ScanMalware.com

Security Scan Report: portal.recovr.biz

Site favicon
Submitted: Jun 19, 2026, 2:48:52 AMCompleted: Jun 19, 2026, 2:50:54 AMpubliccompleted
Loading additional data...

Summary

This website contacted 5 IPs in 1 country across 5 domains to perform 2 HTTP transactions. The main domain is portal.recovr.biz and was registered NaN years ago.

Submitted URL: https://portal.recovr.biz

The Cisco Umbrella rank of the primary domain is #909,195 of the top 1 million websites

AI Security Verdict

High Risk

Confidence: 78%

7
Risk Score

The site hosts a password‑only form likely used for credential harvesting; treat as high‑risk phishing.

Risk Factors
Password-only form (suspicious credential harvesting pattern)
Low domain ranking
Single credential field without user identifier
Domain age information unavailable

Details

Page Title

RecovR Lot Management

Scan Type

public

Language

🇺🇸

English

(54% confidence)

Category

technology software

(35%)

Domain Information

Within the business-focused generic top-level domain (.biz), 'portal.recovr.biz' is registered and includes subdomain 'portal'. The registrable portion 'recovr' spans 6 characters containing 2 vowels alongside four consonants. Segmentation suggests three words: re, cov, r. Median word length comes out to 2 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://portal.recovr.biz

Page Load Overview

31.43s
Total Load Time
696
HTTP Requests
13
Domains
4.0 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:54%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:54%
Script Type:Latin
Text Length:188 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software35% confidence
Type: static
Method: ml+structural

All Detected Categories

technology software
35%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
140192.178.183.207United States
AS15169Google LLC
139151.101.66.217United States
AS54113Fastly, Inc.
139142.251.20.95United States
AS15169Google LLC
139104.18.40.68United States
AS13335Cloudflare, Inc.
139104.26.10.236United States
AS13335Cloudflare, Inc.
6965--

Detected Technologies4

HSTS
40%
Firebase
40%
Cloudflare Bot Management
40%
Cloudflare
40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T17BD2CF315514678B078A8CD47D20A7253CD9034FEE07C8641EBC23EA6FEB896992E6C6

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:F3y0Refs+xcJSVZ124qbnp9fVqeAY3/nLcA+bOlZ:F3y0csZJSxopeeD3DX+bOlZ

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:31092:gGJJCBWQzVAIAAEyFAFFABIYEI+p1LIIIatISGSpIA4gHCHCJloIJgEKceCHWhJBUhgI8YxdoQLFgEAAAJqhEBAGJSoACgAk

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:7f673c3d3f1c0c04
Perceptual Hash:83e230918fd9db4d
Difference Hash:c9cfe9e3faf8f8fc
Wavelet Hash:7f673c3d3e1e0c00
Color Hash:#8fd279

Other Hashes

Crop Resistant:9b8dd1c2f2f2f0f8,c7e3f2f2f6fe7ebf,6331182b61672626,1f7ee0e1f0800000,0f03165a0c061c48

Scan History

Scan history not available

Unable to load historical scan data