Security Scan Report: guazubets.com

Redirected to:
https://rolletto.com/de/static/registration?affid=43707&cxd=43707_2215...
Submitted: Completed: publiccompleted
This website contacted 56 IPs in 5 countries across 45 domains to perform 242 HTTP transactions. The main domain is guazubets.com and was registered 1 week ago.

Submitted URL: https://guazubets.com/go/guazubets

Effective URL:
https://rolletto.com/de/static/registration?affid=43707&cxd=43707_2215...
Redirected

AI Security Verdict

Moderate Risk

Confidence: 70%

4
Risk Score

Affiliate redirect chain leads to a self-branded Rolletto gambling site with account forms; no threat-intel or credential exfiltration evidence, but aggressive bonus marketing and opaque redirects warrant caution.

Risk Factors (3)
Opaque multi-hop cross-domain affiliate tracking redirect chain before the final gambling page
Aggressive gambling bonus marketing claims with high-value welcome offers
Gambling site with account registration and login forms, though these appear to be for the site's own user accounts rather than phishing
Safety Factors (5)
Final page is self-branded Rolletto and its forms post to rolletto.com, matching the brand shown on the page
No threat-intelligence matches against the page or its loaded resources
No hunting rule malware patterns, network IDS alerts, or malicious JavaScript behavior detected
No credential exfiltration detected; cross-origin form activity was assessed as a legitimate SSO/account flow
Gambling login and registration forms are consistent with ordinary user-account functionality
Domain age information unavailable

Details

Page Title

Rolletto Sport & eSports Online Wetten, Live Casino, Spielautomaten

Scan Type

public

Domain Name Analysis

Domain 'guazubets.com' uses the commercial generic top-level domain (.com) with no subdomain. The second-level label 'guazubets' is 9 characters long holding four vowels versus 5 consonants. Segmentation suggests 3 words: gua, zu, bets. Expect three characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

CASINO WELCOME BONUS 550% UP TO 5300€ +900 FREESPINS Sign in Create Account @ Sign inwith Google or Q Username © Email (© Password sweden Vv @ eR x # +6 v € Mobile Number YY Promo Code Optiona...

Page Load Overview

7.44s
Total Load Time
4.5 MB
Total Size

Language Analysis

Primary Language

🇩🇪German
Code: de
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:de
Text Length:24,326 chars
Detector Agreement:60%

Website Classification

Primary Category

social media network46% confidence
Type: spa
Method: ml+structural

All Detected Categories

social media network
46%
entertainment media
43%
gambling betting
43%
blog personal website
42%
documentation technical
37%

Detected Features

Login Form
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
22104.21.40.124Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
4104.21.6.214Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
4194.59.245.95Los Angeles, California, United States
AS34534Fbw Networks SAS
4104.21.69.24Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
4104.26.14.179Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
4104.21.10.96Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
4142.251.110.95Google · CDNUnited States
AS15169Google LLC
4172.67.136.23Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
4104.26.8.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
4192.178.183.97Google · CDNUnited States
AS15169Google LLC
24256--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T117D3C6129246352A566328C0F933EB937947424BD21685B436FC8369FFCDDB20DA36DE

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:amMc4/F4a/XmYS4AscQwExg7/gs0jXCkM0y/Kv+YBC:NMc4/KaPLC

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:134722:CgCSQZBFWJBmwGdCBVSGQBKjJQQwGiBGgJQAIKIKDYQmlBFCYAhCxTQCFgONTuAhQCEkhJ2AChRAAKshipIwTQDBhA6+HIEk

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:073101010139197f
Perceptual Hash:aa379d9c331c8c36
Difference Hash:15e1cdcdcdb131c9
Wavelet Hash:0f7f6701451d017f
Color Hash:N/A

Scan History

Scan history not available

Unable to load historical scan data