Security Report: cgbritcay-portal.com - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/56c6bf3a-f860-44ee-a828-cc4293c53319 Domain and IP registration (RDAP)/api/v1/rdap/56c6bf3a-f860-44ee-a828-cc4293c53319How often this domain was scanned/api/v1/domain/stats/cgbritcay-portal.com Scan history for this domain/api/v1/domain/history/cgbritcay-portal.com?limit=15

This website contacted 1 IP in 1 country across 1 domain to perform 3 HTTP transactions. The main domain is cgbritcay-portal.com and was registered 6 days ago.

Submitted URL: http://cgbritcay-portal.com/

Effective URL:

https://cgbritcay-portal.com/

Redirected

AI Security Verdict

Confirmed Scam

Confidence: 96%

Risk Score

Phishing page impersonating Salesforce on a 5-day-old typosquat domain, harvesting existing and new passwords via capture.php under a fake deadline; the 'authorized test simulation' notice is page text, not proof of legitimacy.

Risk Factors (6)

Impersonation of Salesforce branding on an unrelated domain

Harvesting of current password via capture.php on a 5-day-old domain

Typosquatted hostname mimicking the target organization's domain (cgbriteay.com)

Deadline-based urgency and account-suspension threat

Page text attempts to reassure scanners/users with a fake 'authorized phishing simulation / test environment' disclaimer — a manipulation attempt

High-severity network IDS Spamhaus DROP alert

Domain age information unavailable

Details

Page Title

Réinitialisation du mot de passe | Salesforce

Scan Type

public

Domain Name Analysis

Within the commercial generic top-level domain (.com), 'cgbritcay-portal.com' is registered. The core label 'cgbritcay-portal' covers 16 characters containing four vowels alongside eleven consonants, notching 1 hyphen. Breaking it apart gives five words: c, gbr, it, cay, portal. Median word length comes out to three characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

0.37s

Total Load Time

4 KB

Total Size

Language Analysis

Primary Language

🇫🇷French

Code: fr

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:fr

Text Length:892 chars

Detector Agreement:100%

Website Classification

Primary Category

technology software64% confidence

Type: webapp

Method: ml+structural

All Detected Categories

technology software

64%

corporate business

58%

phishing scam

51%

government public service

46%

documentation technical

41%

Detected Features

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
3	45.74.61.8	United States	AS20539769HOST LLC
3	1	-	-

Detected Technologies2

PasswordField

100%

Apache HTTP Server

40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T18112B672B2F61435B163D56927C26A8F3468C103C10BC700F6ACA769DFC69D29AB379C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

96:1mD1hh4iW3UfEvOOnx3VTb3o+RkiZfRowSMIBsxbIkXMN4EELpYVdPO/ySays:8bE3UaOwbXZfmsxb1A4F0OqSzs

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:9233:0QAJEAgUKAAY2DMEFBBwyqApAECIYh2JAB1CgABJ4AEqwFaJnJAGSeChQCBMKIQ3AkIEUqK4n9JlFiITCBAg4CjnQCgo8JRR

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:66e7e7efe7e7e7e7

Perceptual Hash:f38c229926cd2677

Difference Hash:8c0c0c1c0c0c1c4c

Wavelet Hash:00e6c6e6e6e6c6c6

Color Hash:#35d22d

Other Hashes

Crop Resistant:8c0c0c1c0c0c1c4c

Scan History

Scan history not available

Unable to load historical scan data

Security Scan Report: cgbritcay-portal.com