Security Scan Report: bonanzaj3pe.online

Site favicon
Submitted: Completed: publiccompleted
This website contacted 8 IPs in 1 country across 5 domains to perform 39 HTTP transactions. The main domain is bonanzaj3pe.online and was registered 10 months ago.

Submitted URL: https://bonanzaj3pe.online

AI Security Verdict

Confirmed Scam

Confidence: 96%

10
Risk Score

Gambling page disguising a fake Cloudflare CAPTCHA that tells users to paste PowerShell commands into a terminal; CRITICAL EtherHiding malware IDS alerts and a multi-feed malware threat-intel match. Do not interact.

Risk Factors (6)
Fake CAPTCHA social engineering that coerces users into pasting attacker-supplied commands into PowerShell/terminal
CRITICAL network IDS malware alerts (EtherHiding exfiltration) tied to the scanned host
Multi-feed malware threat-intel match on the primary domain (iclickfix)
Unlicensed online gambling content with off-domain 'official login' redirect to daftaraja.click
Third-party resource data-seed-prebsc-1-s1.bnbchain.org (BSC testnet seed) flagged for Vidar malware, consistent with EtherHiding abuse
Impersonation of Cloudflare's security-check UI to disguise the lure
Domain age information unavailable

Details

Page Title

SLOT BONANZA : Link Situs SLOT GACOR Gampang MAXWIN Dan Terpercaya 2026

Scan Type

public

Domain Name Analysis

The domain name 'bonanzaj3pe.online' uses the modern generic top-level domain (.online) while skipping any subdomain. Count 11 characters in 'bonanzaj3pe' containing four vowels alongside six consonants; it also includes one digit. Word splitting yields four words: bonanza, j, 3, pe. Median word length is 1.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

LINK SITUS SLq DAFTAR SLOT GACOR LOGIN SITUS RESMI 2025 + SLOT GACOR + All Rights Reserved

Page Load Overview

0.76s
Total Load Time
2.1 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-ID
Text Length:1,089 chars
Detector Agreement:50%

Website Classification

Primary Category

gambling betting76% confidence
Type: static
Method: ml+structural

All Detected Categories

gambling betting
76%
technology software
73%
documentation technical
48%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
11172.67.192.102Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
4142.251.20.132Google · CDNUnited States
AS15169Google LLC
4104.21.81.250Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
4142.251.110.132Google · CDNUnited States
AS15169Google LLC
43.33.155.121Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
434.111.175.102Google · CDNKansas City, Missouri, United States
AS396982Google LLC
4172.67.142.245Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
415.197.152.159Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
398--

Detected Technologies5

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T188E27522A94A619C5207833555F1F63E3C39C907A6720D79F50D2BA8CF4AF45BE3714E

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:dWk5F4g5A4WR2vAmZpD1aFznrSWK9Ekyl+p:dZ5F4g5A4WR2vwFTrXKdv

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:31633:BYAoCmgDBpE9CokgxYEBAqBBRKACE+DBECJiEGQnolsOgiU6EQAfI4Jx4xIuAnFKRCmEFQQkKAgAUQjQJgQmcwQAYYoCARVQ

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0018181818180000
Perceptual Hash:cccc3333993366cc
Difference Hash:04b2b2b2b2b20430
Wavelet Hash:ff181818ffff1800
Color Hash:N/A

Scan History

Scan history not available

Unable to load historical scan data