ScanMalware.com

Security Scan Report: sanbankbrdigital-dp0o1k0i3zgh.edgeone.dev

Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/3b3d09ad-3a24-4070-9d98-2aca73860cf4Domain and IP registration (RDAP)/api/v1/rdap/3b3d09ad-3a24-4070-9d98-2aca73860cf4How often this domain was scanned/api/v1/domain/stats/sanbankbrdigital-dp0o1k0i3zgh.edgeone.devScan history for this domain/api/v1/domain/history/sanbankbrdigital-dp0o1k0i3zgh.edgeone.dev?limit=15
This website contacted 6 IPs in 3 countries across 3 domains to perform 9 HTTP transactions. The main domain is edgeone.dev and was registered 1 year 5 months ago.

Submitted URL: https://sanbankbrdigital-dp0o1k0i3zgh.edgeone.dev/

AI Security Verdict

Confirmed Scam

Confidence: 95%

10
Risk Score

Fake Brazilian bank app impersonating Itaú/Bradesco that harvests account passwords and pushes a malicious Android installer APK — confirmed phishing/fraud.

Risk Factors (5)
Brand impersonation of Itaú and Bradesco on a non-official domain
Credential-harvesting login form (5 password fields, 17 account/username fields)
Download of a fake Android banking installer (APK) from an external Supabase host
Deceptive hostname on a free/disposable hosting subdomain with unknown creation date
Full fake-bank admin/user panel suggesting a fraud/mule toolkit
Domain age information unavailable

Details

Page Title

Sanbank BR Digital - Estilo Itaú em modo escuro

Scan Type

public

Domain Name Analysis

The domain name 'sanbankbrdigital-dp0o1k0i3zgh.edgeone.dev' uses the developer-focused generic top-level domain (.dev), featuring subdomain 'sanbankbrdigital-dp0o1k0i3zgh'. The second-level label 'edgeone' is 7 characters long split between 4 vowels and three consonants. Tokenizing the label suggests two words: edge, one. Median word length is 3.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Acesse sua conta pelo painel seguro Digite sua conta (6 digitos) | No tenho conta — abrir uma conta | | NOMERO DA CONTA | Esquecl minha sanha

Page Load Overview

2.00s
Total Load Time
1.8 MB
Total Size

Language Analysis

Primary Language

🇵🇹Portuguese
Code: pt
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:pt-BR
Text Length:33,381 chars
Detector Agreement:100%

Website Classification

Primary Category

download file sharing94% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

download file sharing
94%
technology software
92%
cryptocurrency blockchain
91%
finance banking
89%
blog personal website
86%

Detected Features

Search
Payment

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
443.174.247.29Singapore
AS139341ACE
145.43.142.6United Kingdom
AS16276OVH SAS
1104.18.38.10Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
143.174.246.29Singapore
AS139341ACE
145.43.142.4United Kingdom
AS16276OVH SAS
1172.64.149.246Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
96--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T10F956C5675B311328D5752EA3BEB970A3A309103F806C858BFAD42844FDADD4C9BB79C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

24576:msARrQY2uoi/MtNyZXwqIzB7nSyc9KDZXwqIzBfnSKQ:gBDovN4jWNjWQ

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:2037946:oAJUYAQcR4IUeAnERBgRHRTBUzEByYgwwIQzuQAAwiIooZcAcNCAnnBEiBYxB0MsVEjiRHCBDUIBiMAMIIYHI/KSgIswIzoo

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:c34218387c180000
Perceptual Hash:cdb832c3c73838c7
Difference Hash:92aa92f2e0b0c0e0
Wavelet Hash:ffff7e187e180000
Color Hash:N/A

Other Hashes

Crop Resistant:92aa92f2e0b0c0e0

Scan History

Scan history not available

Unable to load historical scan data