Security Report: planejasaude.com.br - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/7c3fa8d9-1371-401f-a281-1fb47f486d1e Domain and IP registration (RDAP)/api/v1/rdap/7c3fa8d9-1371-401f-a281-1fb47f486d1eHow often this domain was scanned/api/v1/domain/stats/planejasaude.com.br Scan history for this domain/api/v1/domain/history/planejasaude.com.br?limit=15

This website contacted 20 IPs in 2 countries across 13 domains to perform 18 HTTP transactions. The main domain is planejasaude.com.br and was registered 11 years ago.

Submitted URL: https://planejasaude.com.br/wp-includes/updates/email/Mailupdate2026.html#[email protected]

AI Security Verdict

Confirmed Scam

Confidence: 96%

Risk Score

Compromised WordPress site hosting a credential phishing page: Safe Browsing social-engineering flag, password form, victim email token in the URL, and a Telegram exfiltration token. Do not enter credentials.

Risk Factors (6)

Google Safe Browsing social engineering threat

Compromised WordPress site serving phishing content from /wp-includes/

Password capture form with generic webmail styling ('Mail', 'Please enter your password', 'Forgot your password?')

Victim-tracking email address in URL fragment, mismatched with hosting domain

Telegram bot token in inline script enabling credential exfiltration

Hidden form fields (pdf1, address, email, type) consistent with a phishing kit

Domain age information unavailable

Details

Page Title

2ecfae5ab07a289dbe4f7916a22a36204756 - Mail

Scan Type

public

Domain Name Analysis

Within the Brazilian country-code top-level domain (.com.br), 'planejasaude.com.br' is registered with no subdomain. The core label 'planejasaude' covers 12 characters split between six vowels and 6 consonants. Splitting it apart reveals four words: plane, j, as, aude. Median word length comes out to three characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

1.73s

Total Load Time

427 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:60%

Script:Latin

Direction:ltr

Detection Details

Text Length:330 chars

Detector Agreement:100%

Website Classification

Primary Category

adult content47% confidence

Type: webapp

Method: ml+structural+ocr_tiebreaker

All Detected Categories

adult content

47%

documentation technical

46%

news media journalism

45%

healthcare medical

45%

technology software

43%

Detected Features

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
18	108.167.132.125	Vinhedo, São Paulo, Brazil	AS31898Oracle Corporation
0	142.251.14.95Google · CDN	United States	AS15169Google LLC
0	151.101.129.155Fastly · CDN	United States	AS54113Fastly, Inc.
0	74.125.29.95Google · CDN	United States	AS15169Google LLC
0	104.18.40.68Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
0	104.17.24.14Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
0	104.18.10.207Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
0	104.18.11.207Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
0	142.251.154.119Google · CDN	United States	AS15169Google LLC
0	35.169.185.219Aws · CLOUD	Ashburn, Virginia, United States	AS14618Amazon.com, Inc.
18	20	-	-