Security Scan Report: casadascordas.com.br

Site favicon
Submitted: Completed: publiccompleted
This website contacted 15 IPs in 2 countries across 13 domains to perform 355 HTTP transactions. The main domain is casadascordas.com.br and was registered 28 years ago.

Submitted URL: https://casadascordas.com.br/

AI Security Verdict

Confirmed Scam

Confidence: 95%

9
Risk Score

Legitimate 28-year-old shop whose storefront has been compromised: critical YARA hits and a roster-anchored kit serve a fake Chrome update payload from deepveindrilling.com. Do not run downloads.

Risk Factors (5)
Critical YARA detection of a fake-Chrome-update ClickFix payload
Critical YARA detection of a Magento CMS-block loader persisting code via localStorage and an onclick attribute
Analyst-vetted known-kit roster match (deepvein-magento-cms-block-loader-2026-10)
Compromised storefront loading script from the unranked host deepveindrilling.com
Obfuscated inline JavaScript with eval/Function code generation and encoding functions
Domain age information unavailable

Details

Page Title

Casa das Cordas

Scan Type

public

Domain Name Analysis

You're looking at domain 'casadascordas.com.br' on the Brazilian country-code top-level domain (.com.br). Its registrable label 'casadascordas' stretches across 13 characters holding 5 vowels versus eight consonants. Breaking it apart gives four words: casa, das, cord, as. Average segment length settles at 3.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://casadascordas.com.br/

Page Load Overview

6.76s
Total Load Time
3.4 MB
Total Size

Language Analysis

Primary Language

🇵🇹Portuguese
Code: pt
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:pt
Text Length:12,684 chars
Detector Agreement:100%

Website Classification

Primary Category

documentation technical61% confidence
Type: spa
Method: ml+structural

All Detected Categories

documentation technical
61%
adult content
26%
e-commerce
20%

Detected Features

Login Form
Search
Products

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
333.220.95.254Aws · CLOUDAshburn, Virginia, United States
AS14618Amazon.com, Inc.
23172.67.142.245Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
23142.250.154.95Google · CDNUnited States
AS15169Google LLC
23142.251.20.97Google · CDNUnited States
AS15169Google LLC
23188.114.97.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
23142.250.154.94Google · CDNUnited States
AS15169Google LLC
23157.240.0.6Facebook · CDNFrankfurt am Main, Hesse, Germany
AS32934Facebook, Inc.
23104.18.0.22Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
23216.239.34.36Google · CDNUnited States
AS15169Google LLC
23142.251.127.157Google · CDNUnited States
AS15169Google LLC
35515--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T139C4A790E8F25431212391E0A0AA6B6D6FD2F60BCBE74DC036DD47B42FD5ED02A1B95D

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:bqxccQJnLVKMecoXA6RBur13GC9h3+cD3FpSgHGjVrQdOhY/H8Zt1X7drl+xVmm6:bqxccQJYMecYIrGlgVgN9sgcFDcFF

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:583993:WU0GphIOAmAQgAgBUNIIQAkDXAyIQEEkgAEHR2DA4jCAIQiLzqCoQCEBKAAzGFrpBICkQMATCJI2CCwMDgQAIAEQBIg0UYgO

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0000819f8f9fffff
Perceptual Hash:bc43473c19c61e73
Difference Hash:b0130f333b33272b
Wavelet Hash:0000818b8f8fffff
Color Hash:#c7e06c

Scan History

Scan history not available

Unable to load historical scan data