Security Scan Report: changebowl.com

Site favicon
Submitted: Completed: publiccompleted
This website contacted 71 IPs in 7 countries across 45 domains to perform 171 HTTP transactions. The main domain is changebowl.com and was registered 2 weeks ago.

Submitted URL: https://changebowl.com/

AI Security Verdict

Moderate Risk

Confidence: 74%

5
Risk Score

Very new domain promoting illegal online gambling/slot play with redirect-chained SEO spam and scraped Samsung template residue; no credential or payment harvesting was detected, so risk is moderate rather than confirmed phishing.

Risk Factors (4)
Promotes online gambling/slot play, which is illegal in the apparent target market (Indonesian-language 'daftar/login slot77' wording)
Domain registered only 14 days ago and is unranked (very weak prior, not proof of malice on its own)
Eight redirects with four cross-domain hops suggest a cloaking/doorway funnel typical of gambling SEO spam
Reuses scraped third-party (Samsung) markup and account widget references unrelated to its own content
Safety Factors (4)
No credential or payment capture fields on the page
Cross-origin forms target Samsung's legitimate account domain rather than an attacker-controlled endpoint; no credential exfiltration detected
No Indicators of Compromise, no YARA malware patterns, no known-kit roster match, no IDS alerts, no JavaScript behavioral red flags
Site brand ('changebowl'/'CABE77') matches its own domain — self-branding, not impersonation of another entity
Domain age information unavailable

Details

Page Title

Platform Game Online Resmi changebowl slot77 2026 - CABE77

Scan Type

public

Domain Name Analysis

The domain name 'changebowl.com' uses the commercial generic top-level domain (.com) without a subdomain. The registrable portion 'changebowl' spans 10 characters split between three vowels and seven consonants. Breaking it apart gives 2 words: change, bowl. Median word length is 5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://changebowl.com/

Page Load Overview

7.04s
Total Load Time
10.7 MB
Total Size

Language Analysis

Primary Language

🇮🇩Indonesian
Code: id
Confidence:80%
Script:Unknown
Direction:ltr

Detection Details

HTML Lang Attribute:id-ID
Text Length:27,331 chars
Detector Agreement:60%

Website Classification

Primary Category

e-commerce shopping68% confidence
Type: spa
Method: ml+structural

All Detected Categories

e-commerce shopping
68%
gambling betting
63%
technology software
53%
government public service
49%
cryptocurrency blockchain
47%

Detected Features

Search
Products
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
31172.67.189.34Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2104.21.57.45Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
223.36.156.59Akamai · CDNFrankfurt am Main, Hesse, Germany
AS16625Akamai Technologies, Inc.
223.52.180.53Akamai · CDNFrankfurt am Main, Hesse, Germany
AS16625Akamai Technologies, Inc.
223.52.181.12Akamai · CDNFrankfurt am Main, Hesse, Germany
AS16625Akamai Technologies, Inc.
213.226.244.76Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
2172.217.115.4Google · CDNUnited States
AS15169Google LLC
2104.16.79.73Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
223.36.156.195Akamai · CDNFrankfurt am Main, Hesse, Germany
AS16625Akamai Technologies, Inc.
223.36.158.38Akamai · CDNFrankfurt am Main, Hesse, Germany
AS16625Akamai Technologies, Inc.
17171--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T121E4096094F0183701D781C5F795AB0BBFA5E20BE90A84517BAC5FD41FD3EA39A0B62D

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

6144:IudVWLc4kG6A2ApcAJTyayE9JLqWJAlCE0vcjDPlayEMsdTSf0qC:XULc4kG6A2AyAJTyayE9JLqWGlBdY

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:708548:gQgDVgsKAZDE1ZCBhgRBoCQMGDAhQCU7yLUQgDw6kgAIRRAACzTpCJJA2xgFEglBcOCNGBswogERVoweAAZwrakBAw0IggAY

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00dd181818180000
Perceptual Hash:889c73736c66195d
Difference Hash:9131b3b3b3d3c5c5
Wavelet Hash:01ff397979792121
Color Hash:#d279cc

Scan History

Scan history not available

Unable to load historical scan data