ScanMalware.com

Security Scan Report: ndxhewantokek1.lol

Site favicon
Submitted: Feb 23, 2026, 11:05:27 AMCompleted: Feb 23, 2026, 11:06:58 AMpubliccompleted
Loading additional data...

Summary

This website contacted 6 IPs in 3 countries across 6 domains to perform 308 HTTP transactions. The main domain is ndxhewantokek1.lol and was registered NaN years ago.

Submitted URL: https://ndxhewantokek1.lol/desktop/game/slot/lgd

AI Security Verdict

Confirmed Scam

Confidence: 85%

10
Risk Score

New gambling site with login form; high risk – do not provide credentials.

Risk Factors
Very new domain (<30 days)
Credential collection form on a newly registered site
Gambling content on an unranked domain
Unranked domain (low reputation)
Domain age information unavailable

Details

Page Title

TOKEKWIN: Link Daftar &amp; Login Website Tokek win No.1 Terbaik

Scan Type

public

Language

🇮🇩

ID

(80% confidence)

Category

entertainment media

(98%)

Domain Information

Domain 'ndxhewantokek1.lol' uses the .lol top-level domain. The core label 'ndxhewantokek1' covers 14 characters with 4 vowels and 9 consonants, plus one digit. Tokenizing the label suggests 7 words: nd, x, he, want, oke, k, 1. Median word length is 2 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://ndxhewantokek1.lol/desktop/game/slot/lgd

Page Load Overview

12.55s
Total Load Time
236
HTTP Requests
7
Domains
795 KB
Total Size

Language Analysis

Primary Language

🇮🇩Indonesian
Code: id
Confidence:80%
Script:Unknown
Direction:ltr

Detection Details

Language Code:id
Detection Confidence:80%
Script Type:Unknown
HTML Lang Attribute:id
Text Length:5,152 chars
Detector Agreement:40%

Website Classification

Primary Category

entertainment media98% confidence
Type: webapp
Method: ml+structural

All Detected Categories

entertainment media
98%
gambling betting
94%
technology software
66%
adult content
65%
documentation technical
43%

Detected Features

Login Form

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
4123.50.131.150Netherlands
AS20940
3923.53.42.242United States
AS16509
3923.36.162.25Germany
AS13335
3923.50.131.153UnknownUnknown
39188.114.97.3United States
AS13335Cloudflare, Inc.
3965.8.102.99UnknownUnknown
2366--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1C844ED3210F6352302B380E17960AB4BAFC1F607C65A8B84B1FD17E55FD7E96AC13669

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:nCRtx++4jtE+xhrr5auphOUuV9gq6jZ7h1:nCRtx++4jtE+xhf5auphOUuV9gqe

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:259618:IDPDIQzMxgAHFUaEOJDCRCZAkQZgSAAlAaGYHJbkEgCkohS5iNkfgNEQgYe4DRjEDAJIA5QlqAAChEIQno0BDC6MFFEgh6Fc

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:2010fd3d003c3d3d
Perceptual Hash:8a7423772f8ad338
Difference Hash:4de4b17171497969
Wavelet Hash:2030ff7f003c3d3d
Color Hash:#9ae06c

Other Hashes

Crop Resistant:0b8b7be3ab03b3f5,d9c3e12b2b56d69d,d0d2f2b2f1f5d9d9,4df4b17171497169

Scan History

Scan history not available

Unable to load historical scan data