ScanMalware.com

Security Scan Report: romabelt1492.cam

Site favicon
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/7b12f22c-851c-42a3-939d-6edcc4db5416Domain and IP registration (RDAP)/api/v1/rdap/7b12f22c-851c-42a3-939d-6edcc4db5416How often this domain was scanned/api/v1/domain/stats/romabelt1492.camScan history for this domain/api/v1/domain/history/romabelt1492.cam?limit=15
This website contacted 19 IPs in 1 country across 13 domains to perform 147 HTTP transactions. The main domain is romabelt1492.cam and was registered 2 weeks ago.

Submitted URL: https://romabelt1492.cam/sssorular

AI Security Verdict

Moderate Risk

Confidence: 55%

6
Risk Score

New 10-day-old .cam mirror for a Turkish online casino ('RomaBet') with a user login form, bonus and Telegram support content; no malware or credential exfiltration found. Illegal-gambling risk, avoid entering credentials or payment data.

Risk Factors (4)
Unlicensed/offshore gambling content targeting Turkish users on a brand-new .cam mirror domain
Login form collecting usernames and passwords on a 10-day-old unranked domain
High volume of '.cam' network IDS alerts and one obfuscated-JavaScript web-client alert
Page addresses security scanners indirectly by claiming official status ('güncel giriş adresi', 'resmi erişim') while operating on a mismatched, non-official domain
Safety Factors (4)
No Indicators of Compromise matched against the page or its resources
No JavaScript malware or known-kit roster hits
No payment-card fields and no cross-origin credential exfiltration detected
Standard third-party infrastructure only (Cloudflare, jsdelivr, Google Fonts, analytics)
Domain age information unavailable

Details

Page Title

RomaBet Güncel Giriş Adresi 2026 - Dünyanın Prestijli Casino Rehberi

Scan Type

public

Domain Name Analysis

Domain 'romabelt1492.cam' uses the .cam top-level domain and has no subdomain. Count 12 characters in 'romabelt1492' split between 3 vowels and five consonants, along with four digits. Tokenizing the label suggests three words: roma, belt, 1492. Average segment length settles at four characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://romabelt1492.cam/sssorular

Page Load Overview

23.17s
Total Load Time
25.5 MB
Total Size

Language Analysis

Primary Language

🇹🇷Turkish
Code: tr
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:tr
Text Length:5,730 chars
Detector Agreement:80%

Website Classification

Primary Category

gambling betting62% confidence
Type: webapp
Method: ml+structural

All Detected Categories

gambling betting
62%
phishing scam
51%
corporate business
51%
adult content
49%
government public service
46%

Detected Features

Login Form
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
21172.67.223.246Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
7142.251.14.97Google · CDNUnited States
AS15169Google LLC
7104.17.25.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
7151.101.65.155Fastly · CDNUnited States
AS54113Fastly, Inc.
7104.17.207.5Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
7104.18.94.41Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
7216.239.32.36Google · CDNUnited States
AS15169Google LLC
7142.251.127.154Google · CDNUnited States
AS15169Google LLC
7142.250.154.94Google · CDNUnited States
AS15169Google LLC
7142.251.20.95Google · CDNUnited States
AS15169Google LLC
14719--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1D0742A12F4982209A037C75096E15F899264E117C5062BEDB9AFD6248FC7EC73F7329E

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

6144:X/UpnZMQYelNclgkBhRGSf9G1XaMrYY89Cry2gS3hjyO5ZSqqFd/dI6rBa:X/UpnZMQYenclgkBhRGSf9G1XaMb8Yr1

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:358350:5AMCiBloWYJGkEETEDRZECHgNAQAEMQQAwQFMIAqGHsECQGPAChF8gEQxQQRDJAE4cYOcA0wtMgORAQx0FcEhQCDQiDotgri

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:183c3c1c181c1800
Perceptual Hash:89cd677722748c65
Difference Hash:f0f1f1b1f1f1f0e9
Wavelet Hash:3c3c3c3c3c3c3c39
Color Hash:#64783a

Other Hashes

Crop Resistant:323232b8f2a49ed6,6b632387e7268cd8,f0f1f1b1f1f1f0e9

Scan History

Scan history not available

Unable to load historical scan data