Security Scan Report: earn-rewards.cu.ma

Submitted: Completed: publiccompleted
This website contacted 1 IP in 1 country across 1 domain to perform 2 HTTP transactions. The main domain is cu.ma and was registered 11 years ago.

Submitted URL: https://earn-rewards.cu.ma/?jys2JiKxs=

The Cisco Umbrella rank of the primary domain is #949,047 of the top 1 million websites

AI Security Verdict

Moderate Risk

Confidence: 60%

4
Risk Score

No credential harvesting or malware found. A 'Human Verification' gateway on a free cu.ma subdomain whose name mismatches the dating service it claims to gate, consistent with an affiliate/cloaking funnel rather than a legitimate dating site.

Risk Factors (3)
Deceptive verification gate ('Almost there... Human Verification') used to condition access to an unrelated dating service, a common cloaking/funnel pattern
Free subdomain host with domain name mismatched to the claimed service and no identifying operator information
Trust badges ('Safe & Secure', 'Real People', 'Private & Confidential') asserted without any verifiable business legitimacy (legitimacy score 30/100)
Safety Factors (4)
No forms of any kind — no credential, password, email or payment collection observed
No Indicators of Compromise, no hunting rule malware matches, no known malicious kit in the kit roster
No cross-origin credential exfiltration or suspicious JavaScript behavior detected
Underlying cu.ma base domain is long-established (4210 days), though this does not attest to the subdomain's operator
Domain age information unavailable

Details

Page Title

Human Verification

Scan Type

public

Domain Name Analysis

The domain 'earn-rewards.cu.ma' uses the Moroccan country-code top-level domain (.ma); it also runs on subdomain 'earn-rewards'. Count 2 characters in 'cu' with one vowel and 1 consonant. Breaking it apart gives 1 word: cu. No strong language cues emerged from the frequency lists.

Screenshot

CO voveconnecy fAlmosttheress Please complete this quick verification to continue.to our dating sites [Human)Verification) Ta keep our community safey we just need to make sure you're} [what is:...

Page Load Overview

0.71s
Total Load Time
4 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:488 chars
Detector Agreement:100%

Website Classification

Primary Category

adult content40% confidence
Type: static
Method: ml+structural

All Detected Categories

adult content
40%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
269.164.250.130United States
AS26666Interserver, Inc
21--

Detected Technologies1

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1B702739766B30811365B94B52BE79B5B37948443900ED5383FCC634C8FC69E8DA63B9C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:Oa5i61p77O8jBPyfJebOrZcWmNZximZu1+9FH5K3z999DikSYiniqBn:661p7nJIm7EW8j999NSYiniqBn

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:8421:ICDuIQBkkztrlMwpMoAiYsAkWRCAaK1HpIQ1XI1MGFNKE0AEMmQExkFENIUqRBhFEgQAzMCAEUFAxEMIyCYF0iyJF0QEQUaQ

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:58786059011f1f01
Perceptual Hash:88e0668c669ddb37
Difference Hash:b59191b1d5b3b1cd
Wavelet Hash:71797179531f0703
Color Hash:N/A

Other Hashes

Crop Resistant:b59191b1d4b2b0cc

Scan History

Scan history not available

Unable to load historical scan data