Security Scan: EXPOSIBRAM 2026

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/d4f7499f-63d6-4a43-9f3a-4063ed4682ea Domain and IP registration (RDAP)/api/v1/rdap/d4f7499f-63d6-4a43-9f3a-4063ed4682ea Certificate Transparency/api/v1/ct/exposibram2026.ibram.org.br How often this domain was scanned/api/v1/domain/stats/exposibram2026.ibram.org.br Scan history for this domain/api/v1/domain/history/exposibram2026.ibram.org.br?limit=15

This website contacted 35 IPs in 2 countries across 23 domains to perform 224 HTTP transactions. The main domain is exposibram2026.ibram.org.br and was registered 21 years ago.

Submitted URL: https://exposibram2026.ibram.org.br/

AI Security Verdict

Confirmed Scam

Confidence: 90%

Risk Score

Legitimate-looking IBRAM mining event page, but it loads a confirmed DarkSword iOS exploit kit delivering the Coruna wallet stealer (CRITICAL IDS + kit-roster match). Treat the host as compromised; do not visit.

Risk Factors (5)

Confirmed exploit-kit delivery (DarkSword iOS exploit chain / Coruna wallet stealer) served through injected third-party scripts

Multiple CRITICAL network IDS alerts for exploit-kit landing, loader and module pages

Third-party script hosts flagged in threat intelligence as APT-linked malware

Suspicious .icu domain and IP-check beacon observed in network traffic

Legitimate 28-year-old event domain appears compromised and is being used to distribute malware to visitors

Domain age information unavailable

Details

Page Title

EXPOSIBRAM 2026

Scan Type

public

Favicon Hash

MMH3: -345544827

MD5: 8ab5eb471b73472bc2a878aee98e3f6a

Domain Name Analysis

Domain 'exposibram2026.ibram.org.br' uses the Brazilian country-code top-level domain (.org.br), featuring subdomain 'exposibram2026'. Its registrable label 'ibram' stretches across 5 characters containing two vowels alongside 3 consonants. Tokenizing the label suggests 2 words: i, bram. Expect 2.5 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

14.05s

Total Load Time

20.4 MB

Total Size

Language Analysis

Primary Language

🇵🇹Portuguese

Code: pt

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:pt-BR

Text Length:3,931 chars

Detector Agreement:100%

Website Classification

Primary Category

social media network67% confidence

Type: dynamic

Method: ml+structural

All Detected Categories

social media network

67%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
20	3.221.186.160Aws · CLOUD	Ashburn, Virginia, United States	AS14618Amazon.com, Inc.
6	142.251.110.95Google · CDN	United States	AS15169Google LLC
6	34.196.177.11Aws · CLOUD	Ashburn, Virginia, United States	AS14618Amazon.com, Inc.
6	142.251.110.97Google · CDN	United States	AS15169Google LLC
6	172.67.187.123Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
6	188.114.96.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
6	142.251.14.94Google · CDN	United States	AS15169Google LLC
6	157.240.0.6Facebook · CDN	Frankfurt am Main, Hesse, Germany	AS32934Facebook, Inc.
6	142.251.150.119Google · CDN	United States	AS15169Google LLC
6	142.250.154.148Google · CDN	United States	AS15169Google LLC
224	35	-	-