Security Report: tocespecialpresentes.com.br - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/62c469d0-d0f7-4de9-8537-337073b97cb2 Domain and IP registration (RDAP)/api/v1/rdap/62c469d0-d0f7-4de9-8537-337073b97cb2 Certificate Transparency/api/v1/ct/tocespecialpresentes.com.br How often this domain was scanned/api/v1/domain/stats/tocespecialpresentes.com.br Scan history for this domain/api/v1/domain/history/tocespecialpresentes.com.br?limit=15

This website contacted 5 IPs in 3 countries across 6 domains to perform 27 HTTP transactions. The main domain is tocespecialpresentes.com.br and was registered 21 years ago.

Submitted URL: https://tocespecialpresentes.com.br

AI Security Verdict

Confirmed Scam

Confidence: 93%

Risk Score

Compromised WordPress site serving an injected, roster-anchored ClickFix 'Human Verification' overlay with blockchain (Polygon) EtherHiding loader; critical YARA and IDS malware hits confirm malicious code.

Risk Factors (5)

Compromised WordPress site on a long-established domain now serving an injected blockchain-based ClickFix loader

Obfuscated JavaScript hides threat-feed blockchain RPC hosts (1rpc.io, polygon.drpc.org, polygon.gateway.tenderly.co) that only appear after decoding

EtherHiding technique: contract on Polygon used to resolve the next-stage payload host, evading takedown

Critical IDS malware/exploit-kit alerts associated with the page's network traffic

Page content is unrelated gambling/betting SEO spam injected into a site whose title is 'tocespecialpresentes' — typical of a hijacked site

Domain age information unavailable

Details

Page Title

tocespecialpresentes – Só mais um site WordPress

Scan Type

public

Domain Name Analysis

You're looking at domain 'tocespecialpresentes.com.br' on the Brazilian country-code top-level domain (.com.br) while skipping any subdomain. The registrable portion 'tocespecialpresentes' spans 20 characters with 8 vowels and twelve consonants. Tokenizing the label suggests 5 words: to, ce, special, present, es. Average segment length settles at 2 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

3.42s

Total Load Time

722 KB

Total Size

Language Analysis

Primary Language

🇵🇹Portuguese

Code: pt

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:pt-BR

Text Length:50,144 chars

Detector Agreement:67%

Website Classification

Primary Category

gambling betting76% confidence

Type: dynamic

Method: ml+structural

All Detected Categories

gambling betting

76%

entertainment media

39%

technology software

31%

cryptocurrency blockchain

29%

healthcare medical

26%

Detected Features

Articles

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
7	191.6.210.91	Brazil	AS28299LWSA S/A
5	142.251.14.95Google · CDN	United States	AS15169Google LLC
5	104.20.46.180Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
5	142.251.14.94Google · CDN	United States	AS15169Google LLC
5	178.16.52.101	Frankfurt am Main, Hesse, Germany	AS202412Omegatech LTD
27	5	-	-