ScanMalware.com

Security Scan Report: download-bbva.top

Redirected to:
https://www.bbva.es/personas.html
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/fa686b43-10c3-4983-af2d-2c85bfa97351Domain and IP registration (RDAP)/api/v1/rdap/fa686b43-10c3-4983-af2d-2c85bfa97351How often this domain was scanned/api/v1/domain/stats/download-bbva.topScan history for this domain/api/v1/domain/history/download-bbva.top?limit=15
This website contacted 50 IPs in 3 countries across 27 domains to perform 448 HTTP transactions. The main domain is download-bbva.top and was registered 4 weeks ago.

Submitted URL: https://download-bbva.top

Effective URL:
https://www.bbva.es/personas.html
Redirected

AI Security Verdict

Low Risk

Confidence: 68%

2
Risk Score

Capture entered on the lure-style host download-bbva.top but landed on the genuine www.bbva.es homepage with no credential or payment forms and no malware indicators; only the suspicious entry hostname/TLD warrants mild caution.

Risk Factors (2)
Entry domain is a .top host named 'download-bbva.top', a naming pattern commonly used in lure/malvertising links, even though it resolves to the genuine bank site
Two HIGH-severity Suricata alerts tied to the *.top TLD of the entry domain (generic bad-traffic categories, not content-malware findings)
Safety Factors (4)
Final rendered page is the official BBVA site (www.bbva.es) with authentic Spanish banking content and cookie/consent tooling
No credential, login or payment form fields on the captured page
No Indicators of Compromise, no YARA matches, no IDS malware or phishing alerts naming the page content
Third-party scripts load from ranked, mainstream hosts (OneTrust, DoubleClick, TikTok analytics)
Domain age information unavailable

Details

Page Title

Banco BBVA - Productos financieros para particulares | BBVA

Scan Type

public

Domain Name Analysis

The domain name 'download-bbva.top' uses the .top top-level domain with no subdomain. The second-level label 'download-bbva' is 13 characters long split between 4 vowels and 8 consonants; bonus characters include one hyphen. Tokenizing the label suggests 3 words: download, bbv, a. Average segment length settles at three characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://download-bbva.top

Page Load Overview

4.63s
Total Load Time
5.1 MB
Total Size

Language Analysis

Primary Language

🇪🇸Spanish
Code: es
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:es-ES
Text Length:31,584 chars
Detector Agreement:100%

Website Classification

Primary Category

corporate70% confidence
Type: spa
Method: structural

All Detected Categories

corporate
70%

Detected Features

Search
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
562.23.245.124Akamai · CDNFrankfurt am Main, Hesse, Germany
AS16625Akamai Technologies, Inc.
8188.114.96.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
8146.75.121.91Fastly · CDNFrankfurt am Main, Hesse, Germany
AS54113Fastly, Inc.
8143.204.181.99Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
82.23.244.18Akamai · CDNFrankfurt am Main, Hesse, Germany
AS16625Akamai Technologies, Inc.
8104.18.87.42Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
863.140.62.236Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
8172.64.155.119Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
8142.251.13.97Google · CDNUnited States
AS15169Google LLC
8143.204.173.87Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
44850--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T15CD4C552A4F42226A2D3D368E361AA5AB861940FFD3B8DCCF1CD53744FCABD19D43609

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

6144:TcT45wVrgwVrfefW99VFrJPjXp8/BITlds8sJo+tMYIiW+:wT+wVrgwVrmf4JT1Ydt

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:618146:iEECo28ZQKRwGDOIGFZdQGMBRbhLNTGqQBBPQoIF0kZVBgDomOhaKRCYM0BKoAAF8IlIRQoRJQEDICqLMIqAoQVyFDGsOJDG

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:fbfff7c1f1f1f1f1
Perceptual Hash:ec93916d2c6b93c4
Difference Hash:32362f2727232327
Wavelet Hash:8bd3f18191f1f191
Color Hash:#8479d2

Other Hashes

Crop Resistant:32362f2727232327,f1653edfcbfae2cf

Scan History

Scan history not available

Unable to load historical scan data