Security Scan Report: zto.se

Site favicon
Submitted: Sep 25, 2026, 10:50:11 PMCompleted: Sep 25, 2026, 10:51:40 PMpubliccompleted

AI Security Verdict

Moderate Risk

Confidence: 65%

6
Risk Score

Newly registered, unranked domain hosting illegal Indonesian online slot-gambling content under generic 'Jackpot888/PARIS123' branding, with heavy cross-domain redirects and scraped third-party content. Avoid.

Risk Factors
Illegal online gambling (judi/slot) content
Domain ≤1 day old
Excessive cross-domain redirects (9 total, 5 cross-domain)
Scraped/cloned third-party (Samsung) content unrelated to the site's actual purpose
Unranked domain with no established reputation
Safety Factors
No credential or payment forms owned by the site (password=0, payment=0); the embedded account.samsung.com forms are genuine Samsung SSO forms
No Indicators of Compromise or YARA malware matches
No network IDS alerts
Domain age information unavailable

Details

Page Title

Jackpot888 ✈️ Agen Situs Slots Gacor Jackpot888 Gampang Menang Malam Ini

Scan Type

public

Domain Name Analysis

The domain name 'zto.se' uses the Swedish country-code top-level domain (.se) with no subdomain. Count 3 characters in 'zto' containing one vowel alongside two consonants. Word splitting yields 2 words: z, to. Expect 1.5 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://zto.se

Page Load Overview

12.42s
Total Load Time
12.7 MB
Total Size

Language Analysis

Primary Language

🇮🇩Indonesian
Code: id
Confidence:80%
Script:Unknown
Direction:ltr

Detection Details

HTML Lang Attribute:id-ID
Text Length:31,883 chars
Detector Agreement:60%

Website Classification

Primary Category

e-commerce shopping59% confidence
Type: spa
Method: ml+structural

All Detected Categories

e-commerce shopping
59%
blog personal website
35%
gambling betting
32%
e-commerce
30%
government public service
30%

Detected Features

Search
Products
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
54172.67.212.192Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
223.52.180.53Akamai · CDNFrankfurt am Main, Hesse, Germany
AS16625Akamai Technologies, Inc.
2142.251.14.95Google · CDNUnited States
AS15169Google LLC
223.52.181.12Akamai · CDNFrankfurt am Main, Hesse, Germany
AS16625Akamai Technologies, Inc.
213.226.244.100Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
2104.16.80.73Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2142.251.151.119Google · CDNUnited States
AS15169Google LLC
2172.217.113.4Google · CDNUnited States
AS15169Google LLC
223.222.80.199Akamai · CDNHamburg, Free and Hanseatic City of Hamburg, Germany
AS16625Akamai Technologies, Inc.
2142.251.20.94Google · CDNUnited States
AS15169Google LLC
18667--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1EB15186094F11837009791D9FBD5AF0B7FA4E207E50AC9123B9C5BD80FD6EA39A1722D

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

6144:FbJsmZu3YaCdbpfrySy/1P9L8XsrmX0fWu4yKG4Z/zdayEMsdNS+:RqmZu3YaCdblrySy/1P9DmEfezhM

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:877161:BiakJBCrIwBKutQUFMHkGYADUmALSsDkMaATakBA4L4IK1pcoKkJTCJ2giB8igqUUQiIIqCAcAxMyFgwVEYAgHCpCSCCWDOg

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:60f8d8d818181800
Perceptual Hash:c8e3660366d83b3e
Difference Hash:c533333333333335
Wavelet Hash:f1f9d9d999199810
Color Hash:#3e931f

Scan History

Scan history not available

Unable to load historical scan data