Security Scan: Lottovip เว็บหวยอันดับ 1 ครบวงจร ลิขสิทธ์แท้

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/5a3cb7c3-edfb-480e-8ec0-32bf1d5dbbca Domain and IP registration (RDAP)/api/v1/rdap/5a3cb7c3-edfb-480e-8ec0-32bf1d5dbbcaHow often this domain was scanned/api/v1/domain/stats/lottovip.lease Scan history for this domain/api/v1/domain/history/lottovip.lease?limit=15

This website contacted 10 IPs in 2 countries across 7 domains to perform 67 HTTP transactions. The main domain is lottovip.lease and was registered 1 year 5 months ago.

Submitted URL: https://lottovip.lease/

AI Security Verdict

Confirmed Scam

Confidence: 96%

Risk Score

Gambling page carrying an analyst-vetted ClickFix/EtherHiding loader with CRITICAL EtherHiding IDS alerts and multi-feed malware flags on the domain; forms funnel phone numbers to cutt.ly. Do not visit.

Risk Factors (7)

Known malicious ClickFix/EtherHiding kit (analyst-vetted, critical) detected in the page body

CRITICAL IDS alerts: ET MALWARE EtherHiding Exfil (2x)

EtherHiding next-stage address fetched from a blockchain contract via polygon.drpc.org / polygon-public.nodies.app

Obfuscated script concealing threat-feed hosts (1rpc.io, polygon.gateway.tenderly.co)

Multi-source threat-intel match on the primary domain and URL (malware / iclickfix) and on loaded host cloud-browse.codes (ek clearfake-1, 3 feeds)

Forms submit phone numbers to an external cutt.ly shortened URL instead of a same-origin endpoint

'Human Verification' social-engineering overlay instructing Windows users to open Terminal

Domain age information unavailable

Details

Page Title

Lottovip เว็บหวยอันดับ 1 ครบวงจร ลิขสิทธ์แท้ ไม่มีเลขอั้น

Scan Type

public

Favicon Hash

MMH3: 1112023356

MD5: 2d68dbbb384e8c9902f55b18c0e9cf81

Domain Name Analysis

Within the .lease top-level domain, 'lottovip.lease' is registered without a subdomain. The second-level label 'lottovip' is 8 characters long holding 3 vowels versus five consonants. Segmentation suggests three words: lot, to, vip. Median word length comes out to 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

2.29s

Total Load Time

1.1 MB

Total Size

Language Analysis

Primary Language

🇹🇭Thai

Code: th

Confidence:80%

Script:Unknown

Direction:ltr

Detection Details

HTML Lang Attribute:th

Text Length:14,281 chars

Detector Agreement:80%

Website Classification

Primary Category

gambling betting99% confidence

Type: spa

Method: ml+structural

All Detected Categories

gambling betting

99%

finance banking

99%

e-commerce shopping

96%

blog personal website

96%

news media journalism

95%

Detected Features

Articles

OG: website

Schema.org

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
13	188.114.96.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
6	142.251.110.95Google · CDN	United States	AS15169Google LLC
6	104.17.24.14Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
6	104.26.5.88Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
6	142.251.14.94Google · CDN	United States	AS15169Google LLC
6	104.20.46.180Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
6	178.16.52.101	Frankfurt am Main, Hesse, Germany	AS202412Omegatech LTD
6	188.114.97.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
6	104.17.25.14Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
6	104.26.4.88Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
67	10	-	-