Security Report: mapfresiteonline.online - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/a75d77e6-c71c-4710-b7ed-8f81da61215f Domain and IP registration (RDAP)/api/v1/rdap/a75d77e6-c71c-4710-b7ed-8f81da61215fHow often this domain was scanned/api/v1/domain/stats/mapfresiteonline.online Scan history for this domain/api/v1/domain/history/mapfresiteonline.online?limit=15

This website contacted 9 IPs in 3 countries across 7 domains to perform 27 HTTP transactions. The main domain is mapfresiteonline.online and was registered 3 weeks ago.

Submitted URL: https://mapfresiteonline.online

AI Security Verdict

Confirmed Scam

Confidence: 92%

Risk Score

Fake MAPFRE payment portal on a 21-day-old lookalike domain; it collects document and policy details plus email under MAPFRE branding. No official affiliation.

Risk Factors (6)

Impersonation of the MAPFRE insurance brand on a non-official domain

Deceptive hostname combining 'mapfre' and 'siteonline'

Very new domain (21 days old)

Unranked domain with no established reputation while claiming to be a major insurer

Sensitive-data collection form requesting document number, policy number, and email

HIGH network IDS alert: ET DROP Spamhaus DROP Listed Traffic Inbound group 47

Domain age information unavailable

Details

Page Title

MAPFRE — Pagos en línea

Scan Type

public

Favicon Hash

MMH3: 174673311

MD5: b2f88d88c998687c511a9aff9cd1d4a6

Domain Name Analysis

The domain 'mapfresiteonline.online' uses the modern generic top-level domain (.online) without a subdomain. Count 16 characters in 'mapfresiteonline' containing seven vowels alongside 9 consonants. Word splitting yields five words: map, f, re, site, online. The median word length lands at 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

Ye mapfre PAGA DE FORMA SEGURA Y CONFIABLE Datos de ingreso Realiza el pago de tus productos usando tu cuenta bancaria o tarjeta de crédito, TIPO DE IDENTIFICACIÓN * Seleccione .. y NÚMERO DE IDEN...

Page Load Overview

5.20s

Total Load Time

1.4 MB

Total Size

Language Analysis

Primary Language

🇪🇸Spanish

Code: es

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:es

Text Length:385 chars

Detector Agreement:81%

All Detected Languages

🇪🇸es(80%)🇵🇹pt(20%)

Website Classification

Primary Category

e-commerce shopping70% confidence

Type: static

Method: ml+structural

All Detected Categories

e-commerce shopping

70%

finance banking

57%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
8	194.38.20.21	Dnipro, Dnipropetrovsk Oblast, Ukraine	AS48693Rices Privately owned enterprise
7	104.26.14.209Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
3	142.251.14.95Google · CDN	United States	AS15169Google LLC
3	172.67.70.222Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
3	142.251.14.94Google · CDN	United States	AS15169Google LLC
3	13.226.244.116Cloudfront · CDN	United States	AS16509Amazon.com, Inc.
3	44.224.109.250Aws · CLOUD	Boardman, Oregon, United States	AS16509Amazon.com, Inc.
2	13.226.244.12Cloudfront · CDN	United States	AS16509Amazon.com, Inc.
1	146.75.120.176Fastly · CDN	Frankfurt am Main, Hesse, Germany	AS54113Fastly, Inc.
27	9	-	-