mass.report
Scan Intelligence Report0/100
high Risk
doacaomaosdobem.com
https://doacaomaosdobem.com/pedro/
IP
172.67.71.175 · Cloudflare, Inc.
Location
Toronto, Canada
Domain Age
65 days
HTTP
200 · 16.3s
SSL
Valid· WE1, Google Trust Services, US
Status
COMPLETED
KB/IOK Matches (0)—
No KB/IOK detections were recorded for this scan.
Vaquinhas Online
Data HarvestingE-Commerce · 4/5/2026
Summary
The site at doacaomaosdobem.com impersonates the legitimate Vaquinhas Online platform. It solicits donations for a child named Pedro, using emotional appeals to encourage users to provide personal and financial information. The domain does not match the official Vaquinhas Online domain, indicating a phishing attempt.
Attack Techniques (3)
Domain impersonation (doacaomaosdobem.com vs. legitimate Vaquinhas Online domain)Emotional manipulation to solicit donationsDynamic form rendering likely via JavaScript for credential capture
Indicators of Compromise (3)
▸Domain: doacaomaosdobem.com
▸Page title: 'Salve vidas através da sua bondade | Vaquinhas Online'
▸External scripts loading from suspicious sources (e.g., tracking.utmify.com.br)
Risk AssessmentUsed in abuse reports
The domain doacaomaosdobem.com is a newly registered site (65 days old) that impersonates the legitimate Vaquinhas Online service. The page title explicitly references Vaquinhas Online, while the domain does not match the official site. Additionally, the site employs emotional manipulation to solicit donations, which is a common tactic in phishing schemes. The presence of numerous external scripts and a recently issued SSL certificate further raises suspicion about the site's intent.
Recommended Action
Suspend Domain
Cross-Reference8
URL Intelligence
Domain Intelligence
IP Intelligence
Public threat feed available — JSON API