ScanMalware.com

Security Scan Report: racoesguber.com.br

Redirected to:
blob:https://etamos.com/9b72812b-f9d7-4c63-835a-04d9e59471bb
Site favicon
Submitted: Aug 6, 2026, 1:26:48 AMCompleted: Aug 6, 2026, 1:28:06 AMpubliccompleted
Loading additional data...

Summary

This website contacted 5 IPs in 3 countries across 5 domains to perform 6 HTTP transactions. The main domain is and was registered NaN years ago.

Submitted URL: https://racoesguber.com.br/wp-content/plugins/carrom/bim.html

Effective URL: blob:https://etamos.com/9b72812b-f9d7-4c63-835a-04d9e59471bbRedirected

AI Security Verdict

Low Risk

Confidence: 92%

3
Risk Score

The site impersonates Capital One, collects credentials and sensitive data, and redirects to a blob URL – confirmed phishing scam.

Risk Factors
Brand impersonation of a major financial institution
Credential harvesting forms (username/email + password)
Unranked domain with no reputation
Redirect to a blob URL on a different domain
Multiple sensitive data fields (SSN, credit card, billing info)
Safety Factors
Top-ranked domain (Cisco Umbrella #0, 6232 days old) with no strong malicious indicators — a login form on a household-name site is normal; risk clamped from 9 to 3
Domain age information unavailable

Details

Page Title

Sign In

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

finance banking

(55%)

Domain Information

Within the Brazilian country-code top-level domain (.com.br), 'racoesguber.com.br' is registered and has no subdomain. The core label 'racoesguber' covers 11 characters with 5 vowels and six consonants. Segmentation suggests four words: ra, coe, sg, uber. The median word length lands at 2.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://racoesguber.com.br/wp-content/plugins/carrom/bim.html

Page Load Overview

2.00s
Total Load Time
6
HTTP Requests
5
Domains
56 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en
Text Length:1,461 chars
Detector Agreement:67%

Website Classification

Primary Category

finance banking55% confidence
Type: webapp
Method: ml+structural

All Detected Categories

finance banking
55%
government public service
40%
documentation technical
37%
corporate business
33%
adult content
31%

Detected Features

Login Form

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
2191.252.86.25Brazil
AS27715Locaweb Servicos de Internet S/A
1208.91.198.171United States
AS46606Unified Layer
163.176.8.218Aws · CLOUDFrankfurt am Main, Hesse, Germany
AS16509Amazon.com, Inc.
12.16.204.142Hamburg, Free and Hanseatic City of Hamburg, Germany
AS20940Akamai International B.V.
1172.217.119.4Google · CDNUnited States
AS15169Google LLC
65--

Page Statistics

6
Requests
5
Unique Domains
57.3 KB
Total Size

Detected Technologies3

PasswordField
100%
Plesk
40%
Microsoft ASP.NET
40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T165436536619341BA9CB3CAC857EB2A463E849887E0C9D12477AC9AD44F838D5D47D3DC

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:s7FSF3FuWFzF+fs8utovnh8utovWX9KTHLrCt1WtjL/plyA7qvE6mw:GQl0WxMTvCvP3Ct1WtjLRlyA7q86mw

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:59201:wQCB2JQIwRAgU8ACgtQRQ2wAKgEYVjSESEAGeQ7nCoAIOAoZmyDEMEoDBvCcrAmjsWQAQGRyMCIhApEpkALqAKKABQ4pAqSR

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:7fa5bde7c3ffcfff
Perceptual Hash:b3cbcc27639c8931
Difference Hash:e968704c4d2a2c00
Wavelet Hash:7f373c2c0424df00
Color Hash:#39862d

Other Hashes

Crop Resistant:e968704c4d2a2c00

Scan History

Scan history not available

Unable to load historical scan data