Security Scan Report: www.kaa.go.ke

Redirected to: https://bw-prm.com/bw-slots/?id=2lp1&p=%2Fregistration%2F

Site favicon
Submitted: Nov 3, 2025, 2:52:45 PMCompleted: Nov 3, 2025, 2:53:38 PMpubliccompleted
Loading additional data...

Summary

This website contacted 34 IPs in 4 countries across 13 domains to perform 198 HTTP transactions. The main domain is bw-prm.com and was registered NaN years ago.

Submitted URL: https://www.kaa.go.ke/corporate1/abea/?s-news-4330939-2025-11-02-former-finnish-prime-minister-sanna-marin-opens-door-to-political-comeback-in-exclusive-interview=

Effective URL: https://bw-prm.com/bw-slots/?id=2lp1&p=%2Fregistration%2FRedirected

AI Security Verdict

High Risk

Confidence: 92%

8
Risk Score

High‑risk phishing site impersonating BETWINNER; do not use.

Risk Factors
Brand impersonation / typosquatting
UNRANKED domain with low reputation
Multiple redirects to unrelated domain
Gambling promotion on a suspicious site
Domain age information unavailable

Details

Page Title

Bookmaker company - get a bonus on 1st deposit!

Scan Type

public

Language

🇺🇸

English

(50% confidence)

Category

entertainment media

(89%)

Domain Information

You're looking at domain 'www.kaa.go.ke' on the Kenyan country-code top-level domain (.go.ke) with subdomain 'www'. The core label 'kaa' covers 3 characters holding two vowels versus one consonant. Word splitting yields two words: ka, a. The median word length lands at 1.5 characters. 'ka' is most common in Hungarian usage. Secondary signals appear in Galician and Portuguese.

Screenshot

Security scan screenshot of https://www.kaa.go.ke/corporate1/abea/?s-news-4330939-2025-11-02-former-finnish-prime-minister-sanna-marin-opens-door-to-political-comeback-in-exclusive-interview=

Page Load Overview

22.64s
Total Load Time
198
HTTP Requests
13
Domains
283 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:50%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:50%
Script Type:Latin
Text Length:995 chars
Detector Agreement:100%

Website Classification

Primary Category

entertainment media89% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

entertainment media
89%
gambling betting
83%
adult content
82%
corporate business
74%
news media journalism
57%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
33104.18.23.70United States
AS13335CLOUDFLARENET
5104.26.7.114United States
AS13335CLOUDFLARENET
523.83.127.76Amsterdam, North Holland, Netherlands
AS7979SERVERS-COM
5172.67.68.55United States
AS13335CLOUDFLARENET
5142.250.185.195United States
AS15169GOOGLE
53.239.183.216Ashburn, Virginia, United States
AS14618AMAZON-AES
5190.2.145.38Naaldwijk, South Holland, Netherlands
AS49981WorldStream B.V.
5172.67.148.11United States
AS13335CLOUDFLARENET
5104.26.6.114United States
AS13335CLOUDFLARENET
5104.18.22.70United States
AS13335CLOUDFLARENET
19834--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1F6B274B2C50069370653A4D8E5B12B6FB1E7C74CCD5B848097ED43C517DADF18E6A8A8

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:HygywOCGW5x+y/ERyebF8IQb+HKxDSF5QdF0nCO/CoMF5RdF0nDO/DX3Kjwj:eF5QdF0nvkF5RdF0nmGE

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:24600:hwUCKAIcEETMAkQAhorgRYLUDwA0CAATxrJdBBYADkQTJ4iC1BzLyydi+nxxDJgUwFITAFgJGIcLZVIAuAGImBWIAAwVwQGE

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0000000000000000
Perceptual Hash:9922668899226688
Difference Hash:0000001010000000
Wavelet Hash:0000001838380000
Color Hash:#bf40b7

Other Hashes

Crop Resistant:0000001010000000

Scan History

Scan history not available

Unable to load historical scan data