Security Scan Report: fernandeseneri.adv.br

Submitted: Oct 12, 2026, 2:00:39 AMCompleted: Oct 12, 2026, 2:01:26 AMpubliccompleted

AI Security Verdict

Confirmed Scam

Confidence: 96%

10
Risk Score

Confirmed malicious ClickFix fake-CAPTCHA page: two CRITICAL roster-anchored YARA hits plus multi-source malware threat-intel on the URL. Appears to be a compromised WordPress law-firm site serving a ClickFix PowerShell/LOLBin lure. Avoid.

Risk Factors (5)
Known malicious ClickFix FakeCAPTCHA kit detected in page markup (YARA, roster-anchored, CRITICAL)
Multi-source threat-intelligence malware match against the exact scanned URL
Malware reputation (iclickfix) recorded against the primary domain
Fake CAPTCHA / 'verify you are human' prompt impersonating a Cloudflare security check to induce users to paste an encoded command
Apparent compromise of a legitimate WordPress/law-firm site to host injected malicious markup
Domain age information unavailable

Details

Page Title

Dra. Vania Neri – Advogada Especialista

Scan Type

public

Domain Name Analysis

The domain name 'fernandeseneri.adv.br' uses the Brazilian country-code top-level domain (.adv.br) with no subdomain. The registrable portion 'fernandeseneri' spans 14 characters holding six vowels versus 8 consonants. Tokenizing the label suggests three words: fernandes, e, neri. Expect 4 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://fernandeseneri.adv.br

Page Load Overview

11.14s
Total Load Time
79 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:36%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:pt-BR
Text Length:201 chars
Detector Agreement:67%
Language mismatch: Declared as pt-BR but detected as en

Website Classification

Primary Category

technology software54% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

technology software
54%
blog personal website
43%
social media network
37%
news media journalism
27%
adult content
25%

Detected Features

Articles

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
4177.93.106.42Brazil
AS53107EVEO S.A.
2104.17.25.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
252.63.121.74Aws · CLOUDSydney, New South Wales, Australia
AS16509Amazon.com, Inc.
2142.251.155.119Google · CDNUnited States
AS15169Google LLC
2142.251.110.103Google · CDNUnited States
AS15169Google LLC
125--

Detected Technologies5

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T15AB2C732E0A500667B5F87EE81A1B35CF958A604DA07A775B0FC71688F94AFB04B770D

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:F+LWM2Zdypa9EsBgx3TY8o6cDGPeeHJ+b0vLBqAw:OqypUkRS

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:25035:JLJW7OMxgDiAIAWoAkhEEhBwKo4AFGKBCKGAATB6gJYSoBYgokluCWXmXApowEACCk0TlmEBAEhl7WhDI4AxIGEkUAUQgCUg

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:9f8f8fffffffffff
Perceptual Hash:bc3c3cccc1e17139
Difference Hash:3028380000000000
Wavelet Hash:909084fcf0f0f0f0
Color Hash:#e06c6c

Other Hashes

Crop Resistant:3028380000000000

Scan History

Scan history not available

Unable to load historical scan data