Security Scan Report: casalprospero.com.br

Site favicon
Submitted: Oct 9, 2026, 7:25:25 PMCompleted: Oct 9, 2026, 7:26:25 PMpubliccompleted

AI Security Verdict

High Risk

Confidence: 80%

8
Risk Score

Active multi-feed 'clearfake' malware indicator on this aged domain, plus unexplained BSC testnet blockchain RPC calls from page scripts, indicate a likely compromised site serving injected malware. No forms or phishing observed; do not interact.

Risk Factors (3)
Multi-source corroborated threat-intel match ('clearfake (malware)') against the primary domain of the scanned page
Page scripts contact multiple BSC testnet blockchain RPC endpoints with no legitimate purpose for a finance-course landing page
Domain not present in Cisco Umbrella top 1M (unranked reputation)
Domain age information unavailable

Details

Page Title

Casal próspero – Finanças para casais – Casal próspero

Scan Type

public

Domain Name Analysis

The domain name 'casalprospero.com.br' uses the Brazilian country-code top-level domain (.com.br) with no subdomain. The second-level label 'casalprospero' is 13 characters long containing five vowels alongside eight consonants. Segmentation suggests two words: casal, prospero. Median word length comes out to 6.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://casalprospero.com.br

Page Load Overview

4.67s
Total Load Time
8.2 MB
Total Size

Language Analysis

Primary Language

🇵🇹Portuguese
Code: pt
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:pt-PT
Text Length:1,756 chars
Detector Agreement:100%

Website Classification

Primary Category

finance banking35% confidence
Type: spa
Method: ml+structural

All Detected Categories

finance banking
35%
education learning
34%
adult content
34%
government public service
30%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
33108.167.169.34Vinhedo, São Paulo, Brazil
AS31898Oracle Corporation
3157.240.0.6Facebook · CDNFrankfurt am Main, Hesse, Germany
AS32934Facebook, Inc.
399.84.152.30Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
315.197.152.159Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
352.223.48.152Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
315.197.198.189Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
3104.20.46.180Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3142.215.53.55Washington, District of Columbia, United States
AS15830Equinix (EMEA) Acquisition Enterprises B.V.
3172.66.150.162Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3192.178.183.97Google · CDNUnited States
AS15169Google LLC
19856--

Detected Technologies13

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T12DE3E9617E466839226F16CF6027260C60CAEFD9E512E9E1F6FE512823F4CE137D31A5

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:Des0QB8X0gsfCkiSotU4UDmitjUHXrZlpZ3IDsY7y5HylYNGCo0r0:1B4TbVUDmitjt

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:150370:gKFdxYh7gpkITAoAaYEkVQMUACAakk8yhymFxWMNAAIqIBVAFjMU3q3AKLEAEIJaKAmoVEQQkEhCqgoR3wYwAJIEAMAKCboC

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:000000ffffffffff
Perceptual Hash:ae0b0e4bf7b2b124
Difference Hash:6171970c0e962f27
Wavelet Hash:000000c7f7f7d7f7
Color Hash:#77862d

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data