Security Scan Report: ficos.com.br

Submitted: Completed: publiccompleted
This website contacted 5 IPs in 2 countries across 3 domains to perform 7 HTTP transactions. The main domain is ficos.com.br and was registered 3 years 10 months ago.

Submitted URL: https://ficos.com.br/nt/2ifr9oyu84quqkfjiq1l59zz/

AI Security Verdict

Confirmed Scam

Confidence: 99%

10
Risk Score

Confirmed Netflix credential-phishing page on unrelated domain ficos.com.br, with a password form, Social Engineering detection, and Telegram exfiltration capability.

Risk Factors (5)
Brand impersonation of Netflix on a non-Netflix domain
Credential-harvesting login form with a password field
Google Safe Browsing Social Engineering detection
Telegram bot token in page script indicating possible credential/data exfiltration
Unranked domain claiming to be a major brand
Domain age information unavailable

Details

Page Title

Nеtfliх Germany - Serien online ansehen, Filme online ansehen

Scan Type

public

Domain Name Analysis

Within the Brazilian country-code top-level domain (.com.br), 'ficos.com.br' is registered with no subdomain. The core label 'ficos' covers 5 characters split between two vowels and 3 consonants. Breaking it apart gives 2 words: fico, s. The median word length lands at 2.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

HOURS EDTIRAR OMEN mel ADC £/Seced v Anmelden EQ Angemeidet bleiben Brauchen Sie Hilfe? “| A.A a / fh /RD B oy À Haben Sie Netflix noch nie ausprobiert? Jetzt abonnieren. Fragen? Rufen Sie 80 25...

Page Load Overview

13.88s
Total Load Time
490 KB
Total Size

Language Analysis

Primary Language

🇩🇪German
Code: de
Confidence:52%
Script:Latin
Direction:ltr

Detection Details

Text Length:593 chars
Detector Agreement:100%

Website Classification

Primary Category

entertainment media99% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

entertainment media
99%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
3143.208.8.5São Paulo, São Paulo, Brazil
AS264077CLOUDX SERVICOS EM NUVEM LTDA
1151.101.65.155Fastly · CDNUnited States
AS54113Fastly, Inc.
145.57.91.1United States
AS40027Netflix Streaming Services Inc.
1151.101.1.155Fastly · CDNUnited States
AS54113Fastly, Inc.
145.57.90.1United States
AS40027Netflix Streaming Services Inc.
75--

Detected Technologies7

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1DD62E71175B9147B65D3D2AA37E72B843668C0339806C6147AFD875E0F83D82EE276E8

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:P6E3OvMcaeFGpJi24F60o85+jrz09fK+SiKw+IMazw4x5AzrZxojXCq383N:d3uFBpk0ou+jrz09fPKGbx5AzrbGz38d

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:14889:2HDGYwgQbdCGAKF2RGyRFAOgBAzHjgEASAAAcKEkAUBNQj0wJyVA7MBABRUoEUmQAMAEvAiIKbPrDGMQANqgDAHMrZgaIiMK

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:8500fbf1c6e7c100
Perceptual Hash:aacf1bb256e8a115
Difference Hash:6941d2070c8d159b
Wavelet Hash:85b0f3f1e7e7c100
Color Hash:N/A

Other Hashes

Crop Resistant:6941d2070c8e119a

Scan History

Scan history not available

Unable to load historical scan data