ScanMalware.com

Security Scan Report: s1.vagalume.com.br

Site favicon
Submitted: May 9, 2026, 9:02:37 AMCompleted: May 9, 2026, 9:04:13 AMpubliccompleted
Loading additional data...

Summary

This website contacted 9 IPs in 3 countries across 9 domains to perform 55 HTTP transactions. The main domain is s1.vagalume.com.br and was registered NaN years ago.

Submitted URL: https://s1.vagalume.com.br

The Cisco Umbrella rank of the primary domain is #175,515 of the top 1 million websites

AI Security Verdict

Moderate Risk

Confidence: 78%

4
Risk Score

The site appears legitimate but shows moderate risk due to low ranking and heavily obfuscated JavaScript.

Risk Factors
Low domain ranking for a brand claim (rank >100K)
Heavy JavaScript obfuscation and many eval() calls
Multiple external script sources (CDNs, analytics)
Safety Factors
Established domain age (8822 days)
No malicious Indicators of Compromise found
No network IDS alerts
No credential or payment collection forms
Domain age information unavailable

Details

Page Title

VAGALUME - Letras de Músicas

Scan Type

public

Language

🇵🇹

Portuguese

(80% confidence)

Category

entertainment media

(28%)

Domain Information

Within the Brazilian country-code top-level domain (.com.br), 's1.vagalume.com.br' is registered with subdomain 's1'. Count 8 characters in 'vagalume' split between four vowels and 4 consonants. Breaking it apart gives three words: va, gal, ume. The median word length lands at three characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://s1.vagalume.com.br

Page Load Overview

4.05s
Total Load Time
118
HTTP Requests
37
Domains
1.3 MB
Total Size

Language Analysis

Primary Language

🇵🇹Portuguese
Code: pt
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:pt
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:pt
Text Length:6,139 chars
Detector Agreement:60%

Website Classification

Primary Category

entertainment media28% confidence
Type: spa
Method: ml+structural

All Detected Categories

entertainment media
28%
corporate
25%

Detected Features

OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
14142.251.13.95United States
AS15169Google LLC
13142.251.14.94United States
AS15169Google LLC
13185.106.140.206Netherlands
AS7979Servers.com, Inc.
13185.106.140.207Netherlands
AS7979Servers.com, Inc.
13104.26.6.89United States
AS13335Cloudflare, Inc.
13142.251.110.155United States
AS15169Google LLC
1318.173.205.68United States
AS16509Amazon.com, Inc.
13142.251.20.100United States
AS15169Google LLC
1387.98.146.228France
AS16276OVH SAS
1189--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1F6430A23B252507B227B53CCEB71239D70A12147C3135D8473F95BEAD75FEB968A2482

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:vOqo+3FifN0rVWqdPrjVPrRUFib8meh5lmtpoD7nBH/iYx95P3ErDmE42D2tJ3Qr:c+ViZA2tt03z

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:55869:IwFwYEAoF4BbEIhAR8IRwBkDUgGCANAA5oiEEQAWJqp1lGUQMVRUhpkEhTAL1kMAq6EAAQgKQkQA5ECBcC1Atgggok7MCoAx

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Scan History

Scan history not available

Unable to load historical scan data