Security Scan Report: earn-rewards.cu.ma

Submitted: Completed: publiccompleted
This website contacted 1 IP in 1 country across 1 domain to perform 2 HTTP transactions. The main domain is cu.ma and was registered 11 years ago.

Submitted URL: https://earn-rewards.cu.ma/?z2maJvwRrp7=

The Cisco Umbrella rank of the primary domain is #949,047 of the top 1 million websites

AI Security Verdict

Moderate Risk

Confidence: 45%

4
Risk Score

Free 'earn-rewards' subdomain whose real content is hidden behind a custom human-verification/redirect gate. No confirmed threat-intel or malware hit, but purpose and destination are unverifiable — treat as suspicious.

Risk Factors (4)
Free/throwaway subdomain (cu.ma) being used for an 'earn-rewards' funnel — a common pattern for reward/redirect scams
Real content is hidden behind a verification gate that auto-redirects, preventing users or scanners from knowing the destination
Free-subdomain hosting means the 11-year parent domain age says nothing about this subdomain's age or operator
Verification wording and 'slide to verify' UI do not match the standard Cloudflare Turnstile challenge, indicating a custom or cloned gate
Safety Factors (4)
No Indicators of Compromise matched against the page or its loaded resources
No JavaScript malware (hunting rule) patterns detected
No cross-origin credential exfiltration or credential-handling behavior observed in the captured session
No phishing/malware network IDS alerts (only an informational certificate observation)
Domain age information unavailable

Details

Page Title

Just a moment...

Scan Type

public

Domain Name Analysis

Domain 'earn-rewards.cu.ma' uses the Moroccan country-code top-level domain (.ma) with subdomain 'earn-rewards'. The second-level label 'cu' is 2 characters long containing one vowel alongside 1 consonant. Breaking it apart gives 1 word: cu. No strong language cues emerged from the frequency lists.

Screenshot

Q “ellen BEFORE. vow COnTMmNue pee Vout = Weyjusuneed tommakersureryOurerareal, ndinota bots wonlytakesraew.secondsl 9 6 Q Boos Jourdan Real people a To keep things safe and special’ Fplease ve...

Page Load Overview

1.23s
Total Load Time
136 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:283 chars
Detector Agreement:100%

Website Classification

Primary Category

healthcare medical62% confidence
Type: static
Method: ml+structural

All Detected Categories

healthcare medical
62%
adult content
47%
blog personal website
30%
documentation technical
27%
news media journalism
25%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
269.164.250.130United States
AS26666Interserver, Inc
21--

Detected Technologies1

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T12A041216181A393E4663AE181192575FB9308287ED17C12BEBEE21DCCFD11BB43267EC

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:h7laAunGGLkJPtWnOrFVnwb97IM7UbGS1vhoTMh8a+ndbpAtK5Koi2648OU8:h7lJ1GAWwwhkOUJ1vyoea+nlpAE/yM

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:189496:iRAB8AVIKShYOwmI7RxKQAoKMTFAlxAYBJSoBQuATCFgpBLE6mCBLxOA0ToXgg5AFAOAiIIskhChAmgLlEBSNnYAEFsp1IsE

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:1819191e3e07161a
Perceptual Hash:8cc86d275635394f
Difference Hash:b33331b4a4b434b6
Wavelet Hash:18191d1e7f171e1e
Color Hash:N/A

Other Hashes

Crop Resistant:b33331b4a4b434b6

Scan History

Scan history not available

Unable to load historical scan data