Security Scan Report: e2eng.com.br

Site favicon
Submitted: Oct 9, 2026, 10:06:47 AMCompleted: Oct 9, 2026, 10:08:28 AMpubliccompleted

AI Security Verdict

High Risk

Confidence: 78%

8
Risk Score

Established Brazilian real-estate site apparently compromised: network IDS logs multiple CRITICAL ET MALWARE ClickFix/EtherHiding alerts and threat intel flags the primary domain as an unknown loader. No forms; risk is malicious script delivery.

Risk Factors (5)
ET MALWARE CRITICAL IDS alerts (ClickFix domain in TLS SNI and DNS queries: zvh4.com, gateway.tenderly.co, sepolia.gateway.tenderly.co)
ET MALWARE EtherHiding Exfil M2 alert indicates blockchain-hosted malicious payload exfiltration
Primary domain e2eng.com.br flagged as 'unknown loader' malware in threat intelligence
Third-party resource zvh4.com reported as malware by two independent threat feeds
Site is not ranked in Cisco Umbrella top 1M despite 24-year domain age
Domain age information unavailable

Details

Page Title

E2 Engenharia | E2 Engenharia: há 29 anos construindo o seu primeiro lar!

Scan Type

public

Domain Name Analysis

Domain 'e2eng.com.br' uses the Brazilian country-code top-level domain (.com.br). The second-level label 'e2eng' is 5 characters long split between 2 vowels and 2 consonants, along with one digit. It segments into three words: e, 2, eng. The median word length lands at 1 character. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://e2eng.com.br

Page Load Overview

41.21s
Total Load Time
4.6 MB
Total Size

Language Analysis

Primary Language

🇵🇹Portuguese
Code: pt
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:pt-BR
Text Length:5,121 chars
Detector Agreement:60%

Website Classification

Primary Category

real estate property75% confidence
Type: spa
Method: ml+structural

All Detected Categories

real estate property
75%
adult content
49%
blog personal website
48%
government public service
41%
technology software
40%

Detected Features

OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
10186.202.13.160Brazil
AS27715Locaweb Servicos de Internet S/A
4142.251.13.95Google · CDNUnited States
AS15169Google LLC
4151.101.129.229Fastly · CDNUnited States
AS54113Fastly, Inc.
4142.251.127.95Google · CDNUnited States
AS15169Google LLC
4104.17.207.5Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
435.227.193.242Google · CDNKansas City, Missouri, United States
AS396982Google LLC
4188.114.97.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
4192.178.183.97Google · CDNUnited States
AS15169Google LLC
4216.239.32.36Google · CDNUnited States
AS15169Google LLC
4142.251.14.94Google · CDNUnited States
AS15169Google LLC
11026--

Detected Technologies10

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T135832A3250F4107B126792D4F224AB1DDA99A607CA039792F3FD129C5FC5DF78823A9E

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:wYF7d9JRlypKXH79gypX/rPCRMDWdXXXeRyru8khGFrf9dA/buFVKRC:TRddgAhTpX/rPgM6QRyr7khGFrldA/bm

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:83268:gsH/REFN70ABCAXwIRELoRAJBAASnCJBjDQAHThFUhPQQBliQgsJ4EOiI1YEBBlcAAAjAOhA5Y2B+pmiunqBQhAKoWMjFkKg

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:747f3f0b011f0703
Perceptual Hash:88c1574e6997c72b
Difference Hash:c8fefe93b32f7ffe
Wavelet Hash:7c7f3f0b091f0701
Color Hash:#931f25

Other Hashes

Crop Resistant:c8fefe93b32f7ffe

Scan History

Scan history not available

Unable to load historical scan data