Security Scan Report: ar2arquitetura.com.br

Site favicon
Submitted: Sep 23, 2026, 1:18:51 PMCompleted: Sep 23, 2026, 1:21:19 PMpubliccompleted

AI Security Verdict

Confirmed Scam

Confidence: 88%

9
Risk Score

Legitimate 10-year-old architecture site that appears COMPROMISED — Safe Browsing malware, CRITICAL EtherHiding/AMOS ClickFix IDS alerts, and a '.asia' vidar-malware resource indicate active malware distribution.

Risk Factors
Safe Browsing Malware detection
CRITICAL IDS malware alerts (EtherHiding exfiltration, AMOS ClickFix loader)
Malware-typed indicator on the primary domain (iclickfix)
Loads resource from domain flagged as 'vidar' malware (hfdjmoedkjf.asia)
Links to suspicious .life domains associated with malware delivery
Domain age information unavailable

Details

Page Title

AR2 Arquitetura | Projetos Arquitetônicos, Reformas e Interiores -

Scan Type

public

Domain Name Analysis

Within the Brazilian country-code top-level domain (.com.br), 'ar2arquitetura.com.br' is registered. The core label 'ar2arquitetura' covers 14 characters holding seven vowels versus 6 consonants; it also includes one digit. Tokenizing the label suggests five words: ar, 2, ar, quite, tura. The median word length lands at 2 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://ar2arquitetura.com.br

Page Load Overview

27.33s
Total Load Time
3.1 MB
Total Size

Language Analysis

Primary Language

🇵🇹Portuguese
Code: pt
Confidence:44%
Script:Latin
Direction:ltr

Detection Details

Text Length:6,293 chars
Detector Agreement:75%

Website Classification

Primary Category

real estate property94% confidence
Type: spa
Method: ml+structural

All Detected Categories

real estate property
94%
corporate business
92%
government public service
65%
adult content
54%
documentation technical
46%

Detected Features

OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
35108.167.188.189Vinhedo, São Paulo, Brazil
AS31898Oracle Corporation
3104.17.207.5Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3104.17.24.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3142.251.20.95Google · CDNUnited States
AS15169Google LLC
3138.124.60.214Switzerland
AS203273NetCrafters OU
3142.251.110.95Google · CDNUnited States
AS15169Google LLC
3104.18.11.207Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3142.251.110.97Google · CDNUnited States
AS15169Google LLC
3142.251.156.119Google · CDNUnited States
AS15169Google LLC
3142.251.14.120Google · CDNUnited States
AS15169Google LLC
14939--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T16053FAF692467849DECFD10E5647473C776BB59B5F0293DA031E1E884F29CAE388432A

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:VIqvS2lbRM4GPulmCq1iP7Inb+ncySDdyp3kN:VIqvnba4GHu7Inb+nFSD49kN

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:60751:CEQKKgAQAMCKzGIIBZXESGjRaImCVFkUACOSQokCGQwRqgBCAVuYkzHANXYgBgpFqAMCAlWsCACABNACNAgAEcjNEDI4ibVW

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffffff000000ffff
Perceptual Hash:cde7b21945c718b2
Difference Hash:000000d0d0300000
Wavelet Hash:ffff00000000ffff
Color Hash:#3f3a78

Scan History

Scan history not available

Unable to load historical scan data