Security Scan Report: ciftelrulman.com

Submitted: Completed: publiccompleted
This website contacted 10 IPs in 2 countries across 7 domains to perform 20 HTTP transactions. The main domain is ciftelrulman.com and was registered 6 years ago.

Submitted URL: https://ciftelrulman.com/

AI Security Verdict

High Risk

Confidence: 75%

7
Risk Score

Six-year-old domain repurposed to host a Spanish 'VentrixPro Bancamiga' agency page using a bank's brand on a non-official domain, with a Google Safe Browsing social-engineering detection; no forms present.

Risk Factors (5)
Google Safe Browsing social-engineering (phishing) detection
Established domain repurposed to host unrelated content (content/domain mismatch)
Use of a financial-institution brand name ('Bancamiga') on a non-official domain without disclosure
Contact email and website on a third domain unrelated to the hosting domain
Unranked domain paired with a purported financial brand
Domain age information unavailable

Details

Page Title

VentrixPro Bancamiga | Agencia de Marketing Digital - Maracay

Scan Type

public

Domain Name Analysis

The domain name 'ciftelrulman.com' uses the commercial generic top-level domain (.com). The registrable portion 'ciftelrulman' spans 12 characters containing 4 vowels alongside eight consonants. Segmentation suggests 5 words: c, if, tel, rul, man. Average segment length settles at three characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://ciftelrulman.com/

Page Load Overview

0.62s
Total Load Time
2.8 MB
Total Size

Language Analysis

Primary Language

🇪🇸Spanish
Code: es
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:es
Text Length:1,673 chars
Detector Agreement:60%

Website Classification

Primary Category

finance banking46% confidence
Type: static
Method: ml+structural

All Detected Categories

finance banking
46%
government public service
45%
corporate business
26%
corporate
25%

Detected Features

OG: website

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
2172.67.185.25Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2104.17.208.5Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2104.17.25.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2142.251.20.95Google · CDNUnited States
AS15169Google LLC
2146.75.122.208Fastly · CDNFrankfurt am Main, Hesse, Germany
AS54113Fastly, Inc.
2104.16.79.73Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2142.251.20.94Google · CDNUnited States
AS15169Google LLC
2104.21.59.232Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2104.17.207.5Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2104.17.24.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2010--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1C04232316CF025770283A1D56AA9AF0B6EE2820BCA5F990677FD57C94FC3C42C95362D

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

96:OPCbqFXFq7w9LS4vH2dkjoPXIuY1DSvXruxNqbOoDV0/dG5fyRENTzm5pgqCGLCA:dbAXQ7w9LI4uDvXruyG5mgC25hj

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:12260:0yI0nyRKEAFgwuQQCmBKwMAIF00KCCJgADaAIGqYADhFEmWGIAHmgFkAEwdEGwIcLgioVAKEGTZFaCpjhAACAJBIIRSAjACp

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ff00000000ffffff
Perceptual Hash:bf44b7c01bc09fc1
Difference Hash:66667273b33d183b
Wavelet Hash:ff00000000ffffff
Color Hash:#e0836c

Scan History

Scan history not available

Unable to load historical scan data