Security Scan Report: 1win-official-india.click

Redirected to:
https://1win-official-india.click/
Site favicon
Submitted: Completed: publiccompleted
This website contacted 12 IPs in 3 countries across 9 domains to perform 98 HTTP transactions. The main domain is 1win-official-india.click and was registered 1 month ago.

Submitted URL: https://1win-official-india.click/casino/

Effective URL:
https://1win-official-india.click/
Redirected

AI Security Verdict

High Risk

Confidence: 75%

7
Risk Score

New, unranked .click domain posing as the official '1Win' betting/casino site for India — clear brand impersonation of a known bookmaker, though no credential or payment forms were found.

Risk Factors (4)
Impersonation of the '1Win' bookmaker brand on a non-official, mismatched domain
Domain registered 19 days ago (VERY_NEW)
Domain unranked / no established reputation
Claims of an 'official license' and official status that cannot be verified from this host
Domain age information unavailable

Details

Page Title

1Win Bet Login: Official Betting & Casino Site in India

Scan Type

public

Domain Name Analysis

Within the .click top-level domain, '1win-official-india.click' is registered without a subdomain. The registrable portion '1win-official-india' spans 19 characters with 8 vowels and 8 consonants, along with 1 digit and two hyphens. Splitting it apart reveals four words: 1, win, official, india. Expect four characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://1win-official-india.click/casino/

Page Load Overview

2.12s
Total Load Time
9.2 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:21,169 chars
Detector Agreement:100%

Website Classification

Primary Category

gambling betting77% confidence
Type: spa
Method: ml+structural

All Detected Categories

gambling betting
77%
corporate
35%
corporate business
29%
phishing/scam
20%
news/blog
20%

Detected Features

OG: article
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
10188.114.96.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
8165.227.81.144North Bergen, New Jersey, United States
AS14061DigitalOcean, LLC
820.250.198.32Azure · CLOUDZurich, Zurich, Switzerland
AS8075Microsoft Corporation
8150.171.109.193Azure · CLOUDUnited States
AS8075Microsoft Corporation
84.153.72.49Azure · CLOUDBoydton, Virginia, United States
AS8075Microsoft Corporation
8188.114.97.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
852.184.222.228Azure · CLOUDBoydton, Virginia, United States
AS8075Microsoft Corporation
8142.250.154.97Google · CDNUnited States
AS15169Google LLC
887.250.250.119Yandex · CLOUDRussia
AS13238YANDEX LLC
8216.239.32.36Google · CDNUnited States
AS15169Google LLC
9812--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T13F042AF3938C9AEA420343F0D52671983327447BDF568AD5B49F8098EFC59F84D6B988

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:kd1drcOilEEu/BluLt+VIuRZwXIONIoi/1SUguv:6hcOQEEu/Bo5+VIuRZwXIsRi/1SUguv

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:173823:CQSAKiFyBhGFcIE7BREgB9ALA+BkCDAmI0geZDAA0AqMgEBnGpUbMIJwLNVMASOwkRLyHGFkTBIIQAVA5ASiG+MHNwsiQA6o

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0100061c7c203c7c
Perceptual Hash:c231cc638b39e4e7
Difference Hash:63c9d4d8c8cde1e1
Wavelet Hash:3138263c7e607c7d
Color Hash:#88d22d

Scan History

Scan history not available

Unable to load historical scan data