Security Scan Report: connectbrasil.com.br

Site favicon
Submitted: Completed: publiccompleted
This website contacted 2 IPs in 2 countries across 3 domains to perform 130 HTTP transactions. The main domain is connectbrasil.com.br and was registered 25 years ago.

Submitted URL: https://connectbrasil.com.br

AI Security Verdict

High Risk

Confidence: 93%

8
Risk Score

Legitimate 25-year-old Connect Brasil site that has been compromised: an injected ClearFake EtherHiding loader pulls its next-stage server list from a Polygon contract, first step of a ClickFix malware chain. Do not visit.

Risk Factors (5)
ClearFake blockchain-contract loader injected into the site (compromised WordPress page)
EtherHiding: next-stage payload address retrieved from a Polygon smart contract
Obfuscated inline script hiding known-attacker RPC hosts
Threat-intel flagged third-party resource daoodasdldldl.com (ClearFake, 2 feeds) served from the page
First stage of a ClickFix chain that delivers an executable to Windows visitors
Domain age information unavailable

Details

Page Title

Connect Brasil

Scan Type

public

Domain Name Analysis

Within the Brazilian country-code top-level domain (.com.br), 'connectbrasil.com.br' is registered with no subdomain. The registrable portion 'connectbrasil' spans 13 characters containing four vowels alongside 9 consonants. Breaking it apart gives 2 words: connect, brasil. Average segment length settles at 6.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://connectbrasil.com.br

Page Load Overview

8.27s
Total Load Time
8.0 MB
Total Size

Language Analysis

Primary Language

🇵🇹Portuguese
Code: pt
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:pt-BR
Text Length:4,838 chars
Detector Agreement:67%

Website Classification

Primary Category

documentation technical99% confidence
Type: spa
Method: ml+structural

All Detected Categories

documentation technical
99%
government public service
27%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
65177.154.191.214Brazil
AS53038IDC19 SOLUCOES EM TECNOLOGIA DA INFORMACAO LTDA
65142.251.110.95Google · CDNUnited States
AS15169Google LLC
1302--

Detected Technologies6

WordPressv7.1.3
100%
JQueryv3.7.1
100%
50%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T13A04B47239461839221F03CFA04B220C6CDAEEE7E617A5E5F5BA413853F5DE037E2695

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:YknwXomAYVq5x3UvAbtqxV433RFXdatBdbtpQDByFFbGjgcz:VEmxx3U4B

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:182347:5WoAUMITJUCAHC8DAAC4MAD1dyorZA4GAEkNQwLDXCBgtCEAQIyFcmgFlqlplQAVehiVGCMKRMbFBSHEB0iQADFJBgAAcGAA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ff0000000000ffef
Perceptual Hash:fb0cc3e8f5cb0423
Difference Hash:223374390f9d494b
Wavelet Hash:ff03000080c7ffff
Color Hash:#2d6786

Scan History

Scan history not available

Unable to load historical scan data