Security Scan: Verificação de Segurança

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/12ba0db7-bbc3-4d6d-8798-b11fcb81b407 Domain and IP registration (RDAP)/api/v1/rdap/12ba0db7-bbc3-4d6d-8798-b11fcb81b407How often this domain was scanned/api/v1/domain/stats/santander-comprovante-fr8kq2lm7xv9pqa4nx.duckdns.org Scan history for this domain/api/v1/domain/history/santander-comprovante-fr8kq2lm7xv9pqa4nx.duckdns.org?limit=15

This website contacted 38 IPs in 4 countries across 33 domains to perform 91 HTTP transactions. The main domain is duckdns.org and was registered 13 years ago.

Submitted URL: https://santander-comprovante-fr8kq2lm7xv9pqa4nx.duckdns.org

Effective URL:

https://www.santander.com.br/404?not-found=https:%2F%2Fwww.santander.c...

Redirected

The Cisco Umbrella rank of the primary domain is #76,811 of the top 1 million websites

AI Security Verdict

Moderate Risk

Confidence: 65%

Risk Score

Page ends on the genuine Santander Brazil domain serving only a 404 with no forms. But it is reached via a bank-themed duckdns.org redirector with cloaking-style behaviour — treat such links as untrusted, do not enter data.

Risk Factors (4)

Deceptive bank-themed hostname on a free dynamic-DNS namespace (duckdns.org) used purely as a redirector

Cross-domain redirect chain from the deceptive host to the real bank's 404 endpoint — a structure usable for link cloaking/filter evasion

Client-vs-scanner content mismatch (bot challenge only for residential visitors)

Suricata HIGH alerts for dynamic-DNS requests and Telegram API traffic

Safety Factors (5)

Final destination is the brand owner's own official domain (santander.com.br); the brand question is settled in the page's favour

No forms of any kind — no credential, password, or payment collection on the served content

No hunting rule malware patterns, no known-kit roster match, no credential exfiltration

All six cross-origin JS targets are top-1M analytics/advertising hosts (Google, DoubleClick, Hotjar, Adobe, Facebook)

The lone threat-intel hit is a generic abuse-reputation tag on a third-party Telegram address, which carries no weight against this page's content

Domain age information unavailable

Details

Page Title

Verificação de Segurança

Scan Type

public

Favicon Hash

MMH3: 385491529

MD5: 2e0aeb093e4a9e9351050b99a0b47e8f

Domain Name Analysis

The domain 'santander-comprovante-fr8kq2lm7xv9pqa4nx.duckdns.org' uses the non-profit oriented generic top-level domain (.org) with subdomain 'santander-comprovante-fr8kq2lm7xv9pqa4nx'. The second-level label 'duckdns' is 7 characters long holding one vowel versus 6 consonants. Tokenizing the label suggests two words: duck, dns. Median word length is 3.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

«Santander O que você procura? o Desculpe, a página que você pesquisou não foi encontrada. Que tal dar uma olhada nas sugestões abaixo? SUGESTOES Abertura de conta (benefícios, cartões, passo a pas...

Page Load Overview

1.88s

Total Load Time

3.4 MB

Total Size

Language Analysis

Primary Language

🇵🇹Portuguese

Code: pt

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:pt-BR

Text Length:135 chars

Detector Agreement:100%

Website Classification

Primary Category

documentation technical43% confidence

Type: static

Method: ml+structural+ocr_tiebreaker

All Detected Categories

documentation technical

43%

government public service

37%

technology software

28%

corporate

25%

Detected Features

OG: website

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
17	185.199.108.153Fastly · CDN	United States	AS54113Fastly, Inc.
2	142.251.14.95Google · CDN	United States	AS15169Google LLC
2	34.117.59.81Google · CDN	Kansas City, Missouri, United States	AS396982Google LLC
2	186.192.91.9	Brazil	AS28604Globo Comunicacao e Participacoes SA
2	142.250.154.94Google · CDN	United States	AS15169Google LLC
2	184.24.77.83Akamai · CDN	Frankfurt am Main, Hesse, Germany	AS20940Akamai International B.V.
2	149.154.166.110	Amsterdam, North Holland, Netherlands	AS62041Telegram Messenger Inc
2	184.24.77.75Akamai · CDN	Frankfurt am Main, Hesse, Germany	AS20940Akamai International B.V.
2	23.50.131.149Akamai · CDN	Frankfurt am Main, Hesse, Germany	AS20940Akamai International B.V.
2	23.50.131.140Akamai · CDN	Frankfurt am Main, Hesse, Germany	AS20940Akamai International B.V.
91	38	-	-