Security Scan Report: unifortseguranca.com.br

Site favicon
Submitted: Completed: publiccompleted
This website contacted 31 IPs in 4 countries across 16 domains to perform 240 HTTP transactions. The main domain is unifortseguranca.com.br and was registered 19 years ago.

Submitted URL: https://unifortseguranca.com.br/

AI Security Verdict

High Risk

Confidence: 68%

7
Risk Score

Established 19-year-old Brazilian security company site with self-branding and no credential forms, but CRITICAL IDS alerts for EtherHiding exfiltration and Ethereum RPC endpoint traffic suggest a compromised page serving blockchain-based malware.

Risk Factors (6)
CRITICAL IDS alert ET MALWARE EtherHiding Exfil (x2) — network trojan / blockchain C2 behavior
Ethereum RPC endpoint domains (0xrpc.io, 1rpc.io) contacted from the page
Third-party domain 1rpc.io flagged as known attacker (single-source, generic abuse-reputation)
Outbound link to l.ead.me reported phishing (single-source, unverified)
Javascript obfuscator-usage heuristic alerts (informational)
WordPress/Elementor deployment that may have been compromised by an injected script
Domain age information unavailable

Details

Page Title

Grupo Unifort Segurança 24 horas em cuiabá e região

Scan Type

public

Domain Name Analysis

Domain 'unifortseguranca.com.br' uses the Brazilian country-code top-level domain (.com.br) and has no subdomain. Its registrable label 'unifortseguranca' stretches across 16 characters with seven vowels and nine consonants. Tokenizing the label suggests four words: uni, fort, segura, nca. Expect 3.5 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://unifortseguranca.com.br/

Page Load Overview

23.89s
Total Load Time
6.8 MB
Total Size

Language Analysis

Primary Language

🇵🇹Portuguese
Code: pt
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:pt-BR
Text Length:17,694 chars
Detector Agreement:100%

Website Classification

Primary Category

real estate property99% confidence
Type: spa
Method: ml+structural

All Detected Categories

real estate property
99%
technology software
93%
government public service
87%
documentation technical
59%
corporate business
58%

Detected Features

Search
Articles
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
30147.79.92.35Sydney, New South Wales, Australia
AS47583Hostinger International Limited
7104.17.207.5Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
7142.251.14.97Google · CDNUnited States
AS15169Google LLC
7146.19.24.104Poland
AS201814MEVSPACE sp. z o.o.
7142.251.127.84Google · CDNUnited States
AS15169Google LLC
7188.114.97.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
7192.178.183.136Google · CDNUnited States
AS15169Google LLC
7142.251.157.4Google · CDNUnited States
AS15169Google LLC
7216.239.34.36Google · CDNUnited States
AS15169Google LLC
7104.17.208.5Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
24031--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1B3843B71B6492C7F211F53CFA007370CA08EFAE9E65296E9F2B7426853F9CD03692165

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:Yn6Ju/yZylKpcSX6nmGeLzlPGF/zkk2Q17I6oXIrW6tu99RtW92ECMp/ht8L3RyG:YnRdYIi6tuSMEt8LK4T

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:387383:s7KGhDAAmBSdjqwGoU8+RgVYRDDkhhiaxABxiCBBNAqAgQh7nCIJgYgCEcqRkIEIRTAAJMRUF2UhHAlxkCAoMhUZDWK7dg4a

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:fb203030302000ff
Perceptual Hash:c743b838e834cb9e
Difference Hash:b24b69ed694b7472
Wavelet Hash:ff303c3c382804ff
Color Hash:#856ce0

Scan History

Scan history not available

Unable to load historical scan data