Security Scan Report: consqualif.com

Redirected to:
blob:https://mobilette.netrakod.com/992307fc-fb7b-49d8-a845-90f61a7c21...
Submitted: Jan 20, 2026, 12:50:45 PMCompleted: Jan 20, 2026, 12:51:53 PMpubliccompleted
Loading additional data...

Summary

This website contacted 5 IPs in 2 countries across 5 domains to perform 9 HTTP transactions. The main domain is .

Submitted URL: https://consqualif.com/wx.htm

Effective URL: blob:https://mobilette.netrakod.com/992307fc-fb7b-49d8-a845-90f61a7c211dRedirected

AI Security Verdict

High Risk

Confidence: 92%

9
Risk Score

Phishing page impersonating Citibank; do not enter credentials.

Risk Factors
Brand impersonation on a newly‑registered/unranked domain
Disguised password fields (type='text' with password placeholders)
Hidden password fields
Unicode character confusion in form inputs
Credential‑harvesting login form
Domain age information unavailable

Details

Primary Scan Blocked — Fallback Capture Shown

The primary scanner could not load this page (possible bot protection). The screenshot and page details shown were captured by a fallback browser that loaded the page successfully.

Page Title

Sign On to Your Citi Account - Citibank

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

finance banking

(96%)

Domain Information

Domain 'consqualif.com' uses the commercial generic top-level domain (.com) with no subdomain. The second-level label 'consqualif' is 10 characters long containing four vowels alongside six consonants. Breaking it apart gives four words: cons, qu, al, if. Expect 2 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://consqualif.com/wx.htm

Page Load Overview

1.41s
Total Load Time
12
HTTP Requests
5
Domains
207 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en
Text Length:3,282 chars
Detector Agreement:75%

Website Classification

Primary Category

finance banking96% confidence
Type: webapp
Method: ml+structural

All Detected Categories

finance banking
96%
documentation technical
32%
e-commerce
25%

Detected Features

Login Form
Payment

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
4104.17.24.14United States
AS13335CLOUDFLARENET
2108.167.181.190United States
AS19871NETWORK-SOLUTIONS-HOSTING
2185.210.93.237Turkey
AS34828DH Bulut Bilisim Anonim Sirketi
2151.101.194.137United States
AS54113FASTLY
2142.251.141.106United States
AS15169GOOGLE
125--

Detected Technologies7

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T141349E36A9E615AEA4B3C9D053EF2B8A3E406C57C044C42139FCDAE94F97580C9B57F8

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:zB248wjr4+AQgAQY9Jix6oNDLCQIqua/7QidkQdqmrAmh8+dljYOTHrZaIi2U2KL:848B+A5f4J+5NDLCmx/Zxf1HrZaIi2De

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:242068:AJJoMACKEThHlFkFhSDhPgIpJMkAJjagDMSBgACBMGYAGwUIQiQMCQBHg8BFXUASiJpECROIBCPEwSAEHSIgriGjCwhAwmwj

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:fff7f7efe7e70000
Perceptual Hash:e2cc0cb6195bb31d
Difference Hash:cc244d494ccd4d51
Wavelet Hash:fff7e5e0e7430000
Color Hash:#40b7bf

Scan History

Scan history not available

Unable to load historical scan data