Security Scan Report: bremoc.com

Redirected to:
https://www.bremoc.com/
Site favicon
Submitted: Oct 9, 2026, 11:50:26 AMCompleted: Oct 9, 2026, 11:51:24 AMpubliccompleted

This website contacted 35 IPs in 2 countries across 23 domains to perform 102 HTTP transactions. The main domain is bremoc.com and was registered 18 years ago.

Submitted URL: https://bremoc.com

Effective URL:

https://www.bremoc.com/
Redirected

AI Security Verdict

Confirmed Scam

Confidence: 88%

9
Risk Score

Legitimate 9-year-old Argentine law firm site, but its WordPress has been compromised with the ErrTraffic/Exvicy ClickFix loader, EtherHiding exfiltration and clearfake-linked domains — do not visit.

Risk Factors (5)
Compromised WordPress site injecting the ErrTraffic/Exvicy ClickFix loader (critical phishing/malware kit)
Active EtherHiding (blockchain-based) exfiltration detected by network IDS
Page loads multiple domains with multi-feed malware/exploit-kit reputation (clearfake, ek clearfake-1)
ClickFix social-engineering domains contacted in TLS SNI/DNS
eval/Function code-generation calls present alongside the injected loader
Domain age information unavailable

Details

Page Title

BREMOC | Abogados & Consultores

Scan Type

public

Domain Name Analysis

Domain 'bremoc.com' uses the commercial generic top-level domain (.com) with no subdomain. Its registrable label 'bremoc' stretches across 6 characters holding two vowels versus 4 consonants. Tokenizing the label suggests 2 words: bre, moc. Expect three characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://bremoc.com

Page Load Overview

5.05s
Total Load Time
2.7 MB
Total Size

Language Analysis

Primary Language

🇪🇸Spanish
Code: es
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:es
Text Length:3,038 chars
Detector Agreement:50%

Website Classification

Primary Category

corporate business94% confidence
Type: spa
Method: ml+structural

All Detected Categories

corporate business
94%
government public service
87%
adult content
70%
finance banking
59%
blog personal website
49%

Detected Features

Articles

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
34198.27.76.221Canada
AS16276OVH SAS
2142.251.110.95Google · CDNUnited States
AS15169Google LLC
2142.251.20.97Google · CDNUnited States
AS15169Google LLC
2142.251.14.155Google · CDNUnited States
AS15169Google LLC
2104.20.38.203Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2104.26.5.88Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2172.66.150.162Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2172.66.146.203Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2142.251.152.119Google · CDNUnited States
AS15169Google LLC
2142.251.14.94Google · CDNUnited States
AS15169Google LLC
10235--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T146733CB254AC7477311B93D96160B718AA938606CF865E91B3FD23986FC4FE748D322C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:AUypjigDBlHJdlSEJS9O5lTCyNL5OijzuitGZuPcNe3zNpADIROH:AFJigDBlH9FSAvuitGZuENe3zNpADIcH

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:78136:LEIYYAAQhCFLgAo9xEJCM5BaxSZ5EiAGYIoAgFolDQEMCgWIJsFcDAocwFgiCwAHFwA4CwQOCVmgNMCgYEhjDwAJWqiFF6Ig

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffff0000010000ff
Perceptual Hash:aa94d5aabf51c22a
Difference Hash:2321d10b07851155
Wavelet Hash:ffff0103830101ff
Color Hash:#864c2d

Scan History

Scan history not available

Unable to load historical scan data