Security Scan Report: www8-receitafazendagerador.com

Submitted: Completed: publiccompleted
This website contacted 8 IPs in 2 countries across 4 domains to perform 13 HTTP transactions. The main domain is www8-receitafazendagerador.com and was registered 1 day ago.

Submitted URL: https://www8-receitafazendagerador.com/Aplicacao/Mei/pgmei.app/index.php

AI Security Verdict

Confirmed Scam

Confidence: 93%

9
Risk Score

Brand-impersonation phishing: a ≤1-day-old look-alike domain posing as the Receita Federal PGMEI tax service to harvest CNPJ numbers, flagged by Safe Browsing for social engineering.

Risk Factors (5)
Verified Google Safe Browsing social-engineering (phishing) detection
Impersonation of a government tax program (Receita Federal PGMEI) on unrelated, newly registered look-alike domain
Domain age ≤1 day with no ranking or reputation
Collection of full CNPJ tax identifier behind a fake government service
Right-click blocking and obfuscated inline JavaScript (anti-analysis)
Domain age information unavailable

Details

Page Title

PGMEI - Programa Gerador de DAS do Microempreendedor Individual

Scan Type

public

Domain Name Analysis

You're looking at domain 'www8-receitafazendagerador.com' on the commercial generic top-level domain (.com). The core label 'www8-receitafazendagerador' covers 26 characters with 10 vowels and 14 consonants, along with one digit and 1 hyphen. Splitting it apart reveals nine words: www, 8, re, ce, it, a, fazenda, gera, dor. The median word length lands at two characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://www8-receitafazendagerador.com/Aplicacao/Mei/pgmei.app/index.php

Page Load Overview

0.38s
Total Load Time
124 KB
Total Size

Language Analysis

Primary Language

🇵🇹Portuguese
Code: pt
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:pt-br
Text Length:317 chars
Detector Agreement:100%

Website Classification

Primary Category

finance banking40% confidence
Type: static
Method: ml+structural

All Detected Categories

finance banking
40%
technology software
32%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
692.113.16.207Frankfurt am Main, Hesse, Germany
AS47583Hostinger International Limited
192.113.23.17Frankfurt am Main, Hesse, Germany
AS47583Hostinger International Limited
1142.251.14.95Google · CDNUnited States
AS15169Google LLC
1142.251.20.94Google · CDNUnited States
AS15169Google LLC
192.113.16.8Frankfurt am Main, Hesse, Germany
AS47583Hostinger International Limited
192.113.23.195Frankfurt am Main, Hesse, Germany
AS47583Hostinger International Limited
1142.250.154.94Google · CDNUnited States
AS15169Google LLC
1104.17.24.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
138--

Detected Technologies3

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1DBA1747198F70D73039F82D82AF7CB4B6D615A57E505C2443ABC06880FD2C815AABEA9

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

96:bgknKmzJSXhLRItpIqzeJfHqzH5PicqzINC59xNM9ytDqzet:bg0SRqQIMHIH5PnII4HRIo

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:4633:IOARMgAABgRQACA4EBgDAQhEAQCggACABgQgAQmDxCIgJIQQAhQABAGIBwAIZAgEFIBDQFnIhWBYA6RAAAgIgAJQUBAwrgAS

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:818989ffffffff81
Perceptual Hash:bb3b3aa42a213b99
Difference Hash:1b331b0f00010021
Wavelet Hash:00818181ffffff81
Color Hash:#8dac53

Other Hashes

Crop Resistant:1b331b0f00010021

Scan History

Scan history not available

Unable to load historical scan data