Security Report: backdoor.liman3d.com - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/15c99715-237d-4bcf-ac6b-eedee571d2ba Domain and IP registration (RDAP)/api/v1/rdap/15c99715-237d-4bcf-ac6b-eedee571d2ba Certificate Transparency/api/v1/ct/alemran.me How often this domain was scanned/api/v1/domain/stats/backdoor.liman3d.com Scan history for this domain/api/v1/domain/history/backdoor.liman3d.com?limit=15

This website contacted 9 IPs in 1 country across 8 domains to perform 41 HTTP transactions. The main domain is alemran.me and was registered 5 years ago.

Submitted URL: https://backdoor.liman3d.com

Effective URL:

https://www.alemran.me/

Redirected

AI Security Verdict

Low Risk

Confidence: 68%

Risk Score

Illegal Vietnamese gambling promotion (Hay88) reached via a cross-domain redirect from a host flagged once for Remcos malware; no credential forms but anti-analysis JS and unresolved brand claims warrant avoidance.

Risk Factors

Illegal/unlicensed online gambling promotion (Hay88 brand, Vietnam market)

Malware-family (Remcos) threat-intel indicator associated with the entry domain

Unrelated redirect chain ending on a different registrable domain

DevTools / right-click anti-analysis blocking

Unranked, non-reputable final domain hosting a 'Chính Thức' (official) brand claim

Safety Factors

No credential or payment forms (0 password, 0 payment fields; only a search form)

No YARA JavaScript malware patterns detected

No network IDS/Suricata alerts

No cross-origin credential exfiltration detected

No concrete malicious signal (no IoC / YARA / Safe-Browsing / IDS / credential form / brand impersonation) — elevated risk rested on domain age or reputation alone; clamped from 7 to 3

Domain age information unavailable

Details

Page Title

HAY88 - Trang Chủ | Đăng Ký Hay88 Alemran Chính Thức Tặng +100k

Scan Type

public

Favicon Hash

MMH3: -731603340

MD5: b12210293c75fb8e1eaefc09e8c0371e

Domain Name Analysis

Within the commercial generic top-level domain (.com), 'backdoor.liman3d.com' is registered and includes subdomain 'backdoor'. The core label 'liman3d' covers 7 characters holding 2 vowels versus 4 consonants, plus 1 digit. It segments into 3 words: liman, 3, d. Average segment length settles at 1 character. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

90.58s

Total Load Time

414 KB

Total Size

Language Analysis

Primary Language

🇻🇳Vietnamese

Code: vi

Confidence:80%

Script:Unknown

Direction:ltr

Detection Details

HTML Lang Attribute:vi

Text Length:11,928 chars

Detector Agreement:100%

Website Classification

Primary Category

gambling betting100% confidence

Type: dynamic

Method: ml+structural

All Detected Categories

gambling betting

100%

entertainment media

94%

corporate

35%

news/blog

20%

Detected Features

OG: website

Schema.org

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
9	188.114.96.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
4	104.21.12.182Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
4	104.21.16.38Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
4	142.251.13.97Google · CDN	United States	AS15169Google LLC
4	104.21.52.154Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
4	172.67.132.54Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
4	188.114.97.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
4	216.239.34.36Google · CDN	United States	AS15169Google LLC
4	142.251.110.95Google · CDN	United States	AS15169Google LLC
41	9	-	-