Security Report: ctvenki.com.br - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/a45d1ec9-4deb-42b3-ab9d-263c788650c7 Domain and IP registration (RDAP)/api/v1/rdap/a45d1ec9-4deb-42b3-ab9d-263c788650c7How often this domain was scanned/api/v1/domain/stats/ctvenki.com.br Scan history for this domain/api/v1/domain/history/ctvenki.com.br?limit=15

This website contacted 35 IPs in 4 countries across 19 domains to perform 177 HTTP transactions. The main domain is ctvenki.com.br and was registered 3 years 11 months ago.

Submitted URL: https://ctvenki.com.br

AI Security Verdict

Confirmed Scam

Confidence: 95%

Risk Score

Legitimate gym site compromised and serving an injected ClickFix 'Human Verification' overlay with EtherHiding blockchain payload loading; visitors are told to paste clipboard commands into Terminal — do not follow any prompt.

Risk Factors (5)

Injected ClickFix fake 'Human Verification' overlay instructing Windows users to open Terminal and paste clipboard content

EtherHiding blockchain-based payload loader with critical malware network IDS alerts

Obfuscated JavaScript concealing blockchain RPC and payload-hosting domains

Multiple threat-intel matches on resources loaded by the page (cloud-browse.codes, quiknode.pro, 178.16.52.101)

Compromised web presence of an otherwise legitimate business serving malware to visitors

Domain age information unavailable

Details

Page Title

Centro de treinamento – Venki

Scan Type

public

Favicon Hash

MMH3: 1926827840

MD5: 88294c3357c841d8f9d96592493b86a6

Domain Name Analysis

Domain 'ctvenki.com.br' uses the Brazilian country-code top-level domain (.com.br) with no subdomain. Count 7 characters in 'ctvenki' containing two vowels alongside five consonants. Splitting it apart reveals 2 words: ctv, enki. Median word length is 3.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

90.17s

Total Load Time

8.7 MB

Total Size

Language Analysis

Primary Language

🇵🇹Portuguese

Code: pt

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:pt-PT

Text Length:3,287 chars

Detector Agreement:75%

Website Classification

Primary Category

healthcare medical76% confidence

Type: spa

Method: ml+structural

All Detected Categories

healthcare medical

76%

education learning

50%

government public service

34%

adult content

26%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
7	162.241.2.249	Vinhedo, São Paulo, Brazil	AS31898Oracle Corporation
5	142.250.154.95Google · CDN	United States	AS15169Google LLC
5	142.251.110.97Google · CDN	United States	AS15169Google LLC
5	152.236.9.75	Frankfurt am Main, Hesse, Germany	AS396356Latitude.sh
5	132.145.155.63Oracle · CLOUD	Ashburn, Virginia, United States	AS31898Oracle Corporation
5	178.16.52.101	Frankfurt am Main, Hesse, Germany	AS202412Omegatech LTD
5	157.240.0.6Facebook · CDN	Frankfurt am Main, Hesse, Germany	AS32934Facebook, Inc.
5	20.250.198.32Azure · CLOUD	Zurich, Zurich, Switzerland	AS8075Microsoft Corporation
5	142.251.20.94Google · CDN	United States	AS15169Google LLC
5	142.251.13.113Google · CDN	United States	AS15169Google LLC
177	35	-	-