Security Scan Report: www.jessicaruben.com

Redirected to:
https://dn7752.craftum.io/
Site favicon
Submitted: Completed: publiccompleted
This website contacted 9 IPs in 2 countries across 6 domains to perform 8 HTTP transactions. The main domain is jessicaruben.com and was registered 10 years ago.

Submitted URL: https://www.jessicaruben.com/

Effective URL:
https://dn7752.craftum.io/
Redirected

AI Security Verdict

Confirmed Scam

Confidence: 93%

9
Risk Score

Fake SharePoint document-verification page on a Craftum site-builder subdomain that harvests email passwords and POSTs them to an unrelated external endpoint; matches a known phishing landing pattern.

Risk Factors (5)
Credential collection form (email + password) disguised as a document-verification step
Brand impersonation of SharePoint/Microsoft on a non-Microsoft hosting subdomain
HIGH IDS phishing alert for AJAX XHR credential-POST landing page
Cross-origin POST target game-on.vrisi36.com inconsistent with the page's claimed purpose
Redirect from an unrelated established domain to a free site-builder subdomain
Domain age information unavailable

Details

Page Title

Four(4) Pending File

Scan Type

public

Domain Name Analysis

Within the commercial generic top-level domain (.com), 'www.jessicaruben.com' is registered, featuring subdomain 'www'. The core label 'jessicaruben' covers 12 characters split between five vowels and seven consonants. It segments into 2 words: jessica, ruben. Expect six characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://www.jessicaruben.com/

Page Load Overview

1.29s
Total Load Time
342 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:50%
Script:Latin
Direction:ltr

Detection Details

Text Length:130 chars
Detector Agreement:50%

Website Classification

Primary Category

technology software65% confidence
Type: webapp
Method: ml+structural+ocr_tiebreaker

All Detected Categories

technology software
65%
documentation technical
56%
social media network
55%
cryptocurrency blockchain
38%
phishing scam
31%

Detected Features

Login Form

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
892.255.111.71St Petersburg, St. Petersburg, Russia
AS9123Jsc timeweb
0194.39.123.184Dallas, Texas, United States
AS36454WHG Hosting Services Ltd
0104.18.10.207Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
0142.250.154.95Google · CDNUnited States
AS15169Google LLC
0104.17.123.183Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
092.53.68.16St Petersburg, St. Petersburg, Russia
AS49505JSC Selectel
0104.18.11.207Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
0142.251.14.95Google · CDNUnited States
AS15169Google LLC
0104.17.124.183Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
89--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1E8722B00E9E365D61133C1B52FBFB9143E99440B8908CE447A9C6B9C5F9CF55ACA3BC6

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:tqaUyqNZT2lHpGUaUFyZPkdnLM5s4E+uz4UR5d/mW9KAXjs2pxb1CtoGDH7pGDH2:tqPycybpbnydEl4UtCTsToJXbfz

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:17309:3KMCSS0WMAIIiVoEJDwJRCCg4ZEmwUgJAKsHUAILDFNSRADypQI5YtOiYISEMRIiAOAGRiVQLpxWBTASJOCAGDYviEhoFghF

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:7f08df6767f9391f
Perceptual Hash:a0f01debb6c0dcb4
Difference Hash:b339bccc8cb3eb76
Wavelet Hash:7f00c72767f11117
Color Hash:N/A

Other Hashes

Crop Resistant:b339bccc8cb3eb76

Scan History

Scan history not available

Unable to load historical scan data