Security Scan Report: hbo77slot.net

Submitted: Completed: publiccompleted
This website contacted 8 IPs in 1 country across 5 domains to perform 29 HTTP transactions. The main domain is hbo77slot.net and was registered 1 month ago.

Submitted URL: https://hbo77slot.net

AI Security Verdict

High Risk

Confidence: 88%

8
Risk Score

Compromised/SEO-spam doorway on a 50-day-old domain carrying a ClearFake malware loader, a malware indicator on the primary domain, and an inline beacon to a .cc host. No credential form, but the injected kit makes the page unsafe to load.

Risk Factors (6)
Analyst-vetted ClearFake malware loader present in page source
Malware IoC on the scanned primary domain
Cross-origin JS reporting to a suspicious .cc host with hostname/URI parameters (cloaking / injected redirector)
Domain 50 days old, unranked in Cisco Umbrella
Page title 'infavto.ru.com' bears no relation to the domain, while Open Graph site name claims 'Open88.com'
Doorway/SEO-spam content mixing gambling brands in several languages, claiming Open88 licensing details on a non-official domain
Domain age information unavailable

Details

Page Title

infavto.ru.com -

Scan Type

public

Domain Name Analysis

Domain 'hbo77slot.net' uses the network infrastructure generic top-level domain (.net) while skipping any subdomain. The registrable portion 'hbo77slot' spans 9 characters with two vowels and 5 consonants; it also includes two digits. Word splitting yields 3 words: hbo, 77, slot. Median word length comes out to 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://hbo77slot.net

Page Load Overview

6.15s
Total Load Time
357 KB
Total Size

Language Analysis

Primary Language

🇻🇳Vietnamese
Code: vi
Confidence:80%
Script:Unknown
Direction:ltr

Detection Details

HTML Lang Attribute:vi
Text Length:3,000 chars
Detector Agreement:50%

Website Classification

Primary Category

entertainment media65% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

entertainment media
65%
gambling betting
61%
healthcare medical
46%
blog personal website
37%
documentation technical
30%

Detected Features

Search
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
8104.21.12.128Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3172.67.152.78Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3142.251.110.97Google · CDNUnited States
AS15169Google LLC
3188.114.97.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3142.251.20.97Google · CDNUnited States
AS15169Google LLC
3188.114.96.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3104.21.58.227Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3216.239.32.36Google · CDNUnited States
AS15169Google LLC
298--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T18A832932A15C0C37862B82DA98B57719B4FA6623DE43C666F2FF22048F81EF6155331D

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:g/yNWOtAW7x6uBIypEkNXlPobdneWv2WutWu0gn40pXaQfD6xMRj3KFJXWKe2mRE:lNNtAW96uBpKkNXlPohnHgnHKQfDqcDs

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:83899:XY1DCABAcwTMJsYkAGwQkQCGhBRIqDR4gAAqJ0FBRMIz0BkBAz5IhCdSAqAqAkIWAhpkITJhCLsQgxAAhRYIPE2YgAJYICoB

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00ff3c3d3d393939
Perceptual Hash:8a36363636367636
Difference Hash:cd51514151515151
Wavelet Hash:003d3d3d3d393939
Color Hash:#931f3c

Scan History

Scan history not available

Unable to load historical scan data