Security Scan Report: kfouriadvogados.adv.br

Site favicon
Submitted: Completed: publiccompleted
This website contacted 16 IPs in 5 countries across 11 domains to perform 102 HTTP transactions. The main domain is kfouriadvogados.adv.br and was registered 4 years 10 months ago.

Submitted URL: https://kfouriadvogados.adv.br

AI Security Verdict

Confirmed Scam

Confidence: 95%

9
Risk Score

Legitimate law-firm domain appears compromised and now serves an injected ClickFix/AMOS-stealer kit behind a fake 'security verification' CAPTCHA page that hides malicious hosts. Do not interact; report.

Risk Factors (5)
Known ClickFix/AMOS stealer kit injected into the site (critical, analyst-vetted)
Obfuscated script hiding a multi-source malicious host (js-static.cfd)
Additional malicious external resource (silverrogpuia.pro)
Fake security-verification CAPTCHA gate used as a ClickFix social-engineering lure
Unranked domain serving injected loader content
Domain age information unavailable

Details

Page Title

Verificação de segurança

Scan Type

public

Domain Name Analysis

Within the Brazilian country-code top-level domain (.adv.br), 'kfouriadvogados.adv.br' is registered while skipping any subdomain. The registrable portion 'kfouriadvogados' spans 15 characters split between seven vowels and eight consonants. Word splitting yields seven words: k, four, i, a, dvo, ga, dos. Average segment length settles at two characters. No strong language cues emerged from the frequency lists.

Screenshot

Verificação de segurança Seu IP fez diversas tentativas de acessos suspeitos a sites hospedados conosco. Para liberar o acesso do IP 89.37.63.79, responda ao desafio abaixo. Digite a palavra na ima...

Page Load Overview

75.10s
Total Load Time
4.7 MB
Total Size

Language Analysis

Primary Language

🇵🇹Portuguese
Code: pt
Confidence:54%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:370 chars
Detector Agreement:100%
Language mismatch: Declared as en but detected as pt

Website Classification

Primary Category

technology software34% confidence
Type: dynamic
Method: ml+structural+ocr_tiebreaker

All Detected Categories

technology software
34%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
12191.252.83.220Brazil
AS27715Locaweb Servicos de Internet S/A
6104.18.11.207Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
6142.251.14.95Google · CDNUnited States
AS15169Google LLC
6104.17.25.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
6142.251.151.119Google · CDNUnited States
AS15169Google LLC
6142.251.14.94Google · CDNUnited States
AS15169Google LLC
6177.153.51.56Brazil
AS27715Locaweb Servicos de Internet S/A
6104.18.10.207Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
6151.101.1.155Fastly · CDNUnited States
AS54113Fastly, Inc.
6104.16.180.112Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
10216--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T144A1A67339F889A74C4785D19AD7D74E9C90D00BF600848876DC03649FEDEEA9653A5C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

48:TXJ+CCm4ChZCCley3f7lOVV0ZTp5LGpvCVGyVRxtNUVd0KdvWz:Tkohsyv7YzHvCEyVLAVd0Kdg

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:4703:AAhACFkAEYBkJIAIBgAQKAANAFAEQQCEBoQCQAAJghCAACVYUGgJABAiMKABMgmIIhAcaCAABAEQkhCQACARyUAhEAwgAUAE

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:e7c3c3c3c3ffffff
Perceptual Hash:b433cbc666999964
Difference Hash:080e1e0e0f000400
Wavelet Hash:e781818181e73333
Color Hash:07000003180

Other Hashes

Crop Resistant:080e1e0e0f000400

Scan History

Scan history not available

Unable to load historical scan data