Security Report: tubidy.radio.am - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/41ed9459-2cc9-4796-9fa2-49a9df03d5a6 Domain and IP registration (RDAP)/api/v1/rdap/41ed9459-2cc9-4796-9fa2-49a9df03d5a6How often this domain was scanned/api/v1/domain/stats/tubidy.radio.am Scan history for this domain/api/v1/domain/history/tubidy.radio.am?limit=15

This website contacted 7 IPs in 2 countries across 6 domains to perform 49 HTTP transactions. The main domain is radio.am.

Submitted URL: https://tubidy.radio.am

Effective URL:

https://petrotech.za.com/

Redirected

AI Security Verdict

Moderate Risk

Confidence: 68%

Risk Score

Unranked Vietnamese-language gambling doorway claiming to be the 'official 98WIN' link, reached via a redirect from a domain flagged (single source, unverified) for AsyncRAT; no credential form captured, but gambling promotion plus a RAT indicator warrants HIGH_RISK.

Risk Factors (5)

Single-source threat-intel match for AsyncRAT (named malware family) on the entry domain tubidy.radio.am

Promotes an online gambling platform and claims to be the 'official' 98WIN link from an unrelated, unranked domain

Off-site redirection from tubidy.radio.am to petrotech.za.com with unrelated branding

Unranked Cloudflare Pages script hosts loaded by the page alongside the flagged entry host

Search-only form present; no credential or payment fields captured on the page itself

Safety Factors (6)

No password, disguised-password or payment fields in the captured DOM (1 form, a search box)

No JavaScript YARA malware patterns detected

No kit-roster matches and no high-precision native YARA hits

No credential exfiltration or cross-origin form submission detected

Suricata alerts are informational Cloudflare Pages traffic, not malware or phishing signatures

Established domain (10442 days old) with no strong malicious indicators — risk clamped from 7 to 5

Domain age information unavailable

Details

Page Title

98WIN PETROTECH | LINK UY TÍN 98WIN CHÍNH THỨC KHÔNG CHẶN +97K

Scan Type

public

Favicon Hash

MMH3: -915651735

MD5: 1e115626e31e9a2660ef7d38d237df86

Domain Name Analysis

Domain 'tubidy.radio.am' uses the Armenian country-code top-level domain (.am) with subdomain 'tubidy'. The core label 'radio' covers 5 characters split between 3 vowels and two consonants. Segmentation suggests 1 word: radio. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

7.90s

Total Load Time

5.8 MB

Total Size

Language Analysis

Primary Language

🇻🇳Vietnamese

Code: vi

Confidence:80%

Script:Unknown

Direction:ltr

Detection Details

HTML Lang Attribute:vi

Text Length:20,480 chars

Detector Agreement:100%

Website Classification

Primary Category

gambling betting86% confidence

Type: dynamic

Method: ml+structural

All Detected Categories

gambling betting

86%

corporate

35%

Detected Features

OG: website

Schema.org

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
7	188.114.96.3Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
7	206.206.126.207	Singapore, Singapore	AS16276OVH SAS
7	172.66.44.195Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
7	188.114.97.3Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
7	172.66.47.72Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
7	172.66.47.61Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
7	172.66.44.184Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
49	7	-	-