Security Scan Report: hth.com

Redirected to:
https://www.w23gpy.vip:9024/
Site favicon
Submitted: Completed: publiccompleted
This website contacted 10 IPs in 5 countries across 9 domains to perform 368 HTTP transactions. The main domain is hth.com and was registered 30 years ago.

Submitted URL: https://hth.com

Effective URL:
https://www.w23gpy.vip:9024/
Redirected

AI Security Verdict

High Risk

Confidence: 82%

8
Risk Score

Off-domain redirect to an unlicensed Chinese betting portal on a random .vip host that claims Real Madrid partnership and carries a hidden login/password form; treat as illegal gambling, avoid depositing or logging in.

Risk Factors (5)
Off-domain redirect from hth.com to an anonymous .vip host on port 9024, a pattern used to rotate illegal gambling portals
Unlicensed online gambling/betting operation with deposit, withdrawal and betting flows
Unsupported claim of being Real Madrid CF's official Asian regional partner
Hidden password field present in HTML but invisible on screen
Credential form action points to the redirect-target host rather than the entry domain
Domain age information unavailable

Details

Page Title

家马德里足球俱乐部亚洲区域官方合作伙伴    华体会体育官网-皇

Scan Type

public

Domain Name Analysis

Domain 'hth.com' uses the commercial generic top-level domain (.com) with no subdomain. Count 3 characters in 'hth' split between zero vowels and three consonants. It segments into 2 words: h, th. The median word length lands at 1.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://hth.com

Page Load Overview

7.58s
Total Load Time
10.1 MB
Total Size

Language Analysis

Primary Language

🇨🇳Chinese
Code: zh
Confidence:60%
Script:Han
Direction:ltr

Detection Details

Text Length:2,297 chars
Detector Agreement:50%

Website Classification

Primary Category

entertainment media82% confidence
Type: spa
Method: ml+structural

All Detected Categories

entertainment media
82%
gambling betting
59%
adult content
49%
government public service
43%
finance banking
42%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
44206.119.83.37Hong Kong, Hong Kong
AS140227Hong Kong Communications International Co., Limited
3643.251.114.100Australia
AS132825MYTEK TRADING PTY LTD
3614.0.58.130Cdnetworks · CDNBangkok, Bangkok, Thailand
AS54994Meteverse Limited.
363.174.46.99Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
363.174.46.43Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
363.174.46.31Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
363.174.46.51Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
3643.251.112.77Australia
AS132825MYTEK TRADING PTY LTD
3618.66.137.59Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
36162.128.161.72Singapore, Singapore
AS21859Zenlayer Inc
36810--

Detected Technologies4

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T126348E322164F823855756C47076AF0E3BC3D71EC9274AA0FFFDAA9847CDEA04D2A456

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:tVybwBPQXSO548dvcb/Mga3cJ11kSuz5fOJ5mFtrwH9STs:vyMIiO549x1WBk8s

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:233149:IkInqZARGBBAQNN2EpouUDRDQKKAYQRAgnCOAI0YhMAwOEiCIByaAekYDq9aZ4IiFwAFDIBRA0yKRnIAIpBUgoigzCYkUaBk

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Scan History

Scan history not available

Unable to load historical scan data