Security Report: theonedigital.com.br - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/cba5e905-9abb-4199-a834-e3a09527257f Domain and IP registration (RDAP)/api/v1/rdap/cba5e905-9abb-4199-a834-e3a09527257fHow often this domain was scanned/api/v1/domain/stats/theonedigital.com.br Scan history for this domain/api/v1/domain/history/theonedigital.com.br?limit=15

This website contacted 8 IPs in 3 countries across 7 domains to perform 32 HTTP transactions. The main domain is theonedigital.com.br and was registered 5 years ago.

Submitted URL: https://theonedigital.com.br

AI Security Verdict

Confirmed Scam

Confidence: 95%

Risk Score

Compromised legitimate business site serving ClickFix phishing overlay via EtherHiding; critical malware kit and IDS alerts confirmed.

Risk Factors (4)

Compromised with ClickFix phishing overlay that tricks users into running terminal commands

EtherHiding exfiltration technique using blockchain smart contracts

Obfuscated script with hidden blockchain RPC connections

Loads resources from multiple malicious domains and IPs

Domain age information unavailable

Details

Page Title

TheONE - Consultoria de Estratégia Digital focada em pessoas

Scan Type

public

Favicon Hash

MMH3: 1709350343

MD5: 942a205828b6c02a95b4992641c5a19e

Domain Name Analysis

The domain name 'theonedigital.com.br' uses the Brazilian country-code top-level domain (.com.br) with no subdomain. The registrable portion 'theonedigital' spans 13 characters holding six vowels versus seven consonants. Tokenizing the label suggests 3 words: the, one, digital. Expect three characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

90.10s

Total Load Time

597 KB

Total Size

Language Analysis

Primary Language

🇵🇹Portuguese

Code: pt

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:pt-BR

Text Length:7,878 chars

Detector Agreement:100%

Website Classification

Primary Category

corporate business77% confidence

Type: spa

Method: ml+structural

All Detected Categories

corporate business

77%

corporate

25%

Detected Features

Articles

OG: website

Schema.org

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
4	162.241.62.176	Vinhedo, São Paulo, Brazil	AS31898Oracle Corporation
4	192.178.183.97Google · CDN	United States	AS15169Google LLC
4	132.145.155.63Oracle · CLOUD	Ashburn, Virginia, United States	AS31898Oracle Corporation
4	192.178.183.138Google · CDN	United States	AS15169Google LLC
4	142.251.13.94Google · CDN	United States	AS15169Google LLC
4	178.16.52.101	Frankfurt am Main, Hesse, Germany	AS202412Omegatech LTD
4	142.251.14.94Google · CDN	United States	AS15169Google LLC
4	192.178.183.113Google · CDN	United States	AS15169Google LLC
32	8	-	-