Security Scan Report: gsm.widnf.net

Redirected to:
https://gsm.widnf.net/login
Site favicon
Submitted: Completed: publiccompleted
This website contacted 1 IP in 1 country across 1 domain to perform 10 HTTP transactions. The main domain is widnf.net and was registered 5 months ago.

Submitted URL: https://gsm.widnf.net

Effective URL:
https://gsm.widnf.net/login
Redirected

AI Security Verdict

Moderate Risk

Confidence: 62%

4
Risk Score

Self-branded game server management login on a 167-day-old unranked domain. No impersonation, no threat-intel, hunting rule or exfiltration signals; only a Spamhaus DROP IDS alert tied to the hosting address. Moderate risk at most.

Risk Factors (2)
Network IDS alert for Spamhaus DROP-listed inbound traffic, indicating the shared hosting address has an abuse-reputation history (ET DROP Spamhaus class — generic blocklist, not content malware)
Game server management panel with login is hosted on an unranked subdomain with no visible operator/legal identity on the captured page
Safety Factors (4)
Self-branding: page title and meta description match its own domain rather than impersonating another organisation
Login form posts within the same origin; no external credential submission or exfiltration observed
No Indicators of Compromise, hunting rule malware patterns, malicious JavaScript behaviour or hosting-platform abuse
Standard community/self-hosted tool login shape rather than a credential-harvesting kit
Domain age information unavailable

Details

Page Title

GSManager

Scan Type

public

Domain Name Analysis

The domain name 'gsm.widnf.net' uses the network infrastructure generic top-level domain (.net); it also runs on subdomain 'gsm'. Count 5 characters in 'widnf' containing one vowel alongside four consonants. Breaking it apart gives 3 words: wi, d, nf. Average segment length settles at two characters. No strong language cues emerged from the frequency lists.

Screenshot

GSM GameServerManager SAMRAT ARR @ SRI RPS ( ARPS ae HES @| @sicew? GSManagers HRUARSAR

Page Load Overview

7.15s
Total Load Time
1.7 MB
Total Size

Language Analysis

Primary Language

🇨🇳Chinese
Code: zh
Confidence:60%
Script:Han
Direction:ltr

Detection Details

HTML Lang Attribute:zh-CN
Text Length:84 chars
Detector Agreement:67%

Website Classification

Primary Category

technology software30% confidence
Type: static
Method: ml+structural

All Detected Categories

technology software
30%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
10223.254.133.168Tsuen Wan, Tsuen Wan District, Hong Kong
AS40004CONRADIT, LLC
101--

Detected Technologies3

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T133721965518A3535B117C9F0B791A73E3079E143C68BCE1CF2AE2364CF89EBD916360A

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:P+OWDEs2dx/+LixUSfq/0vEnqWq3LnNZveQCelAb1Gj7AATeYwvwa3E9iytCvg0W:Wlh0cy+QeFakMKGRHTR

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:16313:ajGAokEfTjgwFhQGiMHDBIhZiyoAEnsDiHAQUHJOIABwkAmIF2DCcpABAcRF6YNIKUghAAY0MH3jAFCCPjxQuCgoDAAThwkw

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:01191b1b1f1b1f0f
Perceptual Hash:886733c86673d966
Difference Hash:afb733b3b3b3b77f
Wavelet Hash:01091b1f1f1f1f1f
Color Hash:N/A

Other Hashes

Crop Resistant:afb733b3b3b3b77f

Scan History

Scan history not available

Unable to load historical scan data