Security Scan: Operation Endgame

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/3d5fbd0a-3b5d-48e4-8b5c-2ef80ba50638 Domain and IP registration (RDAP)/api/v1/rdap/3d5fbd0a-3b5d-48e4-8b5c-2ef80ba50638How often this domain was scanned/api/v1/domain/stats/gejajoo7.top Scan history for this domain/api/v1/domain/history/gejajoo7.top?limit=15

This website contacted 1 IP in 1 country across 2 domains to perform 3 HTTP transactions. The main domain is gejajoo7.top and was registered 1 year 1 month ago.

Submitted URL: http://gejajoo7.top/

AI Security Verdict

High Risk

Confidence: 78%

Risk Score

Content-free page on a .top domain whose primary domain and exact URL are flagged as SmokeLoader malware, with HIGH IDS alerts for hostile .top traffic and a ddns.net reference. Avoid.

Risk Factors (5)

Threat intelligence names the primary domain and the full URL as smuggling the SmokeLoader malware family (single-source, unverified — weighted accordingly but directly on the scanned page's own domain/URL)

HIGH-severity IDS alerts for DNS/HTTP traffic to a hostile .top domain

Reference to an external ddns.net dynamic host (opendgame.ddns.net) alongside a content-free page

Near-empty page with a single title and no substantive content, atypical of any genuine destination site

Domain is unranked in Cisco Umbrella with a very low legitimacy score (15/100)

Domain age information unavailable

Details

Page Title

Operation Endgame

Scan Type

public

Favicon Hash

MMH3: 2062012887

MD5: 6910426a598bc0b07dd6ca7c2faf5c22

Domain Name Analysis

The domain name 'gejajoo7.top' uses the .top top-level domain without a subdomain. The registrable portion 'gejajoo7' spans 8 characters split between four vowels and three consonants, plus one digit. It segments into five words: ge, j, a, joo, 7. Median word length is one character. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

0.56s

Total Load Time

1 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:69%

Script:Latin

Direction:ltr

Detection Details

Text Length:62 chars

Detector Agreement:100%

Website Classification

Primary Category

entertainment media69% confidence

Type: static

Method: ml+structural

All Detected Categories

entertainment media

69%

adult content

49%

documentation technical

48%

news media journalism

47%

government public service

39%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
3	188.40.141.211	Falkenstein, Saxony, Germany	AS24940Hetzner Online GmbH
3	1	-	-

Detected Technologies1

Nginxv1.18.0

40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T136E07D6A80F22E1042004A832E803A805F9482670BC40E093A8F1325BF94454D08B1DE

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

6:hNSJL/0GMh63AEdhaA8SETEKVpnv0XVuzuBCcIPyiZTYFr1dtalAmXQGDf:h0qEdgjVpnv0FuOC5PBZTomjvb

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:1:0:ebfef207462c29030b8a06068c8cbf1c

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:N/A

Perceptual Hash:N/A

Difference Hash:N/A

Wavelet Hash:N/A

Color Hash:N/A

Other Hashes

Crop Resistant:N/A

Scan History

Scan history not available

Unable to load historical scan data

Security Scan Report: gejajoo7.top