Security Scan Report: gift-shell.cu.ma

Submitted: Completed: publiccompleted
This website contacted 1 IP in 1 country across 1 domain to perform 3 HTTP transactions. The main domain is cu.ma and was registered 11 years ago.

Submitted URL: https://gift-shell.cu.ma/?J3i6Hv6d7Se56c=

The Cisco Umbrella rank of the primary domain is #949,047 of the top 1 million websites

AI Security Verdict

Moderate Risk

Confidence: 80%

5
Risk Score

Fake Shell gift-card page on a free subdomain uses a bogus 'human verification' gate to bait users; no legitimate Shell connection. Avoid and report.

Risk Factors (4)
Impersonation of the Shell brand on a non-official domain
Gift card giveaway + human-verification gate (common reward-scam funnel)
Free subdomain hosting inconsistent with a major brand's official web presence
Verification gate designed to defeat automated phishing detection
Safety Factors (5)
No password, disguised-password or payment fields captured
No Indicators of Compromise matches
No JavaScript malware (hunting rule) or IDS alerts
Base provider domain cu.ma is long-established
Established domain (4209 days old) with no strong malicious indicators — risk clamped from 7 to 5
Domain age information unavailable

Details

Page Title

Shell Gift Card — Human Verification

Scan Type

public

Domain Name Analysis

You're looking at domain 'gift-shell.cu.ma' on the Moroccan country-code top-level domain (.ma); it also runs on subdomain 'gift-shell'. The registrable portion 'cu' spans 2 characters holding 1 vowel versus 1 consonant. Splitting it apart reveals one word: cu. Median word length comes out to 2 characters. No strong language cues emerged from the frequency lists.

Screenshot

@Shell Shell Gift Cald as © Human Verification Please complete this quick check to confirm that you are a human, not an automated program. 8+4=7 | Enter your answer | ‘This vetification helps pr...

Page Load Overview

4.67s
Total Load Time
10 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:286 chars
Detector Agreement:100%

Website Classification

Primary Category

adult content42% confidence
Type: static
Method: ml+structural

All Detected Categories

adult content
42%
healthcare medical
41%
government public service
37%
technology software
34%
documentation technical
29%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
369.164.250.130United States
AS26666Interserver, Inc
31--

Detected Technologies1

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T11F81737281E708167167D0A52AA2A68F3164C40BD10B9714BFEA7374CFC568BCA3738A

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

96:TFKI4SFovrq39sjM0hOp4gpsGmK044jtXPULikj:7pFOrq39sjM0hOOg6Ga44psLikj

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:3941:ASGIDwAEQugkKJJBJAAQEIAQCCIJiIMAAwAkAIQADCQAIBCALgEAIBBgAAggBAAUAAQAAEAhFAACERUACIRASVEEwUgAIAAA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffffe7e7fee6e4fc
Perceptual Hash:f7cc8833992666cc
Difference Hash:10080c0c284c0c30
Wavelet Hash:fee6e4e0e0e0e0f0
Color Hash:N/A

Other Hashes

Crop Resistant:10080c0c284c0c30

Scan History

Scan history not available

Unable to load historical scan data