Security Report: recuperacaodetributo.com.br - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/d4977ff4-cff4-4952-bec6-1d8adfd56dab Domain and IP registration (RDAP)/api/v1/rdap/d4977ff4-cff4-4952-bec6-1d8adfd56dabHow often this domain was scanned/api/v1/domain/stats/recuperacaodetributo.com.br Scan history for this domain/api/v1/domain/history/recuperacaodetributo.com.br?limit=15

This website contacted 20 IPs in 3 countries across 18 domains to perform 82 HTTP transactions. The main domain is recuperacaodetributo.com.br and was registered 1 year 9 months ago.

Submitted URL: https://recuperacaodetributo.com.br

AI Security Verdict

High Risk

Confidence: 85%

Risk Score

Legitimate-looking Brazilian law firm site whose pages load ClearFake/EtherHiding-associated third-party scripts, with a critical malware-exfiltration IDS alert — treat as compromised and do not interact.

Risk Factors (4)

Multiple content-malware indicators (ClearFake/EtherHiding) tied to third-party resource domains loaded by the page

Critical IDS malware/exfiltration alert and blockchain RPC connections indicating malicious script delivery

Primary domain appears on a ClearFake threat-intel report

Site likely compromised to serve malware to visitors

Domain age information unavailable

Details

Page Title

Advocacia Caio Cestari – Recuperação de crédito tributário

Scan Type

public

Favicon Hash

MMH3: 194463956

MD5: 2b47b868535716b05fc8a3fac0dc3521

Domain Name Analysis

Within the Brazilian country-code top-level domain (.com.br), 'recuperacaodetributo.com.br' is registered with no subdomain. Count 20 characters in 'recuperacaodetributo' split between 10 vowels and ten consonants. Tokenizing the label suggests seven words: re, cup, era, cao, de, tri, buto. Average segment length settles at 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

0.63s

Total Load Time

2.1 MB

Total Size

Language Analysis

Primary Language

🇵🇹Portuguese

Code: pt

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:pt-BR

Text Length:2,967 chars

Detector Agreement:100%

Website Classification

Primary Category

finance banking26% confidence

Type: spa

Method: ml+structural+ocr_tiebreaker

All Detected Categories

finance banking

26%

Detected Features

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
6	92.113.23.28	Frankfurt am Main, Hesse, Germany	AS47583Hostinger International Limited
4	92.113.16.125	Frankfurt am Main, Hesse, Germany	AS47583Hostinger International Limited
4	142.250.154.95Google · CDN	United States	AS15169Google LLC
4	142.251.14.94Google · CDN	United States	AS15169Google LLC
4	92.113.23.189	Frankfurt am Main, Hesse, Germany	AS47583Hostinger International Limited
4	142.251.20.97Google · CDN	United States	AS15169Google LLC
4	104.20.46.180Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
4	104.26.11.199Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
4	157.240.0.6Facebook · CDN	Frankfurt am Main, Hesse, Germany	AS32934Facebook, Inc.
4	142.251.153.119Google · CDN	United States	AS15169Google LLC
82	20	-	-