Security Report: produtecnicaagro.com.br - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/6f5396cc-5533-44c5-b208-9678fd2dd565 Domain and IP registration (RDAP)/api/v1/rdap/6f5396cc-5533-44c5-b208-9678fd2dd565How often this domain was scanned/api/v1/domain/stats/produtecnicaagro.com.br Scan history for this domain/api/v1/domain/history/produtecnicaagro.com.br?limit=15

This website contacted 28 IPs in 3 countries across 20 domains to perform 125 HTTP transactions. The main domain is produtecnicaagro.com.br and was registered 1 year 5 months ago.

Submitted URL: https://produtecnicaagro.com.br/

AI Security Verdict

Confirmed Scam

Confidence: 96%

Risk Score

Legitimate-looking agro site is compromised and injects a ClickFix fake Cloudflare check (EtherHiding via Polygon contract) that lures Windows users into pasting malware into Terminal; avoid entirely.

Risk Factors (5)

Compromised site serving a ClickFix fake 'Human Verification' overlay that instructs Windows users to paste attacker code into Terminal

EtherHiding loader reading the payload host from a Polygon smart contract (blockchain-hosted malware infrastructure)

Obfuscated script hiding threat-feed hosts 1rpc.io and polygon.gateway.tenderly.co

Threat-intel malware classification of the domain and URL (multiple feeds) and of the unranked script host cloud-browse.codes

Injected off-topic gambling/SEO spam headings indicating CMS compromise

Domain age information unavailable

Details

Page Title

Produtécnica Agro - Uma empresa do Grupo Syngentaother network

Scan Type

public

Favicon Hash

MMH3: 974329692

MD5: 3eb2a5b3344b17e969c2c520721b40d8

Domain Name Analysis

Within the Brazilian country-code top-level domain (.com.br), 'produtecnicaagro.com.br' is registered and has no subdomain. The core label 'produtecnicaagro' covers 16 characters holding 7 vowels versus nine consonants. Word splitting yields six words: pro, du, tec, nica, a, gro. The median word length lands at three characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

8.62s

Total Load Time

6.5 MB

Total Size

Language Analysis

Primary Language

🇵🇹Portuguese

Code: pt

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:pt-BR

Text Length:4,077 chars

Detector Agreement:100%

Website Classification

Primary Category

corporate70% confidence

Type: spa

Method: structural

All Detected Categories

corporate

70%

news/blog

40%

Detected Features

Articles

OG: website

Schema.org

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
17	192.185.212.88	Vinhedo, São Paulo, Brazil	AS31898Oracle Corporation
4	188.114.97.3Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
4	142.251.20.97Google · CDN	United States	AS15169Google LLC
4	172.67.128.234Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
4	104.26.5.88Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
4	157.240.0.6Facebook · CDN	Frankfurt am Main, Hesse, Germany	AS32934Facebook, Inc.
4	104.20.46.180Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
4	178.16.52.101	Frankfurt am Main, Hesse, Germany	AS202412Omegatech LTD
4	5.75.187.7	Nuremberg, Bavaria, Germany	AS24940Hetzner Online GmbH
4	172.67.162.61Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
125	28	-	-