Security Scan Report: www.vinte3comunicacao.com.br

Site favicon
Submitted: Completed: publiccompleted
This website contacted 15 IPs in 2 countries across 9 domains to perform 186 HTTP transactions. The main domain is vinte3comunicacao.com.br and was registered 10 years ago.

Submitted URL: https://www.vinte3comunicacao.com.br/

AI Security Verdict

Confirmed Scam

Confidence: 96%

10
Risk Score

Legitimate-looking Brazilian agency site that has been compromised and now serves ClickFix clipboard-injection malware: a fake 'verify you are human' page copies a PowerShell command while EtherHiding IDS alerts fire. Do not paste or run anything.

Risk Factors (5)
ClickFix clipboard shell-command injection executed with 6 clipboard events
Deceptive bot-verification overlay instructing users to run a PowerShell command (social engineering)
19 CRITICAL ET MALWARE EtherHiding Exfil M2 IDS alerts
Loads third-party blockchain testnet RPC endpoints, one flagged as Vidar malware infrastructure
Chain of 6 cross-domain redirects before landing on the page
Domain age information unavailable

Details

Page Title

Vinte 3 Comunicaçãoo – Estratégias para sua empresa vender on-line!

Scan Type

public

Domain Name Analysis

You're looking at domain 'www.vinte3comunicacao.com.br' on the Brazilian country-code top-level domain (.com.br) and includes subdomain 'www'. The second-level label 'vinte3comunicacao' is 17 characters long holding eight vowels versus eight consonants; it also includes one digit. It segments into six words: v, in, te, 3, comuni, cacao. Average segment length settles at two characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://www.vinte3comunicacao.com.br/

Page Load Overview

8.63s
Total Load Time
2.5 MB
Total Size

Language Analysis

Primary Language

🇵🇹Portuguese
Code: pt
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:pt-PT
Text Length:2,023 chars
Detector Agreement:100%

Website Classification

Primary Category

social media network71% confidence
Type: spa
Method: ml+structural

All Detected Categories

social media network
71%
documentation technical
56%
corporate business
55%
government public service
26%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
18188.114.96.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
12188.114.97.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
12192.178.183.95Google · CDNUnited States
AS15169Google LLC
12172.66.150.162Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
12142.251.20.94Google · CDNUnited States
AS15169Google LLC
12142.251.13.95Google · CDNUnited States
AS15169Google LLC
12192.178.183.94Google · CDNUnited States
AS15169Google LLC
123.33.155.121Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
1234.111.175.102Google · CDNKansas City, Missouri, United States
AS396982Google LLC
12104.21.27.152Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
18615--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1FFE3E57239961464325F83DF7427770C619BD683D242E9F8B9FC01289FE1DE537A2268

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:lSj0As/xYiV0SglYxrXWNNDmi3sgdiMoXJIB8IGPm1MoCGiOdRfZHb4vfFdO:hYiV0SglYxrk

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:150598:RUkdwwYNSAFQtggL2UCFcGTcadEG8KqzJACAsUDQALiWAAwhIAUkkAwBRZQCCYAECIKOgEhwsgKUKoINGpIMpGAxADKFCvHI

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffffc3c3ffffffe7
Perceptual Hash:b098c7cf323866cd
Difference Hash:004006161800100c
Wavelet Hash:033f0307fcfcd8c0
Color Hash:#931f31

Other Hashes

Crop Resistant:004006161800100c

Scan History

Scan history not available

Unable to load historical scan data