Security Scan Report: baanseaview.com

Redirected to:
https://rogotravel.com/red.php?url=https%3A%2F%2Fwww.stay22.com%2Falle...
Submitted: Completed: publiccompleted
This website contacted 3 IPs in 1 country across 5 domains to perform 24 HTTP transactions. The main domain is baanseaview.com and was registered 5 days ago.

Submitted URL: http://baanseaview.com/

Effective URL:
https://rogotravel.com/red.php?url=https%3A%2F%2Fwww.stay22.com%2Falle...
Redirected

AI Security Verdict

Moderate Risk

Confidence: 55%

4
Risk Score

A repurposed hotel domain now bounces visitors through rogotravel.com to a stay22 travel affiliate link behind a reCAPTCHA gate. No forms harvest data and no malware was found, but the destination is not the hotel site users expect.

Risk Factors (3)
Cross-domain redirect to an unrelated affiliate/monetisation gateway rather than the site users believed they were visiting
Repurposed hotel domain used purely as a hop in a redirect chain
Scanned final domain (rogotravel.com) has no established reputation of its own and is not in Cisco Umbrella top 1M
Safety Factors (4)
No credential, login or payment fields present (only a reCAPTCHA response field)
No Indicators of Compromise, no hunting rule malware matches, no IDS alerts, no known malicious kit
No obfuscated JavaScript or credential exfiltration behaviour detected
www.recaptcha.net is Google's reCAPTCHA service domain, and stay22.com is a known travel-booking affiliate platform
Domain age information unavailable

Details

Page Title

Bot Verification

Scan Type

public

Domain Name Analysis

The domain 'baanseaview.com' uses the commercial generic top-level domain (.com). The registrable portion 'baanseaview' spans 11 characters split between six vowels and 5 consonants. Tokenizing the label suggests 3 words: ba, an, seaview. Average segment length settles at two characters. No strong language cues emerged from the frequency lists.

Screenshot

Select all images with a bus Click verify once there are none left. cao

Page Load Overview

0.94s
Total Load Time
1.4 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:65%
Script:Latin
Direction:ltr

Detection Details

Text Length:54 chars
Detector Agreement:100%

Website Classification

Primary Category

documentation technical27% confidence
Type: static
Method: ml+structural+ocr_tiebreaker

All Detected Categories

documentation technical
27%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
8188.114.97.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
8142.251.14.94Google · CDNUnited States
AS15169Google LLC
8188.114.96.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
243--

Detected Technologies2

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T12FB1D8B20D7204149C1382B266F67789A563E303F586A99038FD6324EF8DDF2C583B68

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

96:vrlklWJ9wUmpK7AxGJIi+KhqU8EgjaIOynZgj3i:OlWJ9wUmpK7kGJIKhqUDgR

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:5250:oMoBoAhAZhCkiAIgZgATEGBwQAQhABExCYOAEACwEYASgJFALDogKBAADQAAYAGpBKIyIgYgBYGxA0gRgcgkDHMAAEQCIiDA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:e7e7e7e7e7ffffff
Perceptual Hash:e666998c663399cc
Difference Hash:4d4d4d4d0d000400
Wavelet Hash:04000024273f3f3e
Color Hash:070010001c0

Scan History

Scan history not available

Unable to load historical scan data