Security Scan: https://evidance.com.br

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/dc6e861b-e244-40a9-b909-0021e5203d3b Domain and IP registration (RDAP)/api/v1/rdap/dc6e861b-e244-40a9-b909-0021e5203d3bHow often this domain was scanned/api/v1/domain/stats/evidance.com.br Scan history for this domain/api/v1/domain/history/evidance.com.br?limit=15

This website contacted 6 IPs in 3 countries across 5 domains to perform 8 HTTP transactions. The main domain is evidance.com.br and was registered 19 years ago.

Submitted URL: https://evidance.com.br

AI Security Verdict

Confirmed Scam

Confidence: 97%

Risk Score

Compromised site serving a ClickFix fake-Cloudflare 'Human Verification' overlay that tricks Windows users into pasting terminal commands; blockchain-loaded payload (EtherHiding) confirmed by YARA, kit roster and CRITICAL IDS alerts.

Risk Factors (6)

Compromised legitimate domain (evidance.com.br, 19 years old) serving an injected ClickFix phishing overlay

Fake Cloudflare human-verification prompt impersonating Cloudflare's security interstitial with a fabricated Ray ID

Social engineering instructing users to open a terminal and paste/execute attacker-supplied commands

EtherHiding: next-stage payload address resolved from a blockchain smart contract to evade takedown

Malicious third-party script host cloud-browse.codes loaded on the page with no legitimate purpose

Primary domain reported as 'iclickfix' malware in threat intelligence (single-source)

Domain age information unavailable

Details

Page Title

N/A

Scan Type

public

Favicon Hash

MMH3: 433952315

MD5: ee33c8be6ffc94be7e71d7e53464801a

Domain Name Analysis

The domain 'evidance.com.br' uses the Brazilian country-code top-level domain (.com.br). Count 8 characters in 'evidance' containing four vowels alongside four consonants. Splitting it apart reveals two words: evi, dance. Expect 4 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

1.14s

Total Load Time

43 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:50%

Script:Latin

Direction:ltr

Detection Details

Text Length:1,109 chars

Detector Agreement:100%

Website Classification

Primary Category

technology software47% confidence

Type: static

Method: ml+structural

All Detected Categories

technology software

47%

cryptocurrency blockchain

40%

documentation technical

32%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
3	108.167.188.36	Vinhedo, São Paulo, Brazil	AS31898Oracle Corporation
1	188.114.97.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	178.16.52.101	Frankfurt am Main, Hesse, Germany	AS202412Omegatech LTD
1	188.114.96.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	152.236.9.75	Frankfurt am Main, Hesse, Germany	AS396356Latitude.sh
1	150.136.141.142Oracle · CLOUD	Ashburn, Virginia, United States	AS31898Oracle Corporation
8	6	-	-