Security Scan Report: goo.su

Redirected to:
https://vmi3719284.contaboserver.net/paquetes/paquete-s/reparto/repart...
Site favicon
Submitted: Completed: publiccompleted
This website contacted 9 IPs in 3 countries across 6 domains to perform 35 HTTP transactions. The main domain is goo.su and was registered 7 years ago.

Submitted URL: http://goo.su/ES-SEUR26

Effective URL:
https://vmi3719284.contaboserver.net/paquetes/paquete-s/reparto/repart...
Redirected

The Cisco Umbrella rank of the primary domain is #377,454 of the top 1 million websites

AI Security Verdict

High Risk

Confidence: 88%

8
Risk Score

Parcel-tracking lure impersonating SEUR on an unrelated Contabo VPS, using urgency to solicit personal data. Not the real courier site — do not enter details.

Risk Factors (4)
Impersonation of the SEUR courier brand on a domain that does not belong to SEUR
Parcel-tracking phishing lure hosted on a raw Contabo VPS hostname
Urgency and deadline pressure ('7 días', 'podría ser devuelto o extraviado') to force data submission
Obfuscation of the destination through a goo.su shortener redirect chain
Domain age information unavailable

Details

Page Title

SEUR: Envío y transporte de paquetería y mensajería | SEUR

Scan Type

public

Domain Name Analysis

The domain name 'goo.su' uses the .su country-code top-level domain without a subdomain. Count 3 characters in 'goo' holding 2 vowels versus 1 consonant. Splitting it apart reveals 1 word: goo. Median word length is 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of http://goo.su/ES-SEUR26

Page Load Overview

1.64s
Total Load Time
352 KB
Total Size

Language Analysis

Primary Language

🇪🇸Spanish
Code: es
Confidence:46%
Script:Latin
Direction:ltr

Detection Details

Text Length:1,634 chars
Detector Agreement:75%

Website Classification

Primary Category

finance banking33% confidence
Type: dynamic
Method: ml+structural+ocr_tiebreaker

All Detected Categories

finance banking
33%
government public service
32%
corporate business
31%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
11169.58.210.95Lauterbourg, Grand Est, France
AS51167Contabo GmbH
382.202.170.126Russia
AS29182JSC IOT
3104.16.179.112Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3104.17.24.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3151.101.193.155Fastly · CDNUnited States
AS54113Fastly, Inc.
3172.217.208.95Google · CDNUnited States
AS15169Google LLC
3104.16.180.112Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3104.17.25.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3151.101.129.155Fastly · CDNUnited States
AS54113Fastly, Inc.
359--

Detected Technologies5

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T15852992140FB95A7145392C69E252A1BAFC5C707DB0A5B49B2FE07CD1FCBC86CD27928

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

96:dVcGe9oN01ksfgVS5SZVhMf2RO+W/vPkGHyO9bJLNgkvKd:deGe9oN4kdEolMf2c+Qk2ZhvKd

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:13930:3Vw6iVUzQhBIAKWQIiiBEiSMMDLHhK6pAzKGVAIIVthAxxFHAZEjMBoEEDMMwACw4AwgGCDApaqpNBJKQoQYkABbIF0QEgUI

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:fbffffffffff4200
Perceptual Hash:b8c928e94be94bc9
Difference Hash:33b2b22a189e96ed
Wavelet Hash:b9dafedecec60000
Color Hash:#40bf57

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data