Security Scan Report: socolive.cash

Site favicon
Submitted: Completed: publiccompleted
This website contacted 16 IPs in 2 countries across 18 domains to perform 107 HTTP transactions. The main domain is socolive.cash and was registered 6 months ago.

Submitted URL: https://socolive.cash

AI Security Verdict

Confirmed Scam

Confidence: 97%

10
Risk Score

Page carries an analyst-vetted ClickFix fake 'Human Verification' overlay with EtherHiding blockchain loaders; no forms, but confirmed malicious kit and CRITICAL malware IDS alerts.

Risk Factors (5)
Known ClickFix Win+X -> Terminal fake 'Human Verification' overlay injected into the page
Blockchain-contract-based (EtherHiding) payload loader used to evade blocklists
CRITICAL IDS malware alerts for EtherHiding exfiltration
Primary domain socolive.cash reported as 'iclickfix' malware (single-source, unverified)
Unranked domain (not in Cisco Umbrella top 1M) funneling traffic through 4 cross-domain redirects and .pw/.us/.info loaders
Domain age information unavailable

Details

Page Title

Socolive Gfk – Cộng Đồng Xem Trực Tiếp Bóng Đá Socolive Việt Nam

Scan Type

public

Domain Name Analysis

You're looking at domain 'socolive.cash' on the .cash top-level domain without a subdomain. The registrable portion 'socolive' spans 8 characters containing four vowels alongside 4 consonants. Breaking it apart gives 2 words: soco, live. Median word length is four characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://socolive.cash

Page Load Overview

6.77s
Total Load Time
4.3 MB
Total Size

Language Analysis

Primary Language

🇻🇳Vietnamese
Code: vi
Confidence:80%
Script:Unknown
Direction:ltr

Detection Details

HTML Lang Attribute:vi
Text Length:13,131 chars
Detector Agreement:80%

Website Classification

Primary Category

corporate35% confidence
Type: spa
Method: ml+structural

All Detected Categories

corporate
35%
gambling betting
26%
news/blog
20%

Detected Features

Search
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
17188.114.97.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
6188.114.96.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
6104.20.46.180Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
6178.16.52.101Frankfurt am Main, Hesse, Germany
AS202412Omegatech LTD
6172.67.217.88Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
6172.67.161.215Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
6172.67.71.179Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
6185.111.111.156Frankfurt am Main, Hesse, Germany
AS212238Datacamp Limited
674.125.29.95Google · CDNUnited States
AS15169Google LLC
6172.67.177.195Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
10716--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1627472612096017A016F8EE031B9A77D72A6B71AE507E818F3FE02971BDFFB16C50758

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:OWortyBUryG5RbdVHkhKGV4Gz4fTWdodqz7V2RC3nvuCY4iCjSIPCHag:OW5MyG5RZVHkhDV4GSWfVuCSHag

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:363733:VheYYkvuAVuLBSEQoAAYQAAAFgeIj+QIARiWAgyjZAowFAolahJwREIEtIgdAJzpC5AYoRBwl6wyMM2UXIGwF0tKIAQRMMCA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:cfcfc3c3fffffff7
Perceptual Hash:b03993c7c64cc6ce
Difference Hash:1818163600000008
Wavelet Hash:3f0f03030f0fff00
Color Hash:#693a78

Other Hashes

Crop Resistant:1818163600000008

Scan History

Scan history not available

Unable to load historical scan data