ScanMalware.com

Security Scan Report: br987.fun

Redirected to:
https://br987.fun/main/inicio
Site favicon
Submitted: Sep 26, 2026, 7:32:58 AMCompleted: Sep 26, 2026, 7:34:08 AMpubliccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/4778ed3a-d57b-412a-ada5-292f82f2b6b4Domain and IP registration (RDAP)/api/v1/rdap/4778ed3a-d57b-412a-ada5-292f82f2b6b4Certificate Transparency/api/v1/ct/br987.funHow often this domain was scanned/api/v1/domain/stats/br987.funScan history for this domain/api/v1/domain/history/br987.fun?limit=15

This website contacted 20 IPs in 3 countries across 15 domains to perform 128 HTTP transactions. The main domain is br987.fun and was registered 22 years ago.

Submitted URL: http://br987.fun/

Effective URL:

https://br987.fun/main/inicio
Redirected

AI Security Verdict

Moderate Risk

Confidence: 62%

5
Risk Score

Very new, unranked Portuguese-language betting/gambling site promoted via Telegram, with no forms, no impersonation, and no malware. Consistent with an unlicensed gambling operation rather than phishing; moderate risk.

Risk Factors (3)
Very new domain (9 days) used for a gambling/betting service
Unlicensed-looking betting operation promoted through Telegram and app-install prompts
Domain not present in Cisco Umbrella top 1M (no established reputation)
Safety Factors (4)
Self-branding: title/meta match the domain's own brand ('br987'), no third-party brand impersonation
No credential, password, or payment forms — no data-harvesting UI detected
No JavaScript malware patterns, no credential exfiltration, no obfuscated JS network sinks
Single threat-intel match is a generic abuse-reputation tag on a third-party Telegram IP, not this page's content; not evidence of malicious content
Domain age information unavailable

Details

Page Title

br987.com

Scan Type

public

Domain Name Analysis

Within the .fun top-level domain, 'br987.fun' is registered without a subdomain. The second-level label 'br987' is 5 characters long split between zero vowels and 2 consonants, notching 3 digits. Splitting it apart reveals 2 words: br, 987. Median word length comes out to 2.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of http://br987.fun/

Page Load Overview

16.29s
Total Load Time
6.7 MB
Total Size

Language Analysis

Primary Language

🇵🇹Portuguese
Code: pt
Confidence:50%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:1,213 chars
Detector Agreement:100%
Language mismatch: Declared as en but detected as pt

Website Classification

Primary Category

entertainment media97% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

entertainment media
97%
corporate
25%

Detected Features

OG: website

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
14188.114.97.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
6104.17.207.5Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
6142.251.110.97Google · CDNUnited States
AS15169Google LLC
6163.181.254.191United States
AS24429Zhejiang Taobao Network Co.,Ltd
6149.154.167.99Amsterdam, North Holland, Netherlands
AS62041Telegram Messenger Inc
6104.26.12.82Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
6157.240.0.6Facebook · CDNFrankfurt am Main, Hesse, Germany
AS32934Facebook, Inc.
6142.251.13.95Google · CDNUnited States
AS15169Google LLC
6104.26.7.183Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
6142.251.110.94Google · CDNUnited States
AS15169Google LLC
12820--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T18AE30111E415583BA673C1D1D161BE0A3172F3CFD519208039BCAA9A5FEBF746A293F2

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:jgwcPTtQRG+Vy8dG6G7uwZgaL/Ib/dEBepj3JIgsILoXt:jgwcPTmR5zOfZga0b/dEBeh5Igzy

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:157244:KjWUSFBHhDQNQGRK+ADAJCYoGggQ0QCCDVTXACIajRikwR/wwCQQRYAgKcEAkUbibLMoDEAoAlzqahGAgghJIgTEBPABgElk

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0000000000003c3c
Perceptual Hash:dc339933983366cc
Difference Hash:4c4c4c4c4c4cb2b2
Wavelet Hash:c0c0c0c0c3c3ffff
Color Hash:#5c2d86

Other Hashes

Crop Resistant:c013130f160d0d00,4c4c4c4c4c4cb2b2

Scan History

Scan history not available

Unable to load historical scan data