Security Scan Report: xwaycomunicacao.com.br

Site favicon
Submitted: Completed: publiccompleted
This website contacted 7 IPs in 3 countries across 7 domains to perform 66 HTTP transactions. The main domain is xwaycomunicacao.com.br and was registered 12 years ago.

Submitted URL: https://xwaycomunicacao.com.br

AI Security Verdict

Confirmed Scam

Confidence: 93%

9
Risk Score

Long-established Brazilian marketing site appears compromised: a CRITICAL ClickFix blockchain 'Human Verification' loader, EtherHiding and exploit-kit IDS alerts are injected. Do not press any on-screen verification keys; avoid the site.

Risk Factors (5)
Critical ClickFix / blockchain-loading phishing kit injected into the page (analyst-vetted roster match)
EtherHiding: next-stage host resolved from a Polygon smart contract via obfuscated JavaScript
Three CRITICAL IDS alerts (EtherHiding exfiltration, exploit-kit check-in)
Primary domain reported to threat intelligence as a malware loader
Unranked third-party script host browse-codes-enter.beer loaded by the page
Domain age information unavailable

Details

Page Title

Xway Comunicação – Comunicação Visual e Marketing

Scan Type

public

Domain Name Analysis

The domain name 'xwaycomunicacao.com.br' uses the Brazilian country-code top-level domain (.com.br). The core label 'xwaycomunicacao' covers 15 characters with seven vowels and eight consonants. Tokenizing the label suggests four words: x, way, comuni, cacao. Average segment length settles at 4 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://xwaycomunicacao.com.br

Page Load Overview

24.43s
Total Load Time
1.2 MB
Total Size

Language Analysis

Primary Language

🇵🇹Portuguese
Code: pt
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:pt-BR
Text Length:1,406 chars
Detector Agreement:75%

Website Classification

Primary Category

social media network81% confidence
Type: spa
Method: ml+structural

All Detected Categories

social media network
81%
corporate business
81%
technology software
61%
government public service
57%
education learning
55%

Detected Features

Articles

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
12216.172.172.167Vinhedo, São Paulo, Brazil
AS31898Oracle Corporation
9192.178.183.95Google · CDNUnited States
AS15169Google LLC
9142.251.20.94Google · CDNUnited States
AS15169Google LLC
9104.20.46.180Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
9178.16.52.101Frankfurt am Main, Hesse, Germany
AS202412Omegatech LTD
9172.66.146.203Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
9142.250.154.94Google · CDNUnited States
AS15169Google LLC
667--

Detected Technologies6

WordPressv7.1.3
100%
JQueryv3.7.1
100%
50%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1A5D3C8A1B7512439226B47EEF097B51C10DAAA53E60E61F4F2FE419DC9E1FA230B131D

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:AmKnAlVya+k2qAeqypbSRT1prnMRJDqR3dG098RgL:Ara+k2GjRMMRJDqR3dP982L

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:132751:EABDU4gDgAmKWiSU4AzAwMMSypoowhowGIQhAEAysweQmEoQDeQAChtmgKgMIxgK6QAWJAAggSgBhqcYR4ABBLFoLGGRwoG/

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:40000c0e0e0e0000
Perceptual Hash:92e26d95956292db
Difference Hash:d569899c5c5c0119
Wavelet Hash:ff4f4f0f0f0f0101
Color Hash:#6fac53

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data