ScanMalware.com

Security Scan Report: mrcz.com.br

Redirected to:
https://www.mrcz.com.br/
Site favicon
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/7becaa79-2958-4ed9-9d10-9346b07b7d55Domain and IP registration (RDAP)/api/v1/rdap/7becaa79-2958-4ed9-9d10-9346b07b7d55How often this domain was scanned/api/v1/domain/stats/mrcz.com.brScan history for this domain/api/v1/domain/history/mrcz.com.br?limit=15
This website contacted 2 IPs in 2 countries across 3 domains to perform 9 HTTP transactions. The main domain is mrcz.com.br and was registered 9 years ago.

Submitted URL: https://mrcz.com.br

Effective URL:
https://www.mrcz.com.br/
Redirected

AI Security Verdict

Confirmed Scam

Confidence: 95%

9
Risk Score

Established engineering firm's site appears compromised: ClearFake malware loader (Polygon/EtherHiding ClickFix chain) and a rival-kit cleanup script are injected, with body content replaced by gambling spam. Avoid visiting.

Risk Factors (5)
ClearFake blockchain-contract malware loader injected into the page
Rival-kit cleanup script that blocks navigation and defends its own overlay
Page body replaced with unrelated multi-language gambling spam, indicating a hijacked/compromised site
Single-source threat-intel report of the domain as an 'unknown loader (malware)' (misp.scanmalware.com, unverified)
Obfuscated-JavaScript IDS hunting alerts corroborating the injected script activity
Domain age information unavailable

Details

Page Title

Muraro Cuzzuol – Engenharia Consultiva para todo Brasil.

Scan Type

public

Domain Name Analysis

Domain 'mrcz.com.br' uses the Brazilian country-code top-level domain (.com.br). The core label 'mrcz' covers 4 characters holding zero vowels versus four consonants. Breaking it apart gives two words: mr, cz. The median word length lands at two characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://mrcz.com.br

Page Load Overview

5.96s
Total Load Time
47 KB
Total Size

Language Analysis

Primary Language

🇩🇪German
Code: de
Confidence:41%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:5,274 chars
Detector Agreement:67%
Language mismatch: Declared as en-US but detected as de

Website Classification

Primary Category

gambling betting98% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

gambling betting
98%
technology software
70%
entertainment media
59%
government public service
55%
finance banking
55%

Detected Features

Articles

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
5177.12.168.118Curitiba, Paraná, Brazil
AS28299LWSA S/A
4192.0.77.48San Francisco, California, United States
AS2635Automattic, Inc
92--

Detected Technologies5

WordPressv7.1
100%
MetaGenerator
100%
PHP
50%
MySQL
50%
Apache HTTP Server
40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1AD234DB1B2A80C3ABB7E47D96C79B714F8B56501DE46C259F07BB2008854FF202A2B1D

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:le3jhFUWRRn7TnvjgOb43VvTU4WOZTMfBC7q6Abym7xbnMFL7ItwUzRVJ+b0vLBV:QJ/yNWOtA/7xug6UtVRV

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:47474:jCkb7HoBAAYAkheEEFkxIYUAx0aARzaooqAUJJIsiUBtQBLJuGIQKAAD1ygA6ERBcC4BEQBlRBhBNtr9BkoIACAsCACiNEIA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:3fff838783838383
Perceptual Hash:bc838789923c6d79
Difference Hash:f0a8273e3727262f
Wavelet Hash:3fff818783838383
Color Hash:N/A

Other Hashes

Crop Resistant:f0a8273e3727262f

Scan History

Scan history not available

Unable to load historical scan data