ScanMalware.com

Security Scan Report: planned.com.br

Site favicon
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/a9dea235-2883-4936-be6a-6eaa49b48042Domain and IP registration (RDAP)/api/v1/rdap/a9dea235-2883-4936-be6a-6eaa49b48042How often this domain was scanned/api/v1/domain/stats/planned.com.brScan history for this domain/api/v1/domain/history/planned.com.br?limit=15
This website contacted 1 IP in 1 country across 1 domain to perform 3 HTTP transactions. The main domain is planned.com.br and was registered 26 years ago.

Submitted URL: https://planned.com.br/SPT/

AI Security Verdict

High Risk

Confidence: 85%

8
Risk Score

Fake 'Spotify – Verification' human-check page hosted on an unrelated, likely compromised Brazilian domain; brand impersonation gateway with no visible credential form yet.

Risk Factors (4)
Impersonation of Spotify brand on an unrelated, non-official domain
Deceptive human-verification gate used to funnel visitors onward
Off-topic deep-directory placement (/SPT/) on an established domain, consistent with a compromised site
Domain absent from Cisco Umbrella rankings despite claiming a major brand
Domain age information unavailable

Details

Page Title

Spotify – Verification

Scan Type

public

Domain Name Analysis

You're looking at domain 'planned.com.br' on the Brazilian country-code top-level domain (.com.br) with no subdomain. Its registrable label 'planned' stretches across 7 characters split between two vowels and five consonants. Tokenizing the label suggests one word: planned. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://planned.com.br/SPT/

Page Load Overview

1.08s
Total Load Time
5 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:233 chars
Detector Agreement:50%

Website Classification

Primary Category

entertainment media74% confidence
Type: static
Method: ml+structural

All Detected Categories

entertainment media
74%
technology software
52%
social media network
35%
adult content
28%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
3216.172.172.172Vinhedo, São Paulo, Brazil
AS31898Oracle Corporation
31--

Detected Technologies1

Apache HTTP Server
40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T19E02D8DA6375464D3443985CAF51AE58272CD017E413CAB43FAE8BB4CF8B294F993E84

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:7sj/G4v954Ri5Wp7u2D0EA9/ozwSoitWiJipJwhVj4eW94av5VyKNKMYlDBK:4eWX5VtNKRBK

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:8704:qIIiV2ImDCUBWitBqCIIkBwegpgAIwbAoFFYBgwIYimPLCYo8GkiEEAgHESEfglSC5AQiXkAmBAMAQbESNxK4oVWgBBFsjJ6

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0000181818180000
Perceptual Hash:cc6633cc66339966
Difference Hash:0810323032320800
Wavelet Hash:1018383838383830
Color Hash:#add279

Other Hashes

Crop Resistant:0810323032320800

Scan History

Scan history not available

Unable to load historical scan data