Security Scan Report: ga888thu.com

Site favicon
Submitted: Completed: publiccompleted
This website contacted 9 IPs in 3 countries across 7 domains to perform 64 HTTP transactions. The main domain is ga888thu.com and was registered 1 week ago.

Submitted URL: https://ga888thu.com

AI Security Verdict

High Risk

Confidence: 80%

8
Risk Score

8-day-old Vietnamese gambling site whose scripts call BNB Chain testnet contracts, triggering CRITICAL EtherHiding malware-exfiltration IDS alerts plus single-source malware threat-intel hits. Avoid.

Risk Factors (5)
EtherHiding-style blockchain interaction with BNB Chain testnet contracts flagged as malware exfiltration by IDS
Threat-intel match on the primary domain (IClickFix, single-source) and a loaded third-party domain (vidar malware, single-source)
Spamhaus DROP-listed traffic alert
Domain registered 8 days ago and not ranked in Umbrella top 1M
Unlicensed gambling/cockfighting promotion with unverifiable major-brand partnership claim
Domain age information unavailable

Details

Page Title

Ga888 🎖️ Link đá gà trực tuyến Ga88 mới nhất T11/2026

Scan Type

public

Domain Name Analysis

Within the commercial generic top-level domain (.com), 'ga888thu.com' is registered without a subdomain. The core label 'ga888thu' covers 8 characters split between two vowels and 3 consonants, along with three digits. Tokenizing the label suggests 3 words: ga, 888, thu. Average segment length settles at three characters. No strong language cues emerged from the frequency lists.

Screenshot

GA£:3 SHEBEV) BANCK NOHO THETHAO XÓSỔ CASINO GAGA ESPORT DAILY KHUYẾNMẠU THRTÚC (FREY omens GA ` 3t \Si17388 ĐỘC QUYỀN ĐÁ GÀ THOMO SV388 TY LỆ CƯỢC CẠNH TRANH GA888 Ÿ LINK ĐÁ GÀ TRỰC TUYẾN GA88 MỚI...

Page Load Overview

2.21s
Total Load Time
1.9 MB
Total Size

Language Analysis

Primary Language

🇻🇳Vietnamese
Code: vi
Confidence:80%
Script:Unknown
Direction:ltr

Detection Details

HTML Lang Attribute:vi
Text Length:2,385 chars
Detector Agreement:50%

Website Classification

Primary Category

gambling betting46% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

gambling betting
46%
corporate
35%
news/blog
20%

Detected Features

Search
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
55104.21.6.92Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
7172.67.154.215Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
752.223.48.152Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
73.33.155.121Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
740.160.90.201United States
AS16276OVH SAS
337.72.140.76Russia
AS211663GALEON LLC
2190.115.18.105United Arab Emirates
AS59692IQWeb FZ-LLC
115.197.152.159Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
1192.0.77.48San Francisco, California, United States
AS2635Automattic, Inc
649--

Detected Technologies9

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T15CB30972459E1937171F86C99291FA1CF26A8633CE16C6D0B3FF0258EFDADA2016325D

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:AIp/q8ypvMxRaEvorw+q87npoo/5TOdzRS:AIp/qN5M7aEvkXpoo/5ydzI

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:114790:AlEDvAGFQiEEgClTUFCCwUhAABQEsApOQqAcJBBqDQvoiigWSlSJegAI6DgUzQQULwoqAxMSYySCBiAzAqWCKSADooAiiYOR

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Scan History

Scan history not available

Unable to load historical scan data