Security Scan Report: ficos.com.br

Site favicon
Submitted: Completed: publiccompleted
This website contacted 5 IPs in 2 countries across 3 domains to perform 7 HTTP transactions. The main domain is ficos.com.br and was registered 3 years 10 months ago.

Submitted URL: https://ficos.com.br/nt/wrucreu47wwb7cpoywvxqot3/

AI Security Verdict

Confirmed Scam

Confidence: 98%

10
Risk Score

Netflix-branded credential phishing page on ficos.com.br using homoglyph title spoofing and a Telegram exfiltration bot; flagged by Google Safe Browsing. Do not enter credentials.

Risk Factors (5)
Credential-harvesting login form with password field on a non-Netflix domain
Brand impersonation of Netflix with homoglyph-obfuscated page title
Google Safe Browsing Social Engineering verdict
Telegram bot exfiltration channel in page JavaScript
Unranked domain hosting a cloned login page
Domain age information unavailable

Details

Page Title

Nеtfliх Germany - Serien online ansehen, Filme online ansehen

Scan Type

public

Domain Name Analysis

You're looking at domain 'ficos.com.br' on the Brazilian country-code top-level domain (.com.br). The core label 'ficos' covers 5 characters with two vowels and 3 consonants. Segmentation suggests 2 words: fico, s. Median word length is 2.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

HOURS EDTIRAR OMEN mel ADC £/Seced v Anmelden EQ Angemeidet bleiben Brauchen Sie Hilfe? “| A.A a / fh /RD B oy À Haben Sie Netflix noch nie ausprobiert? Jetzt abonnieren. Fragen? Rufen Sie 80 25...

Page Load Overview

2.66s
Total Load Time
490 KB
Total Size

Language Analysis

Primary Language

🇩🇪German
Code: de
Confidence:52%
Script:Latin
Direction:ltr

Detection Details

Text Length:593 chars
Detector Agreement:100%

Website Classification

Primary Category

entertainment media99% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

entertainment media
99%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
3143.208.8.5São Paulo, São Paulo, Brazil
AS264077CLOUDX SERVICOS EM NUVEM LTDA
1151.101.65.155Fastly · CDNUnited States
AS54113Fastly, Inc.
145.57.91.1United States
AS40027Netflix Streaming Services Inc.
1151.101.129.155Fastly · CDNUnited States
AS54113Fastly, Inc.
145.57.90.1United States
AS40027Netflix Streaming Services Inc.
75--

Detected Technologies7

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1DD62E71175B9147B65D3D2AA37E72B843668C0339806C6147AFD875E0F83D82EE276E8

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:P6E3OvMcaeFGpJi24F60o85+jrz09fK+SiKw+IMazw4x5AzrZxojXCq383N:d3uFBpk0ou+jrz09fPKGbx5AzrbGz38d

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:14889:2HDGYwgQbdCGAKF2RGyRFAOgBAzHjgEASAAAcKEkAUBNQj0wJyVA7MBABRUoEUmQAMAEvAiIKbPrDGMQANqgDAHMrZgaIiMK

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:8500fbf1c6e7c100
Perceptual Hash:aacf1bb256e8a115
Difference Hash:6941d2070c8d159b
Wavelet Hash:85b0f3f1e7e7c100
Color Hash:N/A

Other Hashes

Crop Resistant:6941d2070c8e119a

Scan History

Scan history not available

Unable to load historical scan data