Security Scan Report: seur.pass-cargo.com

Redirected to:
https://seur.pass-cargo.com/
Submitted: Completed: publiccompleted
This website contacted 8 IPs in 2 countries across 6 domains to perform 28 HTTP transactions. The main domain is pass-cargo.com and was registered 2 months ago.

Submitted URL: http://seur.pass-cargo.com

Effective URL:
https://seur.pass-cargo.com/
Redirected

AI Security Verdict

High Risk

Confidence: 82%

8
Risk Score

Fake SEUR parcel page on a non-official 71-day-old domain, mixing a missed-delivery smishing lure with an urgency deadline; primary domain flagged as phishing. Avoid entering any data.

Risk Factors (4)
Brand impersonation of SEUR on a non-official domain (seur.pass-cargo.com)
Reported as phishing by threat intelligence (primary domain, single-source) — Indicators of Compromise match
Urgency/deadline pressure and threat of return fees typical of delivery-phishing lures
New domain (71 days) with no reputation, inconsistent with a major courier brand
Domain age information unavailable

Details

Page Title

SEUR: Envío y transporte de paquetería y mensajería | SEUR

Scan Type

public

Domain Name Analysis

The domain 'seur.pass-cargo.com' uses the commercial generic top-level domain (.com) with subdomain 'seur'. Count 10 characters in 'pass-cargo' split between 3 vowels and 6 consonants, plus 1 hyphen. Breaking it apart gives two words: pass, cargo. Median word length is 4.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of http://seur.pass-cargo.com

Page Load Overview

1.99s
Total Load Time
119 KB
Total Size

Language Analysis

Primary Language

🇪🇸Spanish
Code: es
Confidence:43%
Script:Latin
Direction:ltr

Detection Details

Text Length:1,816 chars
Detector Agreement:75%

Website Classification

Primary Category

e-commerce shopping49% confidence
Type: dynamic
Method: ml+structural+ocr_tiebreaker

All Detected Categories

e-commerce shopping
49%
government public service
37%
news media journalism
28%
healthcare medical
25%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
7102.220.160.126Slovenia
AS197769VPS Dedicated LLC
3172.64.147.188Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3192.178.183.95Google · CDNUnited States
AS15169Google LLC
3104.17.207.5Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3104.18.11.207Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3151.101.193.155Fastly · CDNUnited States
AS54113Fastly, Inc.
3104.18.40.68Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3151.101.129.155Fastly · CDNUnited States
AS54113Fastly, Inc.
288--

Detected Technologies4

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T148035121F4A10097345780CCDBAA7E7622B1A227D3589121BCFC5A6C4FC6D2A797B678

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:nGJgEumqIbxxJuG1hsZSY6iLp5cgsroqDlk80u6rwsuYfPdLnCInKBqjyB8FUTnf:nGJgE3pvrUtnZpFUjoWWwTOlGURA

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:38870:BaQsdETDBwihFEIjpLBGhKRwA4AQN9AA27gCMCSQXy2CQgBU2KoHgSEYDAAIUABQUOhEDIIhMwpMCeiwggwCQglEQghBhwpr

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0703030103ffffff
Perceptual Hash:aa23d5dedc80d9c1
Difference Hash:ffffdfff7f7190c0
Wavelet Hash:0701030101ffffff
Color Hash:#6fac53

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data