ScanMalware.com

Security Scan Report: www-itausegurancas.rf.gd

Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/29fcbdb0-3566-41a7-a85a-56309f742f0bDomain and IP registration (RDAP)/api/v1/rdap/29fcbdb0-3566-41a7-a85a-56309f742f0bHow often this domain was scanned/api/v1/domain/stats/www-itausegurancas.rf.gdScan history for this domain/api/v1/domain/history/www-itausegurancas.rf.gd?limit=15
This website contacted 1 IP in 1 country across 1 domain to perform 2 HTTP transactions. The main domain is rf.gd and was registered 13 years ago.

Submitted URL: https://www-itausegurancas.rf.gd

The Cisco Umbrella rank of the primary domain is #334,284 of the top 1 million websites

AI Security Verdict

High Risk

Confidence: 78%

7
Risk Score

Domain itself is flagged as phishing by two corroborating feeds and its hostname mimics Itaú on an abused free-hosting namespace; the page currently only serves a DNS error, but the domain should not be trusted.

Risk Factors (4)
Multi-source phishing threat-intel match against the scanned domain itself
Deceptive hostname impersonating Itaú (itausegurancas) on a third-party free-hosting namespace
Hosted on rf.gd, a free-subdomain service flagged by IDS as a commonly abused domain
Domain reputation ranking (#334,284) is low, though this alone is not a finding
Domain age information unavailable

Details

Page Title

DNS Resolution Error - Domain Not Found, Or Domain not added to hosting account

Scan Type

public

Domain Name Analysis

You're looking at domain 'www-itausegurancas.rf.gd' on the .gd country-code top-level domain with subdomain 'www-itausegurancas'. The core label 'rf' covers 2 characters holding 0 vowels versus two consonants. Splitting it apart reveals one word: rf. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://www-itausegurancas.rf.gd

Page Load Overview

0.42s
Total Load Time
4 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:2,918 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software62% confidence
Type: static
Method: ml+structural

All Detected Categories

technology software
62%
documentation technical
58%
government public service
52%
education learning
43%
news media journalism
36%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
2185.27.134.24United Kingdom
AS34119Wildcard UK Limited
21--

Detected Technologies1

Nginx
40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T14372711B56F310161443A5A46B63575A3B61E00BD10BCEAA3FDCA3D8AF82AA0DC7774D

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:Ra0uCvFtNu951GtF+6D4HfX1Y0DrdH+QIuv6+styJxhBsKIDgo5jzpunyBydj3n5:RzvFNFNKfLbW5o

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:17338:QgIFiBCYgKQVACtawDMAJAoABQgAAAIZDTlEGuW0RCIKgBPyUCliQLACwR4GC2ZmAGoQLiiRwAABIhglMiFJLwBaMYBHEEgM

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Scan History

Scan history not available

Unable to load historical scan data