Security Scan: Background Image Page

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/fa528f89-5442-4b47-945d-9145e92368a2 Domain and IP registration (RDAP)/api/v1/rdap/fa528f89-5442-4b47-945d-9145e92368a2 Certificate Transparency/api/v1/ct/balconyresidences.com.br How often this domain was scanned/api/v1/domain/stats/balconyresidences.com.br Scan history for this domain/api/v1/domain/history/balconyresidences.com.br?limit=15

This website contacted 1 IP in 1 country across 1 domain to perform 4 HTTP transactions. The main domain is balconyresidences.com.br and was registered 3 years 6 months ago.

Submitted URL: https://balconyresidences.com.br/A64ybzU6h2ndxvVzRdE0wrhclick/download.html

AI Security Verdict

Confirmed Scam

Confidence: 93%

Risk Score

Compromised legitimate domain hosting an analyst-confirmed fake Adobe 'secured document' kit that pushes a remote-management agent; critical YARA hit. Do not download or open anything from this page.

Risk Factors (5)

Known malicious phishing/RMM-delivery kit (roster-anchored) hosted on the domain

Critical high-precision YARA match for Adobe-themed malware lure

Impersonation of Adobe's document-sharing flow without any affiliation

Kit planted in an obfuscated random subdirectory of what appears to be a compromised legitimate domain

Social-engineering lure instructing the victim to open a downloaded file

Domain age information unavailable

Details

Page Title

Background Image Page

Scan Type

public

Domain Name Analysis

You're looking at domain 'balconyresidences.com.br' on the Brazilian country-code top-level domain (.com.br) with no subdomain. Its registrable label 'balconyresidences' stretches across 17 characters with 6 vowels and 11 consonants. Word splitting yields two words: balcony, residences. Median word length is 8.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

1.75s

Total Load Time

75 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:335 chars

Detector Agreement:100%

Website Classification

Primary Category

technology software51% confidence

Type: static

Method: ml+structural+ocr_tiebreaker

All Detected Categories

technology software

51%

government public service

47%

documentation technical

42%

healthcare medical

34%

news media journalism

33%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
4	162.241.203.20	Vinhedo, São Paulo, Brazil	AS31898Oracle Corporation
4	1	-	-

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T10961505BA9F3005B390790B56BF36B062665C003D20ACA593FBD62A8CF84A9584A73CD

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

48:nBr+5LMAFtyizQfYn9lPh7TsFWtwjtWyN8y7euXDc:nBr0z9zQfk9lFoFWtUtWyneuXDc

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:3297:EAgAAhhMJEMEAGIAgAAAQAFAIAAAhARmIBEgAAEAAolAiBABAmAEAAAgAKCQACEEgAEAAAgAAiCQBAAwiAiECgBoAAAJAIIA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffcfc3c7ffffffff

Perceptual Hash:b131cccccc733366

Difference Hash:00181c1c00000000

Wavelet Hash:fcdcc0c4f0f0f0f0

Color Hash:#3a786f

Other Hashes

Crop Resistant:00181c1c00000000

Scan History

Scan history not available

Unable to load historical scan data

Security Scan Report: balconyresidences.com.br