ScanMalware.com

Security Scan Report: registro-brasil-faturamento-1087013446189.europe-west1.run.app

Submitted: Mar 25, 2026, 11:21:17 PMCompleted: Mar 25, 2026, 11:22:40 PMpubliccompleted
Loading additional data...

Summary

This website contacted 4 IPs in 1 country across 4 domains to perform 1 HTTP transaction. The main domain is registro-brasil-faturamento-1087013446189.europe-west1.run.app and was registered NaN years ago.

Submitted URL: https://registro-brasil-faturamento-1087013446189.europe-west1.run.app/

The Cisco Umbrella rank of the primary domain is #1,649 of the top 1 million websitesTop 10K Site

AI Security Verdict

High Risk

Confidence: 92%

8
Risk Score

Impersonates Registro.br and requests payment on a brand‑new subdomain – likely a payment scam.

Risk Factors
Brand impersonation (Registro.br) on a non‑official domain
Newly created subdomain (0 days old) increasing suspicion
Payment request (PIX) without legitimate backing
Domain age information unavailable

Details

Page Title

Registro.br - Regularização de Domínio

Scan Type

public

Language

🇵🇹

Portuguese

(80% confidence)

Category

finance banking

(64%)

Domain Information

Within the application-focused generic top-level domain (.app), 'registro-brasil-faturamento-1087013446189.europe-west1.run.app' is registered with subdomain 'registro-brasil-faturamento-1087013446189.europe-west1'. The registrable portion 'run' spans 3 characters with one vowel and 2 consonants. It segments into one word: run. Median word length comes out to three characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://registro-brasil-faturamento-1087013446189.europe-west1.run.app/

Page Load Overview

0.40s
Total Load Time
8
HTTP Requests
4
Domains
300 KB
Total Size

Language Analysis

Primary Language

🇵🇹Portuguese
Code: pt
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:pt
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:pt-br
Text Length:1,099 chars
Detector Agreement:100%

Website Classification

Primary Category

finance banking64% confidence
Type: static
Method: ml+structural

All Detected Categories

finance banking
64%
corporate business
49%
government public service
35%
documentation technical
27%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
2142.251.127.94United States
AS15169Google LLC
2216.58.206.74United States
AS15169Google LLC
2172.67.71.13United States
AS13335Cloudflare, Inc.
234.143.77.2United StatesUnknown
84--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T17342A52732F1102165A7D2957EE3DB0F3724A103E6028A647EEC8554CFCDD6189B7B5C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:CXbndkJ4tcqXJQBOnwgTy6aIo/Xl9kmRqxDLLjq0eJiVT1TlMX95sJtcKR28ZJ98:mdZd+pUuWRcwHxhkJpH11qC

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:12271:EA0ejyFkAMkUIhPFNcAZDoCMU0mBsSgFARhCBAIKxiCCBkAYLARwgFCNCIwkUCgJTLScGl2AgSAaDC9iQBSQKUYPKjqKMQxB

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:008ffbffffffffff
Perceptual Hash:b8383a32574f4d4d
Difference Hash:3838a73616920800
Wavelet Hash:0085818383cbffff
Color Hash:#3f783a

Other Hashes

Crop Resistant:393bb63616924800,000030b2b2300095,4100716171602010

Scan History

Scan history not available

Unable to load historical scan data