Security Scan Report: www.portalerivenditori-mymooney.it

Site favicon
Submitted: Completed: publiccompleted
This website contacted 9 IPs in 2 countries across 4 domains to perform 22 HTTP transactions. The main domain is portalerivenditori-mymooney.it and was registered 1 week ago.

Submitted URL: https://www.portalerivenditori-mymooney.it

AI Security Verdict

Confirmed Scam

Confidence: 88%

9
Risk Score

Lookalike 'My Mooney' portal on a 2-day-old webnode-hosted domain impersonating the Italian Mooney brand and collecting User ID / password credentials — classic credential phishing.

Risk Factors (5)
Brand impersonation of Mooney on a non-official, hyphenated lookalike domain
Credential-collecting login form (User ID + password-labelled field) on a 2-day-old domain
Domain age 2 days (CRITICAL risk category) with no reputation history
Free web hosting (webnode) with default template placeholder content
Unranked domain presenting itself as a financial services portal
Domain age information unavailable

Details

Page Title

My Mooney

Scan Type

public

Domain Name Analysis

You're looking at domain 'www.portalerivenditori-mymooney.it' on the Italian country-code top-level domain (.it), featuring subdomain 'www'. Count 27 characters in 'portalerivenditori-mymooney' split between eleven vowels and 15 consonants, notching one hyphen. Tokenizing the label suggests seven words: portal, eri, vend, it, ori, my, mooney. Median word length is 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

@ = % 3512296778 mymooney fe Accedi Alla tua area Riservata Passw.. * User ID * lizziamo | cookie per consentire Il corretto funzionamento e la sicurezza del nostro sito web e per offrirti, Accet...

Page Load Overview

9.28s
Total Load Time
622 KB
Total Size

Language Analysis

Primary Language

🇮🇹Italian
Code: it
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:it
Text Length:1,035 chars
Detector Agreement:100%

Website Classification

Primary Category

corporate business95% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

corporate business
95%
blog personal website
37%
technology software
35%

Detected Features

OG: article

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
63.79.173.192Aws · CLOUDFrankfurt am Main, Hesse, Germany
AS16509Amazon.com, Inc.
213.226.247.105Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
2143.204.181.106Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
2142.251.20.94Google · CDNUnited States
AS15169Google LLC
218.185.25.67Aws · CLOUDFrankfurt am Main, Hesse, Germany
AS16509Amazon.com, Inc.
213.226.247.155Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
213.226.247.95Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
213.226.247.7Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
2143.204.181.90Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
229--

Detected Technologies5

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T12E33C67A8024287F93A705B3FC10368E7ABC64A3F6865C50B0FE4A1847CDDC5B6565BE

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:OXh9lkxaqvmoYKsqW+Tvl53ZpIqeHhhi8diWMdvh:Ox9lRoYKs4LlCHi0w

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:52401:ESQaFACaCmVBSkpStQExMXSuaoUCEkDDBJynABtoSAQqQSF9hAtPJAQAB5BKRwFsAIDCtAkAGSAANBwidxVGgoyQhGIHYnLI

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffff8f878f8f8f00
Perceptual Hash:bfc641d844bb1333
Difference Hash:605c583e3e181b1c
Wavelet Hash:bd8f8783878f8f00
Color Hash:N/A

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data