ScanMalware.com

Security Scan Report: vmi3708922.contaboserver.net

Site favicon
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/7fffaa4f-a368-4f4e-90a9-d62272f9fddeDomain and IP registration (RDAP)/api/v1/rdap/7fffaa4f-a368-4f4e-90a9-d62272f9fddeHow often this domain was scanned/api/v1/domain/stats/vmi3708922.contaboserver.netScan history for this domain/api/v1/domain/history/vmi3708922.contaboserver.net?limit=15
This website contacted 7 IPs in 2 countries across 4 domains to perform 30 HTTP transactions. The main domain is contaboserver.net and was registered 9 years ago.

Submitted URL: https://vmi3708922.contaboserver.net/sd/en/frt/msg.php/

The Cisco Umbrella rank of the primary domain is #99,438 of the top 1 million websites

AI Security Verdict

Safe Website

Confidence: 95%

0
Risk Score

AI analysis skipped: Low-risk scan (score=29) on well-ranked domain #99,438.

Safety Factors (3)
Well-established domain (ranked #99,438)
No forms or interactive credential elements
No IoC, hunting rule, or IDS alerts
Domain age information unavailable

Details

Page Title

SEUR: Envío y transporte de paquetería y mensajería | SEUR

Scan Type

public

Domain Name Analysis

Domain 'vmi3708922.contaboserver.net' uses the network infrastructure generic top-level domain (.net); it also runs on subdomain 'vmi3708922'. The second-level label 'contaboserver' is 13 characters long split between 5 vowels and eight consonants. Splitting it apart reveals 3 words: cont, abo, server. Expect 4 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://vmi3708922.contaboserver.net/sd/en/frt/msg.php/

Page Load Overview

1.38s
Total Load Time
509 KB
Total Size

Language Analysis

Primary Language

🇪🇸Spanish
Code: es
Confidence:46%
Script:Latin
Direction:ltr

Detection Details

Text Length:1,528 chars
Detector Agreement:75%

Website Classification

Primary Category

phishing scam49% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

phishing scam
49%
government public service
40%
blog personal website
35%
technology software
27%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
6144.91.70.171Lauterbourg, Grand Est, France
AS51167Contabo GmbH
4104.16.180.112Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
4104.17.24.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
4151.101.129.155Fastly · CDNUnited States
AS54113Fastly, Inc.
4151.101.65.229Fastly · CDNUnited States
AS54113Fastly, Inc.
4151.101.129.229Fastly · CDNUnited States
AS54113Fastly, Inc.
4151.101.1.155Fastly · CDNUnited States
AS54113Fastly, Inc.
307--

Detected Technologies5

JQueryv3.7.1
100%
Bootstrapv5.3.1
50%
Apache HTTP Server
40%
jsDelivr
20%
jQuery CDN
20%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T12752882140FB95A7145392C69E252A1BAFC5C707DB0A5B49B2FE07CD1FCBC86CD27928

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

96:dVcGe9oN01ksfgMS5SZVhMs2Ry+W/vPkGHyO9bJLNgkvKd:deGe9oN4kdFolMs2M+Qk2ZhvKd

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:13821:3FAEjUgjwwDCARCkZhiVEwKIAMJEPSyhAZAIUEAMx8hGGYNHAkEACA8cHiCoQACXQY0aEgKgFqmgAgoRRIYJgCMhQN0wOicE

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:3e3f1f072f7f7f7f
Perceptual Hash:8015c1c3171ddcff
Difference Hash:e0f0b0bcccc0c080
Wavelet Hash:1c1e1e06063e7e7e
Color Hash:#d2322d

Other Hashes

Crop Resistant:e0f0b0bcccc0c080

Scan History

Scan history not available

Unable to load historical scan data