Security Scan Report: actulabhd73.wasmer.app

Submitted: Completed: publiccompleted
This website contacted 10 IPs in 2 countries across 5 domains to perform 8 HTTP transactions. The main domain is wasmer.app and was registered 8 years ago.

Submitted URL: https://actulabhd73.wasmer.app/

AI Security Verdict

Confirmed Scam

Confidence: 92%

9
Risk Score

Fake Banco BHD internet-banking login on a free Wasmer subdomain that collects passwords, card coordinate codes and security questions, with IP-geolocation profiling. Phishing; never enter credentials.

Risk Factors (5)
Impersonation of Banco BHD bank branding on a domain unrelated to bhd.com.do
Login/credential form harvesting banking passwords on shared-hosting subdomain
Multi-stage harvesting of physical card coordinate codes and secret security questions
External IP-geolocation lookups (ipapi.co, ipwho.is) consistent with phishing-kit victim filtering
Unranked domain with no verifiable ownership and platform-controlled age
Domain age information unavailable

Details

Page Title

Banco BHD - IBP

Scan Type

public

Domain Name Analysis

The domain name 'actulabhd73.wasmer.app' uses the application-focused generic top-level domain (.app) with subdomain 'actulabhd73'. Its registrable label 'wasmer' stretches across 6 characters split between 2 vowels and 4 consonants. Breaking it apart gives two words: was, mer. Average segment length settles at three characters. No strong language cues emerged from the frequency lists.

Screenshot

©8HD | Personal Usuario * Contraseîia * :Olvidaste tu clave de acceso? € Ira Internet Banking Empresarial

Page Load Overview

1.65s
Total Load Time
1.4 MB
Total Size

Language Analysis

Primary Language

🇪🇸Spanish
Code: es
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:es
Text Length:1,200 chars
Detector Agreement:67%

Website Classification

Primary Category

finance banking61% confidence
Type: static
Method: ml+structural

All Detected Categories

finance banking
61%
corporate business
49%
adult content
26%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
823.136.196.24United States
AS20473The Constant Company, LLC
0104.17.24.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
018.66.102.120Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
0172.67.69.226Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
0146.75.120.193Fastly · CDNFrankfurt am Main, Hesse, Germany
AS54113Fastly, Inc.
023.136.196.25United States
AS20473The Constant Company, LLC
018.66.102.39Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
018.66.102.55Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
0104.17.25.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
0104.26.8.44Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
810--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T153C2B82532F320169197A478ABE28B053520C107D94BCA687FBC1654DFCEE959BB37EC

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:ua/ckU7y908VEeASui0wzsmxnrnFWCwf+80nRdeg8Z:ua/ckU7y9zVEeamxp6G1w

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:26626:uTAgQCyEVoxOiBQACFECoAarBk3gA4RAFQlLIAAtw0hCaB4qoNADEIg0tDMlGCBgpCABADgrQWNhQJhoCr1omQAJgBGjRAAJ

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffff1f1818180000
Perceptual Hash:9d8d32f24d1d9a1a
Difference Hash:fc5f32b2b2b13c30
Wavelet Hash:ffffff3a18180000
Color Hash:N/A

Scan History

Scan history not available

Unable to load historical scan data