Security Scan Report: acueducto-co-com.st

Submitted: Completed: publiccompleted
This website contacted 11 IPs in 2 countries across 7 domains to perform 25 HTTP transactions. The main domain is acueducto-co-com.st and was registered 3 months ago.

Submitted URL: https://acueducto-co-com.st/

AI Security Verdict

High Risk

Confidence: 82%

8
Risk Score

Recent, unranked domain impersonating the EAAB ESP water utility payment portal, complete with bank/QR payment prompts on a non-official .st hostname. Classic brand-impersonation payment phishing shape.

Risk Factors (4)
Brand impersonation of EAAB ESP on a non-official domain
Deceptive hostname using utility-related wording and an unrelated ccTLD
Recently registered (105 days) and unranked domain fronting as a public utility
Payment-oriented interface (bank selection, QR payment, total amount) hosted on the impersonating domain
Domain age information unavailable

Details

Page Title

Pagos por Cuenta Contrato de la EAAB ESP

Scan Type

public

Domain Name Analysis

The domain 'acueducto-co-com.st' uses the .st country-code top-level domain while skipping any subdomain. The registrable portion 'acueducto-co-com' spans 16 characters containing seven vowels alongside seven consonants, plus two hyphens. It segments into six words: a, cue, duc, to, co, com. The median word length lands at 2.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

£2 acueducto OLE OTA Pagos por Cuenta Contrato de la EAAB ESP © Cuenta Contrato Kg Tipo de Deuda Cuenta Contrato Factura de Acueducto, Alcantarillado y Aseo Únicamente Y Verify you are human — cLo...

Page Load Overview

1.38s
Total Load Time
2.1 MB
Total Size

Language Analysis

Primary Language

🇪🇸Spanish
Code: es
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:es
Text Length:2,243 chars
Detector Agreement:100%

Website Classification

Primary Category

finance banking89% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

finance banking
89%
government public service
56%
adult content
44%
corporate business
38%
documentation technical
26%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
545.10.243.99Russia
AS57724Ddos-guard Ltd
2104.17.24.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2104.26.3.143Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2104.18.95.41Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2104.16.79.73Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2142.251.20.95Google · CDNUnited States
AS15169Google LLC
2142.251.110.94Google · CDNUnited States
AS15169Google LLC
2104.26.2.143Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2104.18.94.41Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2142.251.110.95Google · CDNUnited States
AS15169Google LLC
2511--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T149031A19A6F30867682B84D9F7A36E99B968C383CD07C0A4B64C47904FF78A9CD5771C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:UrBFK8hL7SKOJpogl1iSVz5w/X6br8GQc1qIKiJV0L3mhoUv0zy:AFK8hngl1iY1br8GQgqIKOi6V

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:38207:MhYBQmSAgEQEYFUAbQR1gQSZHEFTcG8BWhlMAiFi51Rx6ABgH4QQNZDEyCAaASJA0SJCICQYYmUoAITACAKQAEIqAv8A6gJr

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00ffdbc3ffffffff
Perceptual Hash:be3d151531397945
Difference Hash:1624233b00020000
Wavelet Hash:0081818100000000
Color Hash:N/A

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data