Security Scan Report: earn-rewards.cu.ma

Submitted: Sep 18, 2026, 6:44:32 AMCompleted: Sep 18, 2026, 6:44:53 AMpubliccompleted

This website contacted 5 IPs in 1 country across 5 domains to perform 11 HTTP transactions. The main domain is earn-rewards.cu.ma and was registered 4 years 7 months ago.

Submitted URL: https://earn-rewards.cu.ma/?Xpdk6p7FqkZN=

The Cisco Umbrella rank of the primary domain is #949,047 of the top 1 million websites

AI Security Verdict

Low Risk

Confidence: 60%

3
Risk Score

Adult dating page using a fake slide-to-verify gate to funnel visitors to 'nearby profiles'. No forms, no credential or payment harvesting, and no threat-intel or malware hits, but the deceptive gate and mismatched free-subdomain host warrant caution.

Risk Factors
Fake CAPTCHA 'verification' gate used as a funnel rather than a real security check
Mismatch between subdomain name ('earn-rewards') and the adult dating brand displayed ('RedDesire') on a free-subdomain host
External IP-lookup endpoints contacted on page load
Machine-learning classifier flags the page as adult content (73%), typical of dating-funnel traps
Safety Factors
No credential, login, or payment form on the page — nothing is being harvested here
No threat-intelligence matches, no JavaScript malware (YARA) patterns, no known phishing kit
The three Suricata alerts are informational (external IP lookup, ZeroSSL certificate), not phishing or malware signatures
Verdict cited a credential/login form, but DOM analysis found no password field (real or disguised) or payment field, and no other hard signal — credential-phishing framing unsupported; risk adjusted from 4 to 3
Domain age information unavailable

Details

Page Title

Verify — Red Room

Scan Type

public

Domain Name Analysis

The domain 'earn-rewards.cu.ma' uses the Moroccan country-code top-level domain (.ma); it also runs on subdomain 'earn-rewards'. The registrable portion 'cu' spans 2 characters holding one vowel versus 1 consonant. Word splitting yields 1 word: cu. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://earn-rewards.cu.ma/?Xpdk6p7FqkZN=

Page Load Overview

1.26s
Total Load Time
271 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:319 chars
Detector Agreement:50%

Website Classification

Primary Category

adult content73% confidence
Type: static
Method: ml+structural

All Detected Categories

adult content
73%
social media network
28%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
369.164.250.130United States
AS26666Interserver, Inc
2142.251.13.95Google · CDNUnited States
AS15169Google LLC
2142.251.13.94Google · CDNUnited States
AS15169Google LLC
2104.26.9.44Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2172.66.175.107Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
115--

Detected Technologies1

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1831296A28753190AB023C54A1FE79A4E71799007DC07C94D7BCC6788CFC29EAF9A5B5C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:rAuT4j3Pq0WsNte47q3oULdg3dy8PXM5mUXE1bJA870NHWfR3uF5zikYTbDWkvVW:ng3re4O3jKP6mUG7Z3Okg

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:9859:IcKDIV0UMkACEMAyiEEVBDwBATkDsBEVCIkCEQoQroCYEKlOQ1EBdElqAhkRitpIfg8YJqAWAWCEA0L67CyEBCDAbZCLDgAZ

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00123e3f3f340c00
Perceptual Hash:940d736a6993e669
Difference Hash:8ad4f4f6b6addc98
Wavelet Hash:00163f7f7f7e0c08
Color Hash:#5f3a78

Other Hashes

Crop Resistant:8ad4f4f6b6addc98

Scan History

Scan history not available

Unable to load historical scan data