Security Scan Report: flutuarweb.com.br

Site favicon
Submitted: Completed: publiccompleted
This website contacted 6 IPs in 2 countries across 5 domains to perform 72 HTTP transactions. The main domain is flutuarweb.com.br and was registered 14 years ago.

Submitted URL: https://flutuarweb.com.br

AI Security Verdict

High Risk

Confidence: 88%

9
Risk Score

Legitimate-looking 14-year-old Brazilian agency domain is compromised and hosts a ClickFix FakeCAPTCHA kit (YARA-confirmed) plus injected spam; do not click any verification prompts.

Risk Factors (5)
Known malicious ClickFix FakeCAPTCHA kit detected (analyst-vetted, CRITICAL)
High-precision YARA rule for ClickFix LOLBin payload matched
Fake CAPTCHA / device-verification social-engineering flow prompting users to continue verification
Threat-intel match on primary domain tagged as iclickfix malware
Injected casino/SEO spam content indicating the WordPress installation is compromised
Domain age information unavailable

Details

Page Title

FlutuarWeb – Agência Digital

Scan Type

public

Domain Name Analysis

The domain 'flutuarweb.com.br' uses the Brazilian country-code top-level domain (.com.br) with no subdomain. The registrable portion 'flutuarweb' spans 10 characters containing 4 vowels alongside six consonants. Tokenizing the label suggests 4 words: flu, tua, r, web. Median word length is three characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://flutuarweb.com.br

Page Load Overview

8.70s
Total Load Time
2.7 MB
Total Size

Language Analysis

Primary Language

🇵🇹Portuguese
Code: pt
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:pt-BR
Text Length:2,504 chars
Detector Agreement:100%

Website Classification

Primary Category

corporate business95% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

corporate business
95%
government public service
66%
technology software
44%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
12192.185.216.231Vinhedo, São Paulo, Brazil
AS31898Oracle Corporation
12142.251.110.95Google · CDNUnited States
AS15169Google LLC
12142.251.110.94Google · CDNUnited States
AS15169Google LLC
12142.251.20.139Google · CDNUnited States
AS15169Google LLC
12142.251.14.94Google · CDNUnited States
AS15169Google LLC
12142.251.20.138Google · CDNUnited States
AS15169Google LLC
726--

Detected Technologies8

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T10653C6BBD149207F232B46D8A134B75CF087D25ADF068AE473F8429CEBCADE9516215C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:jYypWOOPOn1itpEgIsowSIYJi/L0xz05fZXGuyn3tJ+:j5QFMiGi9fZXGuyn3tQ

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:64823:NZAFAI0TAGEIhUMAAgkCUQEEncGIIa5AYoipCEQRlKgYQADiHgAlgRpYSg94ZHInAsJrWiQoim/gKwICJwDCEgKDQFWeACIi

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:f8fcffff3f0c0000
Perceptual Hash:c2fd6f12853fd204
Difference Hash:40c080e0f0d9f9e1
Wavelet Hash:70fcfeff3f0c0000
Color Hash:#865c2d

Scan History

Scan history not available

Unable to load historical scan data