Security Report: asa5.org.br - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/a2f32cf1-2678-4934-a0b9-b6e540c93336 Domain and IP registration (RDAP)/api/v1/rdap/a2f32cf1-2678-4934-a0b9-b6e540c93336How often this domain was scanned/api/v1/domain/stats/asa5.org.br Scan history for this domain/api/v1/domain/history/asa5.org.br?limit=15

This website contacted 27 IPs in 3 countries across 14 domains to perform 170 HTTP transactions. The main domain is asa5.org.br and was registered 14 years ago.

Submitted URL: https://asa5.org.br

AI Security Verdict

Confirmed Scam

Confidence: 95%

Risk Score

Legitimate 14-year-old association site that has been compromised: it serves a ClickFix fake-CAPTCHA/Microsoft sign-in overlay tricking visitors into pasting shell commands, plus EtherHiding blockchain traffic and hidden spam links. Do not interact.

Risk Factors (5)

Compromised WordPress site injecting a fake CAPTCHA/verification overlay that lures visitors into running a clipboard-pasted shell command (ClickFix/FileFix)

Fake brand verification prompts impersonating Cloudflare and Microsoft account security

Blockchain RPC / EtherHiding traffic with CRITICAL IDS exfiltration alerts

Hidden injected links to unrelated streaming spam domains

Malicious third-party script hosts loaded by page scripts

Domain age information unavailable

Details

Page Title

ASA 5 – Associação dos Servidores Aposentados do TRT

Scan Type

public

Favicon Hash

MMH3: -1029897953

MD5: f6c71fec210e399b5e3492235930db5f

Domain Name Analysis

The domain name 'asa5.org.br' uses the Brazilian country-code top-level domain (.org.br) with no subdomain. Its registrable label 'asa5' stretches across 4 characters with 2 vowels and one consonant, along with one digit. Tokenizing the label suggests 3 words: as, a, 5. Average segment length settles at 1 character. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

9.25s

Total Load Time

7.6 MB

Total Size

Language Analysis

Primary Language

🇵🇹Portuguese

Code: pt

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:pt-BR

Text Length:3,466 chars

Detector Agreement:100%

Website Classification

Primary Category

technology software46% confidence

Type: spa

Method: ml+structural+ocr_tiebreaker

All Detected Categories

technology software

46%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
14	192.185.221.163	Vinhedo, São Paulo, Brazil	AS31898Oracle Corporation
6	142.251.110.95Google · CDN	United States	AS15169Google LLC
6	104.20.46.180Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
6	172.66.150.162Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
6	142.251.20.94Google · CDN	United States	AS15169Google LLC
6	142.251.150.119Google · CDN	United States	AS15169Google LLC
6	172.67.130.228Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
6	193.233.126.164	Amsterdam, North Holland, Netherlands	AS209207Digital Hosting Provider LLC
6	172.66.146.203Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
6	104.20.24.117Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
170	27	-	-