Security Scan: Connectez-vous à votre compte

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/b90fdd09-7f94-4851-bef2-2f845f937380 Domain and IP registration (RDAP)/api/v1/rdap/b90fdd09-7f94-4851-bef2-2f845f937380How often this domain was scanned/api/v1/domain/stats/manacafoz.com.br Scan history for this domain/api/v1/domain/history/manacafoz.com.br?limit=15

This website contacted 4 IPs in 2 countries across 4 domains to perform 9 HTTP transactions. The main domain is manacafoz.com.br and was registered 4 years 8 months ago.

Submitted URL: https://manacafoz.com.br/wp-admin/includes/de/23456768/auth/login.php

AI Security Verdict

Confirmed Scam

Confidence: 97%

Risk Score

Compromised WordPress site hosting a fake PayPal login page that harvests credentials and exfiltrates them via a Telegram bot to DuckDNS endpoints. Do not enter any credentials.

Risk Factors (5)

Brand impersonation of PayPal on a non-PayPal, unranked domain

Credential harvesting form (email + password) presented as PayPal login

Compromised WordPress installation abused to host a phishing kit under /wp-admin/includes/

Telegram bot token in inline JavaScript enabling credential exfiltration to a chat

Dynamic DNS (duckdns.org) exfiltration endpoints with HIGH-severity IDS alerts

Domain age information unavailable

Details

Page Title

Connectez-vous à votre compte

Scan Type

public

Domain Name Analysis

The domain 'manacafoz.com.br' uses the Brazilian country-code top-level domain (.com.br). Its registrable label 'manacafoz' stretches across 9 characters with four vowels and five consonants. Segmentation suggests four words: man, a, caf, oz. The median word length lands at 2.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

PayPal E-mail ou numéro de mobile | Entrez votre mot de passe | Mot de passe oublié ? ou C S'inscrire ) Contactez-nous Confidentalts — Polliquelégale Mises Ajour_ Dans le monde

Page Load Overview

3.15s

Total Load Time

209 KB

Total Size

Language Analysis

Primary Language

🇫🇷French

Code: fr

Confidence:54%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:150 chars

Detector Agreement:100%

Language mismatch: Declared as en but detected as fr

Website Classification

Primary Category

finance banking45% confidence

Type: dynamic

Method: ml+structural+ocr_tiebreaker

All Detected Categories

finance banking

45%

adult content

34%

government public service

33%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
3	177.220.142.21	Curitiba, Paraná, Brazil	AS14868Ligga Telecomunicacoes S.A.
2	104.17.25.14Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	102.165.14.4	Dallas, Texas, United States	AS397423Tier.Net Technologies LLC
2	102.165.14.26	Dallas, Texas, United States	AS397423Tier.Net Technologies LLC
9	4	-	-