Security Scan Report: auxilioparamaes.com.br

Site favicon
Submitted: Sep 14, 2026, 1:47:30 PMCompleted: Sep 14, 2026, 1:49:37 PMpubliccompleted

AI Security Verdict

High Risk

Confidence: 75%

7
Risk Score

Primary domain is flagged as the ClearFake malware family by two independent threat-intel feeds, triggering an automatic high-risk rating. The page itself has no credential/payment forms and shows its own brand, so the domain may be compromised rather than a phishing kit.

Risk Factors (3)
Multi-source corroborated malware-family (ClearFake) match on the primary domain
Domain unranked in Cisco Umbrella despite 6-year age, consistent with compromised/repurposed hosting
Lead-capture page directing users off-site to WhatsApp with urgency and benefit claims
Domain age information unavailable

Details

Page Title

Auxilio para mães – Benefício Garantido por Lei, pago às mães que estavam desempregadas na data do parto, ou tenham contribuído com o INSS por no mínimo 10 meses.

Scan Type

public

Domain Name Analysis

You're looking at domain 'auxilioparamaes.com.br' on the Brazilian country-code top-level domain (.com.br). The core label 'auxilioparamaes' covers 15 characters containing 9 vowels alongside 6 consonants. Word splitting yields four words: auxi, lio, para, maes. The median word length lands at four characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://auxilioparamaes.com.br

Page Load Overview

85.37s
Total Load Time
1.3 MB
Total Size

Language Analysis

Primary Language

🇵🇹Portuguese
Code: pt
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:pt-BR
Text Length:3,959 chars
Detector Agreement:100%

Website Classification

Primary Category

healthcare medical49% confidence
Type: spa
Method: ml+structural

All Detected Categories

healthcare medical
49%
government public service
32%

Detected Features

Articles

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
11192.178.170.95Google · CDNUnited States
AS15169Google LLC
6187.108.199.185São Paulo, São Paulo, Brazil
AS53107EVEO S.A.
6104.26.15.222Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
6104.21.75.154Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
6188.114.96.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
6142.251.14.101Google · CDNUnited States
AS15169Google LLC
6142.251.127.148Google · CDNUnited States
AS15169Google LLC
6104.26.14.222Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
6142.251.20.97Google · CDNUnited States
AS15169Google LLC
6157.240.0.6Facebook · CDNFrankfurt am Main, Hesse, Germany
AS32934Facebook, Inc.
9515--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1ECF28477E0A31145562B8F87C7CE73288528DA52998309F93191214E8B8EFFE13D761F

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:Jb2LrqwRXdSZsTaAf69K3h1TNslQCfEGHRmy4kWV2n1ma1m5UTwvLzVYgIMIFasV:Jb2Lr/ZdSZUaArkWWwHW5UsN4Y

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:37258:EBOwBFAiEGkKYRNJGSTAyiOUEg0ASoJ46ABgmkAMhWHxBEoiIA0FAsDTgYCEVYNO0GKgHRExZiEmYCCgTyDSVEImEDIOEIUH

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:9f8fdf9d8cdc9d8f
Perceptual Hash:bee13dc21cc7c10e
Difference Hash:383e1e313d313133
Wavelet Hash:8f87cf9d8d8c8889
Color Hash:#3a786b

Other Hashes

Crop Resistant:383e1e313d313133

Scan History

Scan history not available

Unable to load historical scan data