Security Scan Report: slhotels.vip

Redirected to:
https://slhotels.vip/#/pages/login/login
Submitted: May 15, 2026, 6:03:02 AMCompleted: May 15, 2026, 6:05:18 AMpubliccompleted
Loading additional data...

Summary

This website contacted 3 IPs in 3 countries across 3 domains to perform 41 HTTP transactions. The main domain is slhotels.vip and was registered NaN years ago.

Submitted URL: http://slhotels.vip/

Effective URL: https://slhotels.vip/#/pages/login/loginRedirected

AI Security Verdict

Confirmed Scam

Confidence: 95%

10
Risk Score

The site is a brand‑new, unranked domain with critical malware alerts and heavily obfuscated scripts, indicating confirmed scam activity.

Risk Factors
Brand‑new domain (<7 days)
Unranked domain reputation
Critical IDS alerts indicating malware C2 and exfiltration
Highly obfuscated JavaScript
Gambling category on a brand‑new, untrusted domain
Domain age information unavailable

Details

Page Title

SLIH

Scan Type

public

Language

🇰🇷

Korean

(60% confidence)

Category

gambling betting

(64%)

Domain Information

You're looking at domain 'slhotels.vip' on the .vip top-level domain. Its registrable label 'slhotels' stretches across 8 characters holding two vowels versus six consonants. Word splitting yields two words: sl, hotels. Median word length is 4 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of http://slhotels.vip/

Page Load Overview

5.36s
Total Load Time
130
HTTP Requests
3
Domains
2.8 MB
Total Size

Language Analysis

Primary Language

🇰🇷Korean
Code: ko
Confidence:60%
Script:Hangul
Direction:ltr

Detection Details

Language Code:ko
Detection Confidence:60%
Script Type:Hangul
HTML Lang Attribute:zh-CN
Text Length:145 chars
Detector Agreement:100%
Language mismatch: Declared as zh but detected as ko

Website Classification

Primary Category

gambling betting64% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

gambling betting
64%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
4443.153.206.121Singapore, Singapore
AS132203Tencent Building, Kejizhongyi Avenue
43104.21.16.150United States
AS13335Cloudflare, Inc.
43106.54.228.253Shanghai, Shanghai, China
AS45090Shenzhen Tencent Computer Systems Company Limited
1303--

Detected Technologies2

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1AFF26330B446203B7137C4C0B475AF1E6096D736C35A4BA8B3BD26AE6FCA8D90977364

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:7dZXEnfncCEX4JFzTzVJinWLyTPqyS5sYSsYnsYbsYOPTzhBeC3D:7dZXEnhL/I4yzqyS5sYSsYnsYbsYSTzV

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:34500:zCpQBMBw5kwzYGCGHgCGIQBAKIFEMmwDYioBBAlgRFyqSDZawoB1jYNBRKAiCRcQXNZQGaENVJrHsAigaU6BZpCADDkAQEII

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:80fffffffb959400
Perceptual Hash:b6917a6a496a6c69
Difference Hash:012c2690522525aa
Wavelet Hash:80feff1eff950000
Color Hash:#78533a

Other Hashes

Crop Resistant:012c2690522525aa

Scan History

Scan history not available

Unable to load historical scan data