Security Scan Report: vmi3505306.contaboserver.net

Site favicon
Submitted: Completed: publiccompleted
This website contacted 5 IPs in 2 countries across 4 domains to perform 31 HTTP transactions. The main domain is contaboserver.net and was registered 9 years ago.

Submitted URL: https://vmi3505306.contaboserver.net/migzone/fix/sen/rena/details.php/

The Cisco Umbrella rank of the primary domain is #99,438 of the top 1 million websites

AI Security Verdict

Confirmed Scam

Confidence: 94%

10
Risk Score

Fake SEUR parcel-tracking page on a Contabo VPS hostname impersonating the courier and harvesting personal data (name, address, phone) via a PHP form. Classic delivery-failure phishing kit.

Risk Factors (5)
Brand impersonation of SEUR on an unrelated hosting-provider domain
Fake delivery-failure tracking page used as a data-harvesting lure
Form collects personal identifying information (name, address, phone, email)
Form posts to a relative PHP script inside a generic directory path, not to an official SEUR endpoint
Copied SEUR footer/legal links to add false authenticity
Domain age information unavailable

Details

Page Title

SEUR: Envío y transporte de paquetería y mensajería | SEUR

Scan Type

public

Domain Name Analysis

Domain 'vmi3505306.contaboserver.net' uses the network infrastructure generic top-level domain (.net), featuring subdomain 'vmi3505306'. The registrable portion 'contaboserver' spans 13 characters holding 5 vowels versus eight consonants. Word splitting yields 3 words: cont, abo, server. Median word length comes out to four characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://vmi3505306.contaboserver.net/migzone/fix/sen/rena/details.php/

Page Load Overview

1.19s
Total Load Time
572 KB
Total Size

Language Analysis

Primary Language

🇪🇸Spanish
Code: es
Confidence:48%
Script:Latin
Direction:ltr

Detection Details

Text Length:1,335 chars
Detector Agreement:75%

Website Classification

Primary Category

phishing scam44% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

phishing scam
44%
government public service
26%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
7169.58.169.247Lauterbourg, Grand Est, France
AS51167Contabo GmbH
6104.16.180.112Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
6104.17.25.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
6151.101.193.155Fastly · CDNUnited States
AS54113Fastly, Inc.
6104.16.179.112Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
315--

Detected Technologies7

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1E272892040FB95A7146381C59E652B1BAFC5C707DA1A5B09B2ED1BCD1FCBC87CD27A28

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

96:dVcGe9oNi1ksfMMS5SZV2McCTjFxcXvnPCbQ+W/vPkGHkO9AVyD3wcJQHT9xUgUG:deGe9oN+k5FoTngvPl+Qk2HAVc7Kr

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:16410:BcQ7jgCgQCWUADlIpNAeGQKCRQLAGwmkrgEoAkoAA4ELAIUGwWWTGkyJIYgPECNAB0CoAqEolgLIdlghQANIqgF00kjhDBIE

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:3e3f1f1f777f7f00
Perceptual Hash:801741c057975dff
Difference Hash:c0f0b0f4c6e0c0c1
Wavelet Hash:3e1e1e06333f7f00
Color Hash:#931f3c

Other Hashes

Crop Resistant:c0f0b0f4c6e0c0c1

Scan History

Scan history not available

Unable to load historical scan data