Security Scan: Ajuda Aí

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/a6eaaf6c-6342-405f-bf14-0ff3f0023668 Domain and IP registration (RDAP)/api/v1/rdap/a6eaaf6c-6342-405f-bf14-0ff3f0023668How often this domain was scanned/api/v1/domain/stats/ajudaai.app.br Scan history for this domain/api/v1/domain/history/ajudaai.app.br?limit=15

This website contacted 6 IPs in 3 countries across 6 domains to perform 95 HTTP transactions. The main domain is ajudaai.app.br and was registered 1 year 11 months ago.

Submitted URL: https://ajudaai.app.br

AI Security Verdict

Confirmed Scam

Confidence: 98%

Risk Score

Compromised site serving an injected ClickFix/EtherHiding malware kit; YARA CRITICAL, kit-roster and IDS hits plus multi-feed malware flag on the primary domain. Do not interact.

Risk Factors (5)

Site is compromised and serving an injected ClickFix 'Human Verification' malware kit (Win+X / Terminal social-engineering lure)

Obfuscated JS loads a blockchain-based (EtherHiding) loader that resolves its payload host from a Polygon smart contract

Primary domain flagged as malware by two independent threat-intel feeds

Unranked, obfuscation-hidden third-party script host (browse-codes-enter.beer) receives browser fetch from the page

Page content (Lorem Ipsum placeholder text, fake Cloudflare/reCAPTCHA 'I'm not a robot' overlay) is inconsistent with a real site, indicating tampering

Domain age information unavailable

Details

Page Title

Ajuda Aí

Scan Type

public

Favicon Hash

MMH3: -1091280953

MD5: 7d7e1776859e2182d8b7ad5e48d90c99

Domain Name Analysis

You're looking at domain 'ajudaai.app.br' on the Brazilian country-code top-level domain (.app.br). The core label 'ajudaai' covers 7 characters split between 5 vowels and 2 consonants. Splitting it apart reveals five words: a, jud, a, a, i. The median word length lands at 1 character. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

4.63s

Total Load Time

1.2 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:50%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:pt-BR

Text Length:2,016 chars

Detector Agreement:100%

Language mismatch: Declared as pt-BR but detected as en

Website Classification

Primary Category

technology software53% confidence

Type: spa

Method: ml+structural

All Detected Categories

technology software

53%

news media journalism

38%

healthcare medical

33%

government public service

32%

documentation technical

29%

Detected Features

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
20	164.152.53.133Oracle · CLOUD	São Paulo, São Paulo, Brazil	AS31898Oracle Corporation
15	142.251.110.95Google · CDN	United States	AS15169Google LLC
15	142.251.20.94Google · CDN	United States	AS15169Google LLC
15	172.66.146.203Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
15	178.16.52.101	Frankfurt am Main, Hesse, Germany	AS202412Omegatech LTD
15	142.250.154.94Google · CDN	United States	AS15169Google LLC
95	6	-	-