Security Scan Report: ponte.tv

Site favicon
Submitted: Completed: publiccompleted
This website contacted 15 IPs in 2 countries across 13 domains to perform 323 HTTP transactions. The main domain is ponte.tv and was registered 3 months ago.

Submitted URL: https://ponte.tv

AI Security Verdict

Confirmed Scam

Confidence: 93%

9
Risk Score

Compromised/malicious gambling page serving a ClickFix fake Cloudflare 'human verification' overlay that pulls a next-stage payload from a blockchain contract (EtherHiding); critical IDS and kit-roster hits. Do not interact.

Risk Factors (7)
Known ClickFix/EtherHiding malware kit identified by analyst-vetted kit roster and YARA rule
Fake Cloudflare 'human verification' overlay instructing Windows users to open Terminal (Win+X)
Four CRITICAL IDS alerts for EtherHiding exfiltration traffic
Deliberately obfuscated JavaScript hiding blockchain RPC and threat-feed hosts
Primary domain reported as iclickfix malware; page loads a resource host flagged by 3 feeds as an exploit kit
19 cross-domain redirects and *.pw script/CDN domains
Unranked domain only 109 days old hosting Vietnamese gambling/betting affiliate content
Domain age information unavailable

Details

Page Title

Kèo Nhà Cái - Tỷ Lệ Keonhacai5 Trực Tiếp Hôm Nay, Soi Kèo Bóng Đá Cập Nhật 2026

Scan Type

public

Domain Name Analysis

Domain 'ponte.tv' uses the .tv country-code top-level domain and has no subdomain. Count 5 characters in 'ponte' split between two vowels and three consonants. Word splitting yields 1 word: ponte. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://ponte.tv

Page Load Overview

31.32s
Total Load Time
11.0 MB
Total Size

Language Analysis

Primary Language

🇻🇳Vietnamese
Code: vi
Confidence:80%
Script:Unknown
Direction:ltr

Detection Details

HTML Lang Attribute:vi
Text Length:62,638 chars
Detector Agreement:100%

Website Classification

Primary Category

gambling betting100% confidence
Type: spa
Method: ml+structural

All Detected Categories

gambling betting
100%
entertainment media
99%
finance banking
92%
adult content
65%
cryptocurrency blockchain
56%

Detected Features

OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
29104.21.96.22Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
21104.20.46.180Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
21178.16.52.101Frankfurt am Main, Hesse, Germany
AS202412Omegatech LTD
21104.21.24.67Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
21172.67.161.215Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
21142.251.110.95Google · CDNUnited States
AS15169Google LLC
2135.227.193.242Google · CDNKansas City, Missouri, United States
AS396982Google LLC
21172.67.150.70Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
21172.66.146.203Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
21104.21.42.117Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
32315--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T13FA5C6B0233332AE614749D4B164A36AB0C7BB99DD13D20496FD139F6FC2CC58D86AD9

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

49152:xoTrl5r3l50cFRh/dVdbfZa1cJNhbF7VqPfPVlpzHJNhPMYl75D5vhfhtycl3cOK:xoTrl5r3l50cFRh/dVdbfZa1cJNhbF79

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:2209471:wAEWDLpX1CMYNAIAFOVCgBoBIkQFgIjQ0ATAAhLEhm46RAneYzhDoQQPSoQqUQ1thIcAURcAAIRLxAB1LUlEIMgAiChqgQAV

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:dfcfc7c3ffffffff
Perceptual Hash:b83891c7c66666c7
Difference Hash:10101c3400000008
Wavelet Hash:3c0c0000ffffff00
Color Hash:#b7bf40

Other Hashes

Crop Resistant:10101c3400000008

Scan History

Scan history not available

Unable to load historical scan data