Security Scan Report: clos3t.io

Site favicon
Submitted: Completed: publiccompleted
This website contacted 10 IPs in 2 countries across 13 domains to perform 357 HTTP transactions. The main domain is clos3t.io and was registered 5 months ago.

Submitted URL: https://clos3t.io

AI Security Verdict

Confirmed Scam

Confidence: 92%

9
Risk Score

Compromised/malicious gambling page carrying an analyst-confirmed ClickFix Win+X overlay and EtherHiding blockchain loader; CRITICAL EtherHiding IDS alerts and malware Indicators of Compromise. Do not follow its verification instructions.

Risk Factors (6)
Known malicious ClickFix/ClickFix-WinX kit identified on the page (CRITICAL)
EtherHiding blockchain-based payload loader with CRITICAL malware IDS alerts
Obfuscated JavaScript concealing threat-feed RPC hosts (1rpc.io, polygon.drpc.org, polygon.gateway.tenderly.co)
Primary domain Indicator of Compromise for 'iclickfix' malware; loaded host cloud-browse.codes flagged malicious by 3 feeds
Fake Cloudflare-style 'Human Verification' overlay used as a social-engineering execution lure for Windows visitors
20 redirects (19 cross-domain) and unranked gambling-affiliate domain
Domain age information unavailable

Details

Page Title

Kèo Nhà Cái 🎖️ Tỷ Lệ Keonhacai 5 Cập Nhật Trực Tiếp Hôm Nayother network

Scan Type

public

Domain Name Analysis

Domain 'clos3t.io' uses the British Indian Ocean Territory country-code top-level domain (.io) without a subdomain. The registrable portion 'clos3t' spans 6 characters with one vowel and four consonants, along with 1 digit. Segmentation suggests 3 words: clos, 3, t. Median word length is 1 character. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://clos3t.io

Page Load Overview

6.73s
Total Load Time
11.5 MB
Total Size

Language Analysis

Primary Language

🇻🇳Vietnamese
Code: vi
Confidence:80%
Script:Unknown
Direction:ltr

Detection Details

HTML Lang Attribute:vi
Text Length:68,409 chars
Detector Agreement:80%

Website Classification

Primary Category

gambling betting100% confidence
Type: spa
Method: ml+structural

All Detected Categories

gambling betting
100%
entertainment media
96%
finance banking
78%
adult content
37%
corporate
35%

Detected Features

OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
42188.114.97.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
35104.21.37.235Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
35172.66.146.203Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
35178.16.52.101Frankfurt am Main, Hesse, Germany
AS202412Omegatech LTD
35142.251.14.95Google · CDNUnited States
AS15169Google LLC
3535.227.193.242Google · CDNKansas City, Missouri, United States
AS396982Google LLC
35188.114.96.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
35172.67.215.52Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
35192.178.183.97Google · CDNUnited States
AS15169Google LLC
35216.239.34.36Google · CDNUnited States
AS15169Google LLC
35710--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T140D5B6B0223336AE214749D4B164A36BB0C7BB99CD13E10596FD139F6FC2CC58D86AD9

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

49152:0ZB3TfVtml1e7N7HH9JbMTOjvbjvFzu1Xp57thBddlXo4LnLZBNHLNlwOlvEyoGk:0ZB3TfVtml1e7N7HH9JbMTOjvbjvFzuI

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:2897709:hgUYEhMCSFMEsUmZl0HQCQCBzFhibkBDkSBigDaECgSMDQUoSYICaEIMAmgJ5AgwEABQRVGiQgULsCQ3AJSMQAKTYi+PIhOA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:dfcfc7c3ffffffff
Perceptual Hash:b83881cfc66666c7
Difference Hash:10101c3400000008
Wavelet Hash:3f0f03030f0fff00
Color Hash:#4fbf40

Other Hashes

Crop Resistant:10101c3400000008

Scan History

Scan history not available

Unable to load historical scan data