ScanMalware.com

Security Scan Report: aion2.gaming.tools

Site favicon
Submitted: Completed: publiccompleted

AI Security Verdict

Low Risk

Confidence: 68%

3
Risk Score

Old, self-branded gaming server-status site with no credential/payment forms and no threat-intel hits. Heavy ad-tech and a 63-hop cross-domain redirect chain warrant caution, but no concrete malicious signal was found.

Risk Factors (3)
63 redirects detected, 44 of them cross-domain — an ad-churn/redirect-chain signal (+1), not a verdict
Aggressive ad-tech monetisation: consent framework referencing 1223 vendors and numerous advertising/tracking hosts
ML classifier returned 40% phishing/scam and 36% gambling/betting probability (weak, non-specific signal)
Safety Factors (4)
Established 6-year-old domain (registered 2020-01-10)
Self-branding — site's own title and meta match its own domain, not a third-party brand
No credential, password, or payment fields present on the page
No threat-intelligence Indicators of Compromise, no YARA malware, no IDS alerts
Domain age information unavailable

Details

Page Title

Server Status - AION 2 Global

Scan Type

public

Domain Name Analysis

You're looking at domain 'aion2.gaming.tools' on the .tools top-level domain; it also runs on subdomain 'aion2'. Its registrable label 'gaming' stretches across 6 characters containing 2 vowels alongside 4 consonants. Breaking it apart gives 1 word: gaming. Expect 6 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://aion2.gaming.tools/server-status

Page Load Overview

15.09s
Total Load Time
13.0 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:18,323 chars
Detector Agreement:80%

Website Classification

Primary Category

technology software61% confidence
Type: spa
Method: ml+structural

All Detected Categories

technology software
61%
phishing/scam
40%
gambling betting
36%
finance banking
36%
corporate
35%

Detected Features

Search
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
141104.26.7.249Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3104.18.2.78Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3104.26.6.249Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
335.244.144.25Google · CDNKansas City, Missouri, United States
AS396982Google LLC
3185.229.225.235Amsterdam, North Holland, Netherlands
AS41436Kamatera Inc
313.33.187.94Cloudfront · CDNNew York, New York, United States
AS16509Amazon.com, Inc.
3142.251.110.154Google · CDNUnited States
AS15169Google LLC
3143.204.181.33Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
3143.204.173.87Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
3104.20.20.189Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
978280--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T11FF4B710E6A0163F1007478EDE1CE7F2B3AB99C5DB2A1E19CDD8A3194A44C97EC6F15E

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

6144:sKglh82V5skABX1VpNeMuCryhAjuxsneps+6OrSdf0SlfS0ATR9iXBuuGYxcqMix:IYEiR7H

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:748708:kQAGo8RCbogoU7EXUFngEic3WukoCAAECPVoAyRNlApPtApghCEAwgAA8lcSY0DEAdKIhghbATMJDEKJk8QAVSbgL7CyQSAO

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00010101010f0f0f
Perceptual Hash:b24992b74997964e
Difference Hash:d11333330f0e0c2c
Wavelet Hash:00c383c1c3cfcfcf
Color Hash:#d0e06c

Other Hashes

Crop Resistant:655dad9dbd7862a4,d11333330f0e2c2c

Scan History

Scan history not available

Unable to load historical scan data