Security Report: poeirahistoria.com.br - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/674dbf5b-ad7f-49a4-aef9-151cd34c0efb Domain and IP registration (RDAP)/api/v1/rdap/674dbf5b-ad7f-49a4-aef9-151cd34c0efbHow often this domain was scanned/api/v1/domain/stats/poeirahistoria.com.br Scan history for this domain/api/v1/domain/history/poeirahistoria.com.br?limit=15

This website contacted 25 IPs in 2 countries across 20 domains to perform 137 HTTP transactions. The main domain is poeirahistoria.com.br and was registered 3 years 1 month ago.

Submitted URL: https://poeirahistoria.com.br

AI Security Verdict

High Risk

Confidence: 92%

Risk Score

Legitimate-looking Brazilian history site is compromised with an injected Windows ClickFix kit: a fake Cloudflare verification overlay tells visitors to paste attacker commands into an admin Terminal. CRITICAL EtherHiding malware IDS alerts confirm malicious activity.

Risk Factors (5)

Known malware kit (Windows ClickFix, clickfix-winx-overlay-2026-10) injected into page content — analyst-vetted roster and YARA rule hit

Fake Cloudflare-style verification overlay with 'Ray ID' impersonating Cloudflare to obtain user trust

Social-engineering instructions to open a Windows admin Terminal and paste/execute attacker-supplied commands (ClickFix)

Multiple CRITICAL IDS alerts for ET MALWARE EtherHiding Exfil M2 (network trojan / exfiltration signature)

22 redirects, 20 of them cross-domain, before reaching the final page

Domain age information unavailable

Details

Page Title

Poeira da História | rompendo os muros da universidade

Scan Type

public

Favicon Hash

MMH3: 1744172488

MD5: 3c7ef87d154b4fb1d1dc8d6ce541b317

Domain Name Analysis

The domain name 'poeirahistoria.com.br' uses the Brazilian country-code top-level domain (.com.br) and has no subdomain. The registrable portion 'poeirahistoria' spans 14 characters holding eight vowels versus 6 consonants. Splitting it apart reveals 3 words: poe, ira, historia. Expect 3 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

16.35s

Total Load Time

937 KB

Total Size

Language Analysis

Primary Language

🇵🇹Portuguese

Code: pt

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:pt-BR

Text Length:3,089 chars

Detector Agreement:100%

Website Classification

Primary Category

entertainment media98% confidence

Type: spa

Method: ml+structural

All Detected Categories

entertainment media

98%

education learning

97%

government public service

71%

forum community discussion

55%

corporate

25%

Detected Features

OG: website

Schema.org

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
17	188.114.96.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
5	142.251.20.95Google · CDN	United States	AS15169Google LLC
5	184.24.77.168Akamai · CDN	Frankfurt am Main, Hesse, Germany	AS20940Akamai International B.V.
5	104.16.79.73Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
5	23.32.238.227Akamai · CDN	Frankfurt am Main, Hesse, Germany	AS20940Akamai International B.V.
5	142.250.154.94Google · CDN	United States	AS15169Google LLC
5	188.114.97.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
5	104.16.80.73Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
5	104.21.48.216Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
5	172.67.147.166Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
137	25	-	-