Security Scan Report: itaubenefisio.com.br

Redirected to:
https://itaubenefisio.com.br/consulte-sua-fatura.php?cartoes=home&id=N...
Submitted: Nov 23, 2025, 11:31:48 PMCompleted: Nov 23, 2025, 11:34:04 PMpubliccompleted
Loading additional data...

Summary

This website contacted 2 IPs in 1 country across 1 domain to perform 37 HTTP transactions. The main domain is itaubenefisio.com.br and was registered NaN years ago.

Submitted URL: https://itaubenefisio.com.br/

Effective URL: https://itaubenefisio.com.br/consulte-sua-fatura.php?cartoes=home&id=NTFkNjlkYzA5YzNmNmVjZWU4MmRiZWI2ZGMxNDYwNzU=&the=thekingRedirected

AI Security Verdict

Confirmed Scam

Confidence: 95%

10
Risk Score

New unranked domain impersonating Itau with credential and payment form; confirmed phishing scam.

Risk Factors
Newly registered domain (<7 days) with login/payment form
Credential harvesting form (password without username)
Payment collection fields on a brand‑impersonating page
Brand impersonation of Itau on an unranked domain
Lack of legitimate brand verification (final URL not official Itau domain)
Domain age information unavailable

Details

Page Title

Fatura | Hipercard

Scan Type

public

Language

🇵🇹

Portuguese

(29% confidence)

Category

finance banking

(62%)

Domain Information

Within the Brazilian country-code top-level domain (.com.br), 'itaubenefisio.com.br' is registered and has no subdomain. The registrable portion 'itaubenefisio' spans 13 characters holding eight vowels versus five consonants. Breaking it apart gives five words: it, aube, ne, fi, sio. Median word length comes out to 2 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://itaubenefisio.com.br/

Page Load Overview

3.06s
Total Load Time
37
HTTP Requests
1
Domains
303 KB
Total Size

Language Analysis

Primary Language

🇵🇹Portuguese
Code: pt
Confidence:29%
Script:Latin
Direction:ltr

Detection Details

Language Code:pt
Detection Confidence:29%
Script Type:Latin
Text Length:427 chars
Detector Agreement:50%

Website Classification

Primary Category

finance banking62% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

finance banking
62%
e-commerce
20%

Detected Features

Payment

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
3789.117.7.149São Paulo, São Paulo, Brazil
AS47583Hostinger International Limited
182a02:4780:13:986:0:28c0:944:2São Paulo, São Paulo, Brazil
AS47583Hostinger International Limited
372--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T187323121189E0A377242406573A0E60F164AF727FD1A48D0F8BDD7A76FC2F7686DE818

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

96:FTOPFVYejS6YQUNMN9+wOB/VAzFUcw3zZwPN0F6qPFKdBTBQ6:FTAFVYCGQKM3+wOUZnwjZweF65

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:11023:QGB9tKAsHDKoBYjR1CAIUQoQAZPRJGlIVgZIFRBMiAphCQBAEDgzMNcJULgpMlkGVACAfEAALgJAOmpBUyB00gMQqahBEKAE

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:003fffffff00003f
Perceptual Hash:9f9f07478f189ac0
Difference Hash:5248383c56280060
Wavelet Hash:003fffffff000002
Color Hash:#783a48

Other Hashes

Crop Resistant:5248383c56280060

Scan History

Scan history not available

Unable to load historical scan data