'Human Verification' overlay with forged Ray ID to trick users into running malicious commands

Domain age information unavailable

Details

Page Title

Home - bR2z

Scan Type

public

Favicon Hash

MMH3: 1969295924

MD5: 89dcfaba139e30298ec2c14fa9dfbce7

Domain Name Analysis

The domain 'br2z.com' uses the commercial generic top-level domain (.com) with no subdomain. The second-level label 'br2z' is 4 characters long split between 0 vowels and three consonants; bonus characters include 1 digit. It segments into three words: br, 2, z. Median word length is 1 character. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

6.56s

Total Load Time

1.2 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en-US

Text Length:6,787 chars

Detector Agreement:67%

Website Classification

Primary Category

finance banking88% confidence

Type: spa

Method: ml+structural

All Detected Categories

finance banking

88%

technology software

86%

education learning

78%

download file sharing

77%

government public service

73%

Detected Features

OG: website

Schema.org

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
33	162.241.226.220	Phoenix, Arizona, United States	AS31898Oracle Corporation
31	150.136.141.142Oracle · CLOUD	Ashburn, Virginia, United States	AS31898Oracle Corporation
31	178.16.52.101	Frankfurt am Main, Hesse, Germany	AS202412Omegatech LTD
95	3	-	-