Security Scan: SAP0 Portal

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/abc5e79f-0793-4ae0-95f4-04ef055412d5 Domain and IP registration (RDAP)/api/v1/rdap/abc5e79f-0793-4ae0-95f4-04ef055412d5How often this domain was scanned/api/v1/domain/stats/correiosapool0gin-correiopt.netlify.app Scan history for this domain/api/v1/domain/history/correiosapool0gin-correiopt.netlify.app?limit=15

This website contacted 2 IPs in 1 country across 1 domain to perform 11 HTTP transactions. The main domain is netlify.app and was registered 8 years ago.

Submitted URL: https://correiosapool0gin-correiopt.netlify.app

AI Security Verdict

Confirmed Scam

Confidence: 88%

Risk Score

Fake SAPO login page on a free Netlify subdomain whose hostname squats 'correios' and 'sapo login'. It impersonates the SAPO brand and harvests email/password credentials - do not enter any data.

Risk Factors (4)

Brand impersonation of SAPO on a non-official, typo-squatted hostname

Credential collection (email + password) on a shared/free hosting subdomain

Phishing-style hostname keywords ('correios', 'login', 'sapo') with digit substitution (0 for o)

Unranked domain with unknown subdomain age

Domain age information unavailable

Details

Page Title

SAP0 Portal

Scan Type

public

Favicon Hash

MMH3: -988866767

MD5: 8cc411936b868626610b04b6554c3db9

Domain Name Analysis

Within the application-focused generic top-level domain (.app), 'correiosapool0gin-correiopt.netlify.app' is registered, featuring subdomain 'correiosapool0gin-correiopt'. The registrable portion 'netlify' spans 7 characters holding 2 vowels versus 5 consonants. Splitting it apart reveals three words: net, li, fy. Median word length is 2 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

1.77s

Total Load Time

1.4 MB

Total Size

Language Analysis

Primary Language

🇵🇹Portuguese

Code: pt

Confidence:52%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:96 chars

Detector Agreement:100%

Language mismatch: Declared as en but detected as pt

Website Classification

Primary Category

government public service30% confidence

Type: dynamic

Method: ml+structural

All Detected Categories

government public service

30%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
6	35.157.26.135Aws · CLOUD	Frankfurt am Main, Hesse, Germany	AS16509Amazon.com, Inc.
5	63.176.8.218Aws · CLOUD	Frankfurt am Main, Hesse, Germany	AS16509Amazon.com, Inc.
11	2	-	-