Security Scan: leadlovers

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/4bf0b6e5-4fc3-47fd-bc49-acaa90ac4861 Domain and IP registration (RDAP)/api/v1/rdap/4bf0b6e5-4fc3-47fd-bc49-acaa90ac4861How often this domain was scanned/api/v1/domain/stats/sac-terra.paginas.site Scan history for this domain/api/v1/domain/history/sac-terra.paginas.site?limit=15

This website contacted 10 IPs in 1 country across 8 domains to perform 63 HTTP transactions. The main domain is paginas.site and was registered 9 years ago.

Submitted URL: http://sac-terra.paginas.site/?pagamento-de-titulos/?sf_sha1(0pkd39j84b)?

Effective URL:

https://sac-terra.paginas.site/?pagamento-de-titulos/?sf_sha1(0pkd39j8...

Redirected

AI Security Verdict

Moderate Risk

Confidence: 62%

Risk Score

Brand-impersonating 'sac-terra' subdomain with a bill-payment URL path on a free site-builder host, but blank LeadLovers boilerplate content and no forms or malware found; treat as suspicious, do not enter payment or personal data.

Risk Factors (3)

Deceptive hostname implying affiliation with Terra's customer-service channel while hosted on an unrelated free builder subdomain

Bill-payment themed URL on a user-controlled subdomain of a shared marketing platform

Page content is empty boilerplate with no business identity, address or verifiable ownership

Safety Factors (4)

Underlying domain paginas.site is well established (~3541 days old)

No forms of any kind; no password, payment or disguised-password fields

No Indicators of Compromise, no hunting rule malware patterns, no known-kit match, no network IDS alerts

Visible text is a platform attribution notice ('built on LeadLovers') rather than a brand-claiming login page

Domain age information unavailable

Details

Page Title

leadlovers

Scan Type

public

Favicon Hash

MMH3: 64925117

MD5: 1a42c7f2d1cdaad2407791a19b632a7a

Domain Name Analysis

Domain 'sac-terra.paginas.site' uses the .site top-level domain and includes subdomain 'sac-terra'. The second-level label 'paginas' is 7 characters long split between three vowels and 4 consonants. It segments into 3 words: pag, in, as. Median word length is two characters. No strong language cues emerged from the frequency lists.

Screenshot

leadlovers » Esse site foi construido na leadlovers, plataforma de automacao de marketing digital Para saber mais sobre o leadlovers acesse: Para reportar um abuso, favor acessar: wwwileadlover.com...

Page Load Overview

9.88s

Total Load Time

481 KB

Total Size

Language Analysis

Primary Language

🏳️UNKNOWN

Code: unknown

Confidence:0%

Detection Details

Text Length:10 chars

Detector Agreement:0%

Website Classification

Primary Category

unknown0% confidence

Type: static

Method: structural

All Detected Categories

No categories detected

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
9	172.67.193.149Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
6	188.114.97.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
6	188.114.96.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
6	142.251.14.95Google · CDN	United States	AS15169Google LLC
6	98.85.124.159Aws · CLOUD	Ashburn, Virginia, United States	AS14618Amazon.com, Inc.
6	142.251.13.94Google · CDN	United States	AS15169Google LLC
6	107.20.251.21Aws · CLOUD	Ashburn, Virginia, United States	AS14618Amazon.com, Inc.
6	18.235.29.15Aws · CLOUD	Ashburn, Virginia, United States	AS14618Amazon.com, Inc.
6	34.235.176.154Aws · CLOUD	Ashburn, Virginia, United States	AS14618Amazon.com, Inc.
6	54.147.93.252Aws · CLOUD	Ashburn, Virginia, United States	AS14618Amazon.com, Inc.
63	10	-	-

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1BDF0559BA8F2100CA001D1A01DD23238BE6A804B6346CD303EEC3A608F89382C8E33DC

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

12:haxeZZXRQoHsdAKfv1r+z3sDIKyJf4xEY585Zj:haAtLMdAvDJfQAj

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:529:AAAAAAAgAAAAIAAAAAAgQAAAAAAAAAIAAAAAACAAAAAAAAAAAAAAAAAACAAgBAAAAAAAAAAEAAAAAAAAQACAAFCAAAAAAIAA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffe5c3c3e7d7ffff

Perceptual Hash:e6679998a564ac9a

Difference Hash:ce280f064c140000

Wavelet Hash:67000000e7c3ffff

Color Hash:N/A

Other Hashes

Crop Resistant:ce280f064c140000

Scan History

Scan history not available

Unable to load historical scan data

Security Scan Report: sac-terra.paginas.site