ScanMalware.com

Security Scan Report: vmi3505306.contaboserver.net

Site favicon
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/c290ea1e-86cb-452f-a47e-4d50f93e9ec9Domain and IP registration (RDAP)/api/v1/rdap/c290ea1e-86cb-452f-a47e-4d50f93e9ec9How often this domain was scanned/api/v1/domain/stats/vmi3505306.contaboserver.netScan history for this domain/api/v1/domain/history/vmi3505306.contaboserver.net?limit=15
This website contacted 7 IPs in 2 countries across 5 domains to perform 34 HTTP transactions. The main domain is contaboserver.net and was registered 9 years ago.

Submitted URL: https://vmi3505306.contaboserver.net/caja/reus/sen/fajo/msg.php

The Cisco Umbrella rank of the primary domain is #99,438 of the top 1 million websites

AI Security Verdict

Safe Website

Confidence: 95%

0
Risk Score

AI analysis skipped: Low-risk scan (score=29) on well-ranked domain #99,438.

Safety Factors (3)
Well-established domain (ranked #99,438)
No forms or interactive credential elements
No IoC, hunting rule, or IDS alerts
Domain age information unavailable

Details

Page Title

SEUR: Envío y transporte de paquetería y mensajería | SEUR

Scan Type

public

Domain Name Analysis

The domain 'vmi3505306.contaboserver.net' uses the network infrastructure generic top-level domain (.net) with subdomain 'vmi3505306'. Count 13 characters in 'contaboserver' holding 5 vowels versus 8 consonants. Segmentation suggests three words: cont, abo, server. Median word length comes out to 4 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://vmi3505306.contaboserver.net/caja/reus/sen/fajo/msg.php

Page Load Overview

5.24s
Total Load Time
350 KB
Total Size

Language Analysis

Primary Language

🇪🇸Spanish
Code: es
Confidence:46%
Script:Latin
Direction:ltr

Detection Details

Text Length:1,529 chars
Detector Agreement:75%

Website Classification

Primary Category

phishing scam50% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

phishing scam
50%
government public service
42%
blog personal website
34%
technology software
32%
corporate business
25%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
10169.58.169.247Lauterbourg, Grand Est, France
AS51167Contabo GmbH
4104.16.179.112Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
4104.17.24.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
4151.101.193.155Fastly · CDNUnited States
AS54113Fastly, Inc.
4142.251.110.95Google · CDNUnited States
AS15169Google LLC
4104.16.180.112Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
4151.101.65.155Fastly · CDNUnited States
AS54113Fastly, Inc.
347--

Detected Technologies5

JQueryv3.7.1
100%
Bootstrapv5.3.1
50%
Apache HTTP Server
40%
jsDelivr
20%
jQuery CDN
20%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1D652782140FB95A7145392C69E252A1BAFC5C707DB0A5B49B2FE07CD1FCBC86CD27928

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

96:dVcGe9oN01ksfMMS5SZVhMs2Rv+W/vPkGHyO9bJLNgkvKd:deGe9oN4k5FolMs2x+Qk2ZhvKd

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:13822:n9BpTFkmykQwAosJpog1UgAKJQKVCS+gxRMBAgAAEolLIQFi0IbBEEoNAAgEEiYAQVSAEIVMBijg0pgxTBaBYoQXU0QRSsQg

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:fbffffffffff4200
Perceptual Hash:b8c928e94be94bc9
Difference Hash:33b2b22a589696ed
Wavelet Hash:b9dafedecec60000
Color Hash:#d27985

Other Hashes

Crop Resistant:33b2b22a589696ed,4285a1acccd4ed6c

Scan History

Scan history not available

Unable to load historical scan data