Security Scan Report: romabelt1492.cam

Site favicon
Submitted: Completed: publiccompleted
This website contacted 18 IPs in 1 country across 13 domains to perform 249 HTTP transactions. The main domain is romabelt1492.cam and was registered 2 weeks ago.

Submitted URL: https://romabelt1492.cam/aviator

AI Security Verdict

High Risk

Confidence: 72%

7
Risk Score

Brand-new .cam domain posing as the official access address for the RomaBet casino brand, with a username/password login and unlicensed gambling content. Avoid entering credentials or depositing funds.

Risk Factors (5)
3-day-old domain on an abusive-risk TLD (.cam) operating a gambling login
Presents itself as another brand's official/current access address on a mismatched, unranked domain
Credential-collecting login form on a brand-new gambling site
Unlicensed online betting/casino content with aggressive bonus and jackpot claims
Password field present with no established reputation or verifiable licensing
Domain age information unavailable

Details

Page Title

RomaBet Güncel Giriş Adresi 2026 - Dünyanın Prestijli Casino Rehberi

Scan Type

public

Domain Name Analysis

Within the .cam top-level domain, 'romabelt1492.cam' is registered and has no subdomain. The second-level label 'romabelt1492' is 12 characters long containing three vowels alongside 5 consonants, along with four digits. It segments into three words: roma, belt, 1492. Average segment length settles at 4 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://romabelt1492.cam/aviator

Page Load Overview

8.62s
Total Load Time
66.4 MB
Total Size

Language Analysis

Primary Language

🇹🇷Turkish
Code: tr
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:tr
Text Length:12,841 chars
Detector Agreement:80%

Website Classification

Primary Category

gambling betting49% confidence
Type: webapp
Method: ml+structural

All Detected Categories

gambling betting
49%
entertainment media
37%
adult content
26%
social_media
25%
corporate
25%

Detected Features

Login Form
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
28104.21.25.75Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
13142.251.110.97Google · CDNUnited States
AS15169Google LLC
13104.17.24.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
13151.101.65.155Fastly · CDNUnited States
AS54113Fastly, Inc.
13104.17.207.5Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
13104.18.95.41Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
13142.250.154.95Google · CDNUnited States
AS15169Google LLC
13216.239.34.36Google · CDNUnited States
AS15169Google LLC
13142.251.127.155Google · CDNUnited States
AS15169Google LLC
13142.251.110.94Google · CDNUnited States
AS15169Google LLC
24918--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T13EE47414A9F42113A1B3D290FAA17F466FC4E213C0091A64F7ADAA718FC7C667D639DC

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

12288:X/UpnZMQYenclgkBhRGSf9G1XaMb8Yry2gS3hjyO5ZSqqFd/dInrI:X/UpnZMQYem5GSf9G1XaMbxngWjLZSqM

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:694896:VIFAFwB94IeEg0aSAkSDoCo5gNaw+IIgFgoQkSANsgIBMKEgAIMBAEcBBNqyUkKiGAAXJMpAQYISwS4BnsCfgBcNJwQNLAEF

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:183c3c1c181c1800
Perceptual Hash:99cd673232309e6d
Difference Hash:717171b170717078
Wavelet Hash:3c3c3c3c3c3c3c3c
Color Hash:#2dd298

Scan History

Scan history not available

Unable to load historical scan data