ScanMalware.com

Security Scan Report: mwizz.leadsbr.com.br

Redirected to:
https://cotacao.simulacaoaqui.com.br/consorciocx/
Site favicon
Submitted: Jul 9, 2026, 7:16:06 PMCompleted: Jul 9, 2026, 7:17:37 PMpubliccompleted
Loading additional data...

Summary

This website contacted 11 IPs in 3 countries across 10 domains to perform 51 HTTP transactions. The main domain is cotacao.simulacaoaqui.com.br and was registered NaN years ago.

Submitted URL: https://mwizz.leadsbr.com.br/latest/index.php/campaigns/qj564w317146c/track-url/tl753omtkb720/294ae0343bc4078eb3dbc23f8ef4fede6069f885

Effective URL: https://cotacao.simulacaoaqui.com.br/consorciocx/Redirected

AI Security Verdict

Low Risk

Confidence: 85%

3
Risk Score

New, unranked domain impersonates Caixa Consórcios and harvests personal data; high likelihood of phishing.

Risk Factors
Newly registered domain (<7 days)
Brand impersonation on mismatched domain
Personal data collection forms
Unranked / low reputation domain
Safety Factors
No credential or payment fields
No malicious JavaScript YARA matches
No IDS alerts or IoC matches
Verdict cited a credential/login form, but DOM analysis found no password field (real or disguised) or payment field, and no other hard signal — credential-phishing framing unsupported; risk adjusted from 9 to 3
Domain age information unavailable

Details

Page Title

Caixa Consórcios

Scan Type

public

Language

🇵🇹

Portuguese

(80% confidence)

Category

adult content

(82%)

Domain Information

Within the Brazilian country-code top-level domain (.com.br), 'mwizz.leadsbr.com.br' is registered, featuring subdomain 'mwizz'. Count 7 characters in 'leadsbr' holding 2 vowels versus 5 consonants. Splitting it apart reveals 2 words: leads, br. Median word length is 3.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://mwizz.leadsbr.com.br/latest/index.php/campaigns/qj564w317146c/track-url/tl753omtkb720/294ae0343bc4078eb3dbc23f8ef4fede6069f885

Page Load Overview

3.10s
Total Load Time
51
HTTP Requests
10
Domains
387 KB
Total Size

Language Analysis

Primary Language

🇵🇹Portuguese
Code: pt
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:pt
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:pt-BR
Text Length:6,196 chars
Detector Agreement:100%

Website Classification

Primary Category

adult content82% confidence
Type: spa
Method: ml+structural

All Detected Categories

adult content
82%
real estate property
74%
finance banking
73%
healthcare medical
45%
technology software
42%

Detected Features

OG: website

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
11172.217.208.95Google · CDNUnited States
AS15169Google LLC
4172.104.195.178Richardson, Texas, United States
AS63949Akamai Connected Cloud
4142.251.154.119Google · CDNUnited States
AS15169Google LLC
4172.67.212.245Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
445.14.194.194Lauterbourg, Grand Est, France
AS51167Contabo GmbH
4142.251.20.97Google · CDNUnited States
AS15169Google LLC
4157.240.0.6Frankfurt am Main, Hesse, Germany
AS32934Facebook, Inc.
4216.239.34.36Google · CDNUnited States
AS15169Google LLC
4157.240.0.35Frankfurt am Main, Hesse, Germany
AS32934Facebook, Inc.
4142.251.127.94Google · CDNUnited States
AS15169Google LLC
5111--

Detected Technologies8

X-UA-Compatible
100%
Open-Graph-Protocolvwebsite
100%
JQueryv1.11.0
100%
Google-AnalyticsvUniversal
100%
UNIX
40%
Google Analytics
35%
reCAPTCHA
30%
Facebook Pixel
20%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T16C24B5BEA5B4582FF199C385DFB458692D88D0DBEE82C190F35C47B86F604C7483B968

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:Nz+svoUMaz3VKfpmVCg9VGIkCgxYqzjNl/LDtl/BPDtlcIG2A37wRXcPq0/IBEw8:UsvoUMhFKcC

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:211037:E0DqjEoaERQQEKUcBhyYQBnAgJ6YVGXBAU2ShYqCE3KBgwABaXIqbAUIEiN4GJEAAQsABhBBYCfC0FgFFAIGIKHCeA4a8Jky

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ff0c0c0c1c1c1f9f
Perceptual Hash:9842ade1eea1e6ac
Difference Hash:99b839b938b8b436
Wavelet Hash:ff0c0c1c1c1c1f9f
Color Hash:#d279c3

Other Hashes

Crop Resistant:99b839b938b8b436,4d108c6cce2e0e4e,b2926b0951342220,8b3b3b0b9b4b318f

Scan History

Scan history not available

Unable to load historical scan data