Security Scan Report: o-especial-roxinhonu-de-natal.s3.us-east-005.backblazeb2.com

Site favicon
Submitted: Dec 8, 2025, 7:14:22 PMCompleted: Dec 8, 2025, 7:15:32 PMpubliccompleted
Loading additional data...

Summary

This website contacted 12 IPs in 1 country across 2 domains to perform 5 HTTP transactions. The main domain is o-especial-roxinhonu-de-natal.s3.us-east-005.backblazeb2.com and was registered NaN years ago.

Submitted URL: https://o-especial-roxinhonu-de-natal.s3.us-east-005.backblazeb2.com/aumento.html

The Cisco Umbrella rank of the primary domain is #13,278 of the top 1 million websites

AI Security Verdict

High Risk

Confidence: 90%

8
Risk Score

High‑risk phishing page impersonating Nubank; do not provide any information.

Risk Factors
Brand impersonation of Nubank on a non‑official cloud storage domain
Deceptive language soliciting personal information for a limit increase
Use of a storage service domain to host a fake Nubank page
Domain age information unavailable

Details

Page Title

Aumento de Limite Nubank

Scan Type

public

Language

🇵🇹

Portuguese

(80% confidence)

Category

finance banking

(88%)

Domain Information

You're looking at domain 'o-especial-roxinhonu-de-natal.s3.us-east-005.backblazeb2.com' on the commercial generic top-level domain (.com), featuring subdomain 'o-especial-roxinhonu-de-natal.s3.us-east-005'. Its registrable label 'backblazeb2' stretches across 11 characters containing 3 vowels alongside seven consonants; bonus characters include 1 digit. Splitting it apart reveals four words: back, blaze, b, 2. Expect 2.5 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://o-especial-roxinhonu-de-natal.s3.us-east-005.backblazeb2.com/aumento.html

Page Load Overview

20.70s
Total Load Time
5
HTTP Requests
2
Domains
432 KB
Total Size

Language Analysis

Primary Language

🇵🇹Portuguese
Code: pt
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:pt
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:pt-br
Text Length:476 chars
Detector Agreement:67%

Website Classification

Primary Category

finance banking88% confidence
Type: static
Method: ml+structural

All Detected Categories

finance banking
88%
government public service
25%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
0149.137.140.9United States
AS40401BACKBLAZE
0149.137.141.9United States
AS40401BACKBLAZE
0149.137.137.254United States
AS40401BACKBLAZE
0104.17.6.3United States
AS13335CLOUDFLARENET
0104.17.5.3United States
AS13335CLOUDFLARENET
0149.137.136.9United States
AS40401BACKBLAZE
02606:4700::6811:603United States
AS13335CLOUDFLARENET
02605:72c0:6fe:b3::b005:1United States
AS40401BACKBLAZE
02605:72c0:6ff:b3::b005:1United States
AS40401BACKBLAZE
02605:72c0:6fc:b3::b005:1United States
AS40401BACKBLAZE
512--

Detected Technologies2

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T14761DB568AE705477847A47C2FB2AB062B60A447D20EC9B83E9C679CCFC99C598D734C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

48:W6dYAk1pUv9zKbDRpIbsE9156tdQ93ctJK9P3o6s2aV4:L6S9Gb9pI4S1ctdQ93ctJ2JsDV4

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:3425:AYAAAAAgBEIyIgAAAEAyAEEAAAKAjAAoABEIBABAABCQBACBAQUAAIARIUBADFACQEUACAhAQAqCAQEAQICEZEQAAAIApECC

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ff00181818000000
Perceptual Hash:dccda3b78cdc8888
Difference Hash:4632333331351d1d
Wavelet Hash:fffb999c99818101
Color Hash:#1f934e

Scan History

Scan history not available

Unable to load historical scan data