ScanMalware.com

Security Scan Report: www.maxsegnr.com.br

Site favicon
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/9907278b-edd0-4844-8694-0aca7233d7dcDomain and IP registration (RDAP)/api/v1/rdap/9907278b-edd0-4844-8694-0aca7233d7dcHow often this domain was scanned/api/v1/domain/stats/maxsegnr.com.brScan history for this domain/api/v1/domain/history/maxsegnr.com.br?limit=15
This website contacted 1 IP in 1 country across 1 domain to perform 1 HTTP transaction. The main domain is maxsegnr.com.br and was registered 11 years ago.

Submitted URL: https://www.maxsegnr.com.br/kuui/AllDO.html

AI Security Verdict

High Risk

Confidence: 82%

8
Risk Score

Fake DocuSign envelope on an unrelated, likely compromised domain, with anti-analysis script and a single-source phishing report. Brand impersonation drives this to high risk despite no form fields captured yet.

Risk Factors (5)
Impersonation of the DocuSign brand on a domain it does not own
Single-source phishing threat-intel match on the primary domain
DevTools and right-click blocking to frustrate inspection
Document-sharing lure hosted on an unrelated site's directory (likely compromised hosting)
Title/flow designed to induce credential or signature submission
Domain age information unavailable

Details

Page Title

DocuSign – Review Document

Scan Type

public

Domain Name Analysis

The domain name 'www.maxsegnr.com.br' uses the Brazilian country-code top-level domain (.com.br); it also runs on subdomain 'www'. The second-level label 'maxsegnr' is 8 characters long with two vowels and 6 consonants. It segments into three words: max, seg, nr. Average segment length settles at three characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://www.maxsegnr.com.br/kuui/AllDO.html

Page Load Overview

1.70s
Total Load Time
13 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:1,039 chars
Detector Agreement:100%

Website Classification

Primary Category

download file sharing84% confidence
Type: static
Method: ml+structural

All Detected Categories

download file sharing
84%
government public service
78%
technology software
66%
documentation technical
63%
news media journalism
58%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1108.167.188.63Vinhedo, São Paulo, Brazil
AS31898Oracle Corporation
11--

Detected Technologies1

Apache HTTP Server
40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T13A0395AA76F320366413A1782BBF970A3275E503910EC9157EDC53848FC5EE5A973BC8

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:9pP+7Q6QZ2Kp+NvHwgcn8dSFP/SeuTDRCCWIIIISeze5/ek/5sm:9F+7Q6419qeuTDRCCWIIIIFzeNGm

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:40936:AmJQWdIlQOEGhQBYKQUtYBKYACGRgdg4hKQVMokgTwzEgQQoCVrgwAjqYC+SEenAAAAERdFI2SDEoJCEWIgCBIkZkFKOSoB0

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:809c9c9c1c1c1c00
Perceptual Hash:99ff6500667f7202
Difference Hash:72313939b9b1b180
Wavelet Hash:809c9c9c1c1c1c00
Color Hash:#693a78

Other Hashes

Crop Resistant:263a320002020002,f9beba166682868e,061e1a0202020022,060602020202301a,72313939b9b1b180

Scan History

Scan history not available

Unable to load historical scan data