Security Scan Report: 345wingames.pk

Submitted: Completed: publiccompleted
This website contacted 21 IPs in 3 countries across 16 domains to perform 105 HTTP transactions. The main domain is 345wingames.pk and was registered 7 months ago.

Submitted URL: https://345wingames.pk

AI Security Verdict

Confirmed Scam

Confidence: 96%

10
Risk Score

Compromised/weaponized page serving an EtherHiding blockchain-backed malware loader plus a ClickFix 'verification' overlay that tricks Windows users into running pasted PowerShell commands. Do not visit.

Risk Factors (6)
EtherHiding malware loader using blockchain contracts to fetch and run its next stage
ClickFix social-engineering overlay instructing visitors to paste and execute a PowerShell/Terminal command
Obfuscated script concealing threat-feed RPC hosts
6 cross-domain redirects before landing on the page
Untrusted APK distribution page promoting a money-earning gambling app with JazzCash/EasyPaisa deposits
Domain unranked in Cisco Umbrella with low legitimacy score (10/100)
Domain age information unavailable

Details

Page Title

345win game download the latest APK version for free - 345win game

Scan Type

public

Domain Name Analysis

Domain '345wingames.pk' uses the Pakistani country-code top-level domain (.pk) while skipping any subdomain. Count 11 characters in '345wingames' holding three vowels versus 5 consonants, plus three digits. Breaking it apart gives three words: 345, win, games. Median word length comes out to three characters. No strong language cues emerged from the frequency lists.

Screenshot

345win game download the latest APK version for free Dive into smart gaming with the 345Win Game, a top platform to help you earn money in the digi Today, making money through your phone has become a...

Page Load Overview

1.06s
Total Load Time
980 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:15,668 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software83% confidence
Type: spa
Method: ml+structural

All Detected Categories

technology software
83%
entertainment media
71%
documentation technical
51%
corporate
25%

Detected Features

OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
566.33.212.186Schiphol, North Holland, Netherlands
AS22611InMotion Hosting, Inc.
5142.251.127.95Google · CDNUnited States
AS15169Google LLC
53.33.196.84Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
552.223.48.152Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
5142.215.53.55Washington, District of Columbia, United States
AS15830Equinix (EMEA) Acquisition Enterprises B.V.
515.197.198.189Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
53.33.155.121Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
5104.20.24.117Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
5172.66.146.203Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
5104.18.40.68Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
10521--

Detected Technologies10

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T144357D71714D10F82367D22FBA4AF6287565F332C09298E6F15DC518ABED78821B3B1E

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

24576:/sos+CydV6FjI1ykpQg5Mmjx+qehFP01ncZPkIQ3WSp3z9JWmbf:/sU8jI1ppQg5Mmjx+qehFP01tm2f

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:1145662:wgKfGAETqM0CwSQhBKJwEGUhE2UMACDKapLvK0QYCgGCJgQoCE4ASMgBBEAEMRKEjVizRBJRQoTHOhACplB6EIJIAgBAICDC

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ce82ffffffffffe7
Perceptual Hash:b0383189c7cfc6ce
Difference Hash:189e20000000100c
Wavelet Hash:32021d3d3f3f2703
Color Hash:N/A

Other Hashes

Crop Resistant:189e20000000100c

Scan History

Scan history not available

Unable to load historical scan data