ScanMalware.com

Security Scan Report: balls.money

Site favicon
Submitted: Sep 27, 2026, 10:07:42 AMCompleted: Sep 27, 2026, 10:08:17 AMpubliccompleted

AI Security Verdict

Moderate Risk

Confidence: 62%

4
Risk Score

Self-branded Solana meme-coin site, 9 days old and unranked, with no forms, no impersonation, and no malware/IDS evidence. Only signal is an unverified single-source report on a linked block explorer. Speculative token — caution advised.

Risk Factors (4)
Very new domain (9 days old) with no established reputation
Promotes a freshly launched, highly speculative meme token paired against another token (Catecoin) — financial-loss risk
Site is an unaffiliated parody coin with no utility, roadmap, or audited claims
Single-source community threat-intel report on a linked third-party domain (solscan.io) — unverified
Safety Factors (4)
No credential, login, or payment forms anywhere on the page
No JavaScript malware (YARA) matches, no IDS/Suricata alerts, no known phishing-kit match
Clear self-branding ($BALLS matches balls.money) — no brand impersonation detected
Prominent disclaimer that it is an unofficial parody meme coin, not an investment or security
Domain age information unavailable

Details

Page Title

BALLS ON THE TABLE — $BALLS

Scan Type

public

Domain Name Analysis

The domain 'balls.money' uses the .money top-level domain while skipping any subdomain. Its registrable label 'balls' stretches across 5 characters split between 1 vowel and four consonants. Tokenizing the label suggests one word: balls. Median word length is five characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://balls.money/

Page Load Overview

1.84s
Total Load Time
957 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:4,027 chars
Detector Agreement:100%

Website Classification

Primary Category

cryptocurrency blockchain66% confidence
Type: static
Method: ml+structural

All Detected Categories

cryptocurrency blockchain
66%
gambling betting
59%
entertainment media
59%
documentation technical
50%
finance banking
43%

Detected Features

OG: website

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
14104.129.244.14Ashburn, Virginia, United States
AS397423Tier.Net Technologies LLC
13172.64.149.113Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
13104.18.38.143Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
403--

Detected Technologies2

Open-Graph-Protocolvwebsite
100%
HTTP/3
40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T17572DCA2E1F616770177D0D362AA177A69E2D257EA171101B3FD03E80FEEC52BD1348A

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:9qH2OIgRvWfQR6YzNrPpohuRmm4DsOAcb4hr:9qUpQR6YzNrPpQuRjYsO74hr

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:16641:gIzCATKPKuRRKJYHEEnmICMJCgEgAExhpApAEgJsAqgAHgAyBsjmFQBDYFAQgNIRBcyeGAAojoAZxgOkDBFAq5BkjqSGxhBG

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:fe9f91d1f19f00cf
Perceptual Hash:ecdc92c6e341f445
Difference Hash:b03333332327311b
Wavelet Hash:fe9f81d1f183008f
Color Hash:#87a8c5

Other Hashes

Crop Resistant:b03333332327311b,fcbcbdbcde3aaaca,9e96063e192161d3,545c4d54dcedd692,32328ac26672584c,2ad4d508d9d92600

Scan History

Scan history not available

Unable to load historical scan data