Security Scan Report: intercobrancas.com

Site favicon
Submitted: Completed: publiccompleted
This website contacted 5 IPs in 2 countries across 5 domains to perform 39 HTTP transactions. The main domain is intercobrancas.com and was registered 16 years ago.

Submitted URL: https://intercobrancas.com

AI Security Verdict

High Risk

Confidence: 92%

8
Risk Score

Legitimate 16-year-old debt-collection site appears COMPROMISED: the page HTML carries the analyst-vetted ClearFake Polygon contract loader (CRITICAL YARA) and the primary domain matches a multi-source 'clearfake (malware)' threat-intel report.

Risk Factors (4)
CRITICAL-severity YARA malware detection (ClearFake Polygon contract loader) on the scanned page's HTML
Analyst-vetted ClearFake kit identified — injection into compromised websites delivering next-stage payloads
Threat-intel threat on the primary domain corroborated by 2 independent feeds (ClearFake malware)
Exposed server/Joomla debug output visible to visitors
Domain age information unavailable

Details

Page Title

InterCobranças - Home

Scan Type

public

Domain Name Analysis

Within the commercial generic top-level domain (.com), 'intercobrancas.com' is registered and has no subdomain. The second-level label 'intercobrancas' is 14 characters long holding 5 vowels versus 9 consonants. Splitting it apart reveals four words: inter, cobra, nc, as. The median word length lands at 3.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://intercobrancas.com

Page Load Overview

2.54s
Total Load Time
770 KB
Total Size

Language Analysis

Primary Language

🇵🇹Portuguese
Code: pt
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:pt-pt
Text Length:17,449 chars
Detector Agreement:50%

Website Classification

Primary Category

corporate business87% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

corporate business
87%
real estate property
51%
finance banking
47%
technology software
43%
documentation technical
39%

Detected Features

OG: website

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1181.88.53.12Italy
AS39729Register S.p.A.
7151.101.1.155Fastly · CDNUnited States
AS54113Fastly, Inc.
7142.251.13.95Google · CDNUnited States
AS15169Google LLC
7104.17.24.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
7192.178.183.94Google · CDNUnited States
AS15169Google LLC
395--

Detected Technologies11

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1A432075CAED1A160FB1307DEB3AF28690228A0C7240DC484F54CEDE87F5BBDC4A56A57

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:GXHNsGeTHQpD+da6+8QPUV7lrDyjFrxzEbqFtC4SiwRUM:GXX+/zV7SFZnFtBwRUM

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:11667:cFAaYGAGqKWoAATvwwVCaBhARYghUigfgowIIIIBIVEdIamohgJBQ8AFAJABdJQ1kKOB0AIcTmGNEMBUCBCJZQFCyoYJ5NJw

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffffff81ffffffff
Perceptual Hash:bf2fc0c03f3fc0c0
Difference Hash:0000012301000000
Wavelet Hash:ffffff8100000000
Color Hash:#d2a679

Other Hashes

Crop Resistant:0000012301000000

Scan History

Scan history not available

Unable to load historical scan data