Security Scan Report: tg88seru.me

Redirected to:
https://daddy-casino-qbx.buzz/
Site favicon
Submitted: Completed: publiccompleted
This website contacted 8 IPs in 1 country across 6 domains to perform 47 HTTP transactions. The main domain is tg88seru.me and was registered 1 month ago.

Submitted URL: https://tg88seru.me

Effective URL:
https://daddy-casino-qbx.buzz/
Redirected

AI Security Verdict

High Risk

Confidence: 78%

7
Risk Score

Brand-styled 'official TG88' gambling page served from an unrelated .buzz host reached via a 5-day-old domain that carries a corroborated AsyncRAT malware report; no credential form found, but avoid interaction.

Risk Factors (5)
Content-malware (AsyncRAT) threat-intelligence match on the primary scanned domain, corroborated by two independent feeds
Claims to be the official TG88.COM site on a non-official, unrelated domain (brand impersonation)
Cross-domain redirect from a 5-day-old entry domain to an unrelated .buzz host
Unlicensed gambling promotion with deposit/payment instructions and no verifiable operator license
Domain is unranked in Cisco Umbrella and very recently registered
Domain age information unavailable

Details

Page Title

TG88 Daddy ⚜️ Link Truy Cập TG88.COM Chính Thức Tháng10

Scan Type

public

Domain Name Analysis

The domain name 'tg88seru.me' uses the Montenegrin country-code top-level domain (.me) with no subdomain. Its registrable label 'tg88seru' stretches across 8 characters containing two vowels alongside four consonants, plus two digits. Word splitting yields 4 words: tg, 88, s, eru. Median word length comes out to two characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://tg88seru.me

Page Load Overview

7.67s
Total Load Time
5.0 MB
Total Size

Language Analysis

Primary Language

🇻🇳Vietnamese
Code: vi
Confidence:80%
Script:Unknown
Direction:ltr

Detection Details

HTML Lang Attribute:vi
Text Length:4,678 chars
Detector Agreement:100%

Website Classification

Primary Category

entertainment media100% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

entertainment media
100%
gambling betting
100%
corporate business
100%
finance banking
100%
adult content
100%

Detected Features

Search
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
12104.21.60.147Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
5172.67.212.139Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
5188.114.97.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
5172.66.47.61Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
5188.114.96.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
5192.0.77.48San Francisco, California, United States
AS2635Automattic, Inc
5104.21.85.242Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
5172.67.197.200Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
478--

Detected Technologies10

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T16CA3E77200CD1836036F42C9C2997B2DEA9FAD32D75685A0F6FE07985FC2EA115B234D

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:WdJG8CJWdZdypa0VHH2fEMym4pPzN+vp3A8nQaDPQtm8HeZ39J+b0vLB8:g+JUypGfIRpPzN+vpQ8rDoE8+Z39R8

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:102509:YlBrLsQg4gINQBMQQgAFgINFKammAEKCIRCCCBUCqRJCojQIS/YX64gkVgJ2igACKqA6uD6TIpWg1g7ETMQFEJAoAIQASwIA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00ff8999fdffffc3
Perceptual Hash:f81b25066a6a393f
Difference Hash:135a333131062713
Wavelet Hash:009f8999d8e7c7c3
Color Hash:#d22d9b

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data