Security Scan Report: ficos.com.br

Site favicon
Submitted: Completed: publiccompleted
This website contacted 3 IPs in 2 countries across 3 domains to perform 7 HTTP transactions. The main domain is ficos.com.br and was registered 3 years 10 months ago.

Submitted URL: https://ficos.com.br/nt/nrm8luxah0ebnbel8o235et8/

AI Security Verdict

Confirmed Scam

Confidence: 96%

10
Risk Score

Homoglyph-spoofed 'Netflix' login page on ficos.com.br with a credential form and a Telegram bot token exfiltration channel; a credential-phishing page planted on a compromised site. Do not enter login details.

Risk Factors (5)
Brand impersonation of Netflix on a non-Netflix, unranked domain
Homoglyph/Unicode-obfuscated page title masking the impersonated brand
Credential collection form (password + email/phone) on a mismatched domain
Telegram bot token in page script enabling exfiltration of submitted data
Phishing page hosted under an arbitrary path on what appears to be a compromised legitimate .com.br site
Domain age information unavailable

Details

Page Title

Nеtfliх Germany - Serien online ansehen, Filme online ansehen

Scan Type

public

Domain Name Analysis

Domain 'ficos.com.br' uses the Brazilian country-code top-level domain (.com.br) with no subdomain. The core label 'ficos' covers 5 characters with two vowels and 3 consonants. It segments into two words: fico, s. Median word length comes out to 2.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

HOURS EDTIRAR OMEN mel ADC £/Seced v Anmelden EQ Angemeidet bleiben Brauchen Sie Hilfe? “| A.A a / fh /RD B oy À Haben Sie Netflix noch nie ausprobiert? Jetzt abonnieren. Fragen? Rufen Sie 80 25...

Page Load Overview

3.09s
Total Load Time
490 KB
Total Size

Language Analysis

Primary Language

🇩🇪German
Code: de
Confidence:52%
Script:Latin
Direction:ltr

Detection Details

Text Length:593 chars
Detector Agreement:100%

Website Classification

Primary Category

entertainment media99% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

entertainment media
99%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
3143.208.8.5São Paulo, São Paulo, Brazil
AS264077CLOUDX SERVICOS EM NUVEM LTDA
2151.101.65.155Fastly · CDNUnited States
AS54113Fastly, Inc.
245.57.91.1United States
AS40027Netflix Streaming Services Inc.
73--

Detected Technologies7

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1DD62E71175B9147B65D3D2AA37E72B843668C0339806C6147AFD875E0F83D82EE276E8

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:P6E3OvMcaeFGpJi24F60o85+jrz09fK+SiKw+IMazw4x5AzrZxojXCq383N:d3uFBpk0ou+jrz09fPKGbx5AzrbGz38d

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:14889:2HDGYwgQbdCGAKF2RGyRFAOgBAzHjgEASAAAcKEkAUBNQj0wJyVA7MBABRUoEUmQAMAEvAiIKbPrDGMQANqgDAHMrZgaIiMK

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:8500fbf1c6e7c100
Perceptual Hash:aacf1bb256e8a115
Difference Hash:6941d2070c8d159b
Wavelet Hash:85b0f3f1e7e7c100
Color Hash:N/A

Other Hashes

Crop Resistant:6941d2070c8e119a

Scan History

Scan history not available

Unable to load historical scan data