ScanMalware.com

Security Scan Report: m9s5s6cbs.com

Redirected to:
https://m9s5s6cbs.com/405
Site favicon
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/04765d24-308a-4a27-938b-794e0b2ce9fbDomain and IP registration (RDAP)/api/v1/rdap/04765d24-308a-4a27-938b-794e0b2ce9fbHow often this domain was scanned/api/v1/domain/stats/m9s5s6cbs.comScan history for this domain/api/v1/domain/history/m9s5s6cbs.com?limit=15
This website contacted 15 IPs in 2 countries across 8 domains to perform 137 HTTP transactions. The main domain is m9s5s6cbs.com and was registered 11 months ago.

Submitted URL: https://m9s5s6cbs.com

Effective URL:
https://m9s5s6cbs.com/405
Redirected

AI Security Verdict

Moderate Risk

Confidence: 62%

5
Risk Score

Geo-blocked online gambling portal on an unrelated random-string domain, promising betting sign-up bonuses and routing users via redirects to a region-evasion page. No forms or malware found, but the unlicensed-gambling pattern warrants caution.

Risk Factors (5)
Unlicensed/offshore-style online gambling content with sign-up bonus lure
Unrelated random-string domain presenting a separate brand name (JILIBB2.COM) in title and meta tags
Instruction to change IP region to bypass geo-restriction
Chain of 3 redirects ending on a generic 405 access-restricted page
Off-platform support/contact via Telegram rather than a verifiable operator identity
Safety Factors (5)
No credential, login or payment form on the captured page (verified form facts: 0 forms)
No JavaScript malware or YARA high-precision hits
No Safe Browsing or IDS phishing/malware alerts (IDS entries are informational Telegram DNS/TLS observations)
Domain is approximately 11 months old rather than brand new
No cross-origin credential exfiltration detected
Domain age information unavailable

Details

Page Title

JILIBB2.COM

Scan Type

public

Domain Name Analysis

Within the commercial generic top-level domain (.com), 'm9s5s6cbs.com' is registered while skipping any subdomain. Count 9 characters in 'm9s5s6cbs' split between 0 vowels and six consonants, notching 3 digits. Word splitting yields seven words: m, 9, s, 5, s, 6, cbs. Median word length comes out to one character. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://m9s5s6cbs.com

Page Load Overview

5.45s
Total Load Time
5.2 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:225 chars
Detector Agreement:100%

Website Classification

Primary Category

documentation technical42% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

documentation technical
42%
corporate
25%

Detected Features

OG: website

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
11104.18.26.79Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
9104.18.95.41Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
9163.181.254.192United States
AS24429Zhejiang Taobao Network Co.,Ltd
9149.154.167.99Amsterdam, North Holland, Netherlands
AS62041Telegram Messenger Inc
9142.251.110.95Google · CDNUnited States
AS15169Google LLC
9104.18.11.98Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
9104.16.69.61Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
9142.251.14.94Google · CDNUnited States
AS15169Google LLC
9104.18.27.79Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
9104.18.94.41Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
13715--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1CF036FE7469E14092BDA3201D1C6A8A90B5A925F4C80BA40B3CF6E335F95FC0375B67E

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:b+Sd3Dke4sNt0sWZIuJT/Sh9ZfBDFcjh3ti44suEn9i9WiVQxTGC2ubca08ot:b+4wTtDx/Sx/RCjbcpt

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:39047:A4QuA9BeYRiJQrcYgxkooRJkBFGZMIIfYSC5BANAYQUCADIoAGACETKEkAJBAkQFDVFCI8IkUEdIjQIgvcSwEIVuoSYRFEIh

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00185a1818000000
Perceptual Hash:99d96666268999d9
Difference Hash:0c141010140c0c04
Wavelet Hash:c3cbdbdbd8c0c0c0
Color Hash:#84ac53

Other Hashes

Crop Resistant:0c141010140c0c04

Scan History

Scan history not available

Unable to load historical scan data