Security Scan: 1xBet

Summary

This website contacted 2 IPs in 2 countries across 3 domains to perform 41 HTTP transactions. The main domain is 1xlite-87822.bar and was registered NaN years ago.

Submitted URL: https://1xlite-87822.bar/es/bonus/rules/wheel-of-eva?tag=d_4796910m_22583c_argWhellOfEva&pb=496509562c60433aa95be66362596a3e&click_id=019dfc41-1a73-7b52-87fd-98ee92f5f5af&r=bonus/rules/wheel-of-eva

Effective URL: https://1xlite-87822.bar/es/block?tag=d_4796910m_22583c_argWhellOfEva&pb=496509562c60433aa95be66362596a3e&click_id=019dfc41-1a73-7b52-87fd-98ee92f5f5af&r=bonus/rules/wheel-of-evaRedirected

AI Security Verdict

Low Risk

Confidence: 78%

Risk Score

The site impersonates 1xBet on an unranked domain with heavily obfuscated JavaScript, indicating a high‑risk phishing or scam page.

Risk Factors

Brand impersonation of a well‑known gambling brand

Unranked / low‑reputation domain

Highly obfuscated JavaScript

Critical and high IDS alerts

Safety Factors

Domain age > 365 days (established)

No credential or payment forms detected

No Indicators of Compromise or malware YARA matches

Verdict cited a credential/login form, but DOM analysis found no password field (real or disguised) or payment field, and no other hard signal — credential-phishing framing unsupported; risk adjusted from 8 to 3

Domain age information unavailable

Details

Page Title

1xBet

Scan Type

public

Language

🇪🇸

Spanish

(50% confidence)

Screenshot

Page Load Overview

1.14s

Total Load Time

HTTP Requests

Domains

184 KB

Total Size

Language Analysis

Primary Language

🇪🇸Spanish

Code: es

Confidence:50%

Script:Latin

Direction:ltr

Detection Details

Language Code:es

Detection Confidence:50%

Script Type:Latin

Text Length:276 chars

Detector Agreement:100%

Website Classification

Primary Category

gambling betting90% confidence

Type: dynamic

Method: ml+structural

All Detected Categories

gambling betting

90%

documentation technical

40%

phishing scam

37%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
21	83.147.225.140	Greece	AS202492Silverhill Group Holding Ltd
20	92.223.124.62	Frankfurt am Main, Hesse, Germany	AS199524G-Core Labs S.A.
41	2	-	-

Page Statistics

Requests

Unique Domains

885.5 KB

Total Size

Detected Technologies3

Vue.js

40%

HSTS

40%

Google Analytics

35%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1D1A2C94BA46C7017A7E765C8843B9B8BF2AFF327865D91A192FDC1C41F47A67B243800

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:1JbVq0hihZx4enUH3uVCr3rywsf3EqOt8H7MIQtLkf1p/z:1JbVq0HHDr3rywy/OaIIQKf1p/z

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:21371:w4pCDVIMCCRJEo0EIZBWWKuUREURZAIjNdQBUZOZohDlDGMAjQw1RgKwIggAFCSHBEJsMKEQBOUVgRAkWAFIEgIeGc4gLbhW

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:73f7f19098f8fcbc

Perceptual Hash:eda492d32de0c393

Difference Hash:a724c232324b2020

Wavelet Hash:73f0f09090f8fc9c

Color Hash:#e0e06c

Other Hashes

Crop Resistant:a724c232324b2020

Scan History

Scan history not available

Unable to load historical scan data

Security Scan Report: 1xlite-87822.bar