Security Report: edumenezes.com.br - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/50d86622-88c7-4e1b-b1dc-d84a5fb1f270 Domain and IP registration (RDAP)/api/v1/rdap/50d86622-88c7-4e1b-b1dc-d84a5fb1f270 Certificate Transparency/api/v1/ct/edumenezes.com.br How often this domain was scanned/api/v1/domain/stats/edumenezes.com.br Scan history for this domain/api/v1/domain/history/edumenezes.com.br?limit=15

This website contacted 13 IPs in 3 countries across 8 domains to perform 153 HTTP transactions. The main domain is edumenezes.com.br and was registered 3 years 4 months ago.

Submitted URL: https://edumenezes.com.br

AI Security Verdict

High Risk

Confidence: 85%

Risk Score

Legitimate solar-energy site apparently compromised with ClearFake/EtherHiding malware: CRITICAL EtherHiding exfil IDS alerts, blockchain RPC payload retrieval, and ClearFake-flagged third-party resources. Do not interact.

Risk Factors (5)

CRITICAL IDS malware alerts indicating EtherHiding exfiltration (ClearFake)

Blockchain RPC connections used to retrieve malicious payloads (EtherHiding technique)

Third-party resources on the page flagged as ClearFake malware infrastructure

Primary domain flagged in threat intel (iclickfix, single-source)

Heavy obfuscated JavaScript (Function() constructor, encoding/decoding routines)

Domain age information unavailable

Details

Page Title

RHL Energias Renováveis – Gestão de Obras, Instalações, O&M em Usinas Fotovoltaicas

Scan Type

public

Favicon Hash

MMH3: 1494874437

MD5: 1efc2727e80e66e11dfa16831ea41c72

Domain Name Analysis

You're looking at domain 'edumenezes.com.br' on the Brazilian country-code top-level domain (.com.br) with no subdomain. Its registrable label 'edumenezes' stretches across 10 characters holding five vowels versus five consonants. Tokenizing the label suggests 2 words: edu, menezes. Average segment length settles at 5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

15.49s

Total Load Time

12.6 MB

Total Size

Language Analysis

Primary Language

🇵🇹Portuguese

Code: pt

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:pt-BR

Text Length:4,580 chars

Detector Agreement:75%

Website Classification

Primary Category

documentation technical96% confidence

Type: spa

Method: ml+structural

All Detected Categories

documentation technical

96%

government public service

84%

adult content

59%

corporate business

44%

real estate property

44%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
21	162.241.2.183	Vinhedo, São Paulo, Brazil	AS31898Oracle Corporation
11	104.20.24.117Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
11	142.251.13.95Google · CDN	United States	AS15169Google LLC
11	104.18.1.22Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
11	172.67.70.207Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
11	104.18.10.59Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
11	35.227.193.242Google · CDN	Kansas City, Missouri, United States	AS396982Google LLC
11	172.66.150.162Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
11	142.251.14.95Google · CDN	United States	AS15169Google LLC
11	104.18.0.22Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
153	13	-	-