Security Scan Report: xn--12caaezc0gqbaa7dvcb0a3a0b7ca0ennlf0d1sua3b6i.net

Site favicon
Submitted: Feb 18, 2026, 9:30:19 AMCompleted: Feb 18, 2026, 9:36:22 AMpubliccompleted
Loading additional data...

Summary

This website contacted 1 IP in 1 country across 1 domain to perform 3 HTTP transactions. The main domain is xn--12caaezc0gqbaa7dvcb0a3a0b7ca0ennlf0d1sua3b6i.net and was registered NaN years ago.

Submitted URL: https://xn--12caaezc0gqbaa7dvcb0a3a0b7ca0ennlf0d1sua3b6i.net/desktop/game/slot/pragmaticplay

AI Security Verdict

Confirmed Scam

Confidence: 90%

10
Risk Score

New domain with hidden login form; likely phishing – do not enter credentials.

Risk Factors
Hidden password field (credential harvesting)
Login form on a brand‑new domain (<30 days)
Unranked, low‑reputation domain
Domain age information unavailable

Details

Page Title

กาแฟนีออนในจักรวาลกระดาษแข็ง.net

Scan Type

public

Language

🇺🇸

English

(47% confidence)

Category

entertainment media

(92%)

Domain Information

The domain 'xn--12caaezc0gqbaa7dvcb0a3a0b7ca0ennlf0d1sua3b6i.net' uses the network infrastructure generic top-level domain (.net) while skipping any subdomain. Its registrable label 'xn--12caaezc0gqbaa7dvcb0a3a0b7ca0ennlf0d1sua3b6i' stretches across 48 characters containing 12 vowels alongside 21 consonants, plus 13 digits and two hyphens. Splitting it apart reveals 30 words: xn, 12, caa, ez, c, 0, gq, baa, 7, dv, cb, 0, a, 3, a, 0, b, 7, ca, 0, en, nlf, 0, d, 1, sua, 3, b, 6, i. Median word length comes out to one character. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://xn--12caaezc0gqbaa7dvcb0a3a0b7ca0ennlf0d1sua3b6i.net/desktop/game/slot/pragmaticplay

Page Load Overview

90.12s
Total Load Time
238
HTTP Requests
5
Domains
424 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:47%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:47%
Script Type:Latin
HTML Lang Attribute:id
Text Length:12,033 chars
Detector Agreement:75%
Language mismatch: Declared as id but detected as en

Website Classification

Primary Category

entertainment media92% confidence
Type: webapp
Method: ml+structural

All Detected Categories

entertainment media
92%
gambling betting
67%
adult content
46%
news media journalism
28%
social_media
25%

Detected Features

Login Form

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
238104.21.75.246United States
AS13335Cloudflare, Inc.
2381--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T18F048F77329A063986558498F05B53099F20B143F506C8BCB9BCBAD9BFDED06107BB78

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:hfQho9PKBb9Js3q9Jzbs6tlg3SBKwdQWgceIszy2bMy8Oldf:GhoC9JSqzzbs6o3Sj3gcrsO2eAx

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:184924:SIaIgoCBAEjI5IBFpc4ATliFKxBqIpEpBqCwN9aYiavTAEiAGWICdxAVNGcioSNYAAlIGSpTlJIIEQUhEJGQkNkBA2wNATSw

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffcfc3c7ffffffff
Perceptual Hash:b333cccccc233333
Difference Hash:00180c1c00000000
Wavelet Hash:ffdfc3c700000000
Color Hash:#af79d2

Other Hashes

Crop Resistant:00180c1c00000000

Scan History

Scan history not available

Unable to load historical scan data