Security Report: bj66.bet - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/4250fb8c-79b4-404a-b1d7-0d56998130cb Domain and IP registration (RDAP)/api/v1/rdap/4250fb8c-79b4-404a-b1d7-0d56998130cbHow often this domain was scanned/api/v1/domain/stats/bj66.bet Scan history for this domain/api/v1/domain/history/bj66.bet?limit=15

This website contacted 3 IPs in 3 countries across 3 domains to perform 153 HTTP transactions. The main domain is bj66.bet and was registered 1 year 5 months ago.

Submitted URL: https://bj66.bet

AI Security Verdict

Confirmed Scam

Confidence: 97%

Risk Score

Confirmed malicious: page carries the analyst-vetted ClickFix Win+X/Terminal fake 'Human Verification' overlay with an EtherHiding blockchain loader, on a domain flagged as clearfake malware. Do not visit or paste any command.

Risk Factors (6)

ClickFix fake 'Human Verification' / Cloudflare-branded overlay instructing visitors to open Terminal (Win+X) and paste attacker code

EtherHiding: next-stage payload address fetched from a blockchain smart contract (rpc-mainnet.matic.quiknode.pro, browse-codes-enter.beer, 1rpc.io, drpc.org, tenderly.co)

Content-malware Indicators of Compromise match on the primary domain (multi-source corroborated)

Obfuscated JavaScript hiding known-malicious hosts until decoded

Page impersonates Cloudflare's browser-verification flow to gain trust

Unranked domain (not in Cisco Umbrella top 1M) presenting a gambling/cockfighting brand

Domain age information unavailable

Details

Page Title

BJ66 Đá Gà Trực Tiếp | Đá Gà Trực Tiếp Uy Tín Nhất

Scan Type

public

Favicon Hash

MMH3: -574104198

MD5: 947c82e219aecd1e97d4f515dd29d576

Domain Name Analysis

The domain name 'bj66.bet' uses the .bet top-level domain with no subdomain. The core label 'bj66' covers 4 characters holding 0 vowels versus two consonants; bonus characters include 2 digits. It segments into 2 words: bj, 66. The median word length lands at two characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

7.83s

Total Load Time

4.6 MB

Total Size

Language Analysis

Primary Language

🇻🇳Vietnamese

Code: vi

Confidence:70%

Script:Unknown

Direction:ltr

Detection Details

HTML Lang Attribute:en-US

Text Length:8,672 chars

Detector Agreement:100%

Language mismatch: Declared as en-US but detected as vi

Website Classification

Primary Category

entertainment media99% confidence

Type: spa

Method: ml+structural

All Detected Categories

entertainment media

99%

gambling betting

94%

corporate

25%

Detected Features

OG: website

Schema.org

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
51	38.54.14.232	Ho Chi Minh City, Ho Chi Minh, Vietnam	AS138915Kaopu Cloud HK Limited
51	150.136.141.142Oracle · CLOUD	Ashburn, Virginia, United States	AS31898Oracle Corporation
51	178.16.52.101	Frankfurt am Main, Hesse, Germany	AS202412Omegatech LTD
153	3	-	-