ScanMalware.com

Security Scan Report: romabelt1492.cam

Site favicon
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/8accb0d1-b714-4544-b75c-03ba00f91ab0Domain and IP registration (RDAP)/api/v1/rdap/8accb0d1-b714-4544-b75c-03ba00f91ab0How often this domain was scanned/api/v1/domain/stats/romabelt1492.camScan history for this domain/api/v1/domain/history/romabelt1492.cam?limit=15
This website contacted 21 IPs in 1 country across 14 domains to perform 150 HTTP transactions. The main domain is romabelt1492.cam and was registered 2 weeks ago.

Submitted URL: https://romabelt1492.cam/livesports

AI Security Verdict

Moderate Risk

Confidence: 68%

5
Risk Score

Very new, unranked Turkish betting site claiming the 'RomaBet' brand with mirror domains and a user login form; no malware or phishing-kit evidence, but the illegal-gambling profile warrants caution.

Risk Factors (4)
Very new domain (14 days) with no reputation ranking
Login form collecting username and password on a very new, unranked domain
Gambling/betting operation presenting a network of alternate mirror domains
High-pressure bonus/payout marketing claims
Safety Factors (4)
Discloses a registered operating company (Exelogix Ltd, St Vincent and the Grenadines) and a physical address
Standard CDN/font/analytics third-party hosts; no cross-origin credential submission detected
No Indicators of Compromise, YARA, Safe Browsing or malware IDS hits against the page
Login is consistent with a gambling user account, which the gambling-specific rules do not treat as credential phishing
Domain age information unavailable

Details

Page Title

RomaBet Canlı Bahis - Prestijli Resmi Erişim Rehberi

Scan Type

public

Domain Name Analysis

The domain 'romabelt1492.cam' uses the .cam top-level domain. The registrable portion 'romabelt1492' spans 12 characters with 3 vowels and 5 consonants; bonus characters include 4 digits. Segmentation suggests 3 words: roma, belt, 1492. The median word length lands at four characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://romabelt1492.cam/livesports

Page Load Overview

7.63s
Total Load Time
26.2 MB
Total Size

Language Analysis

Primary Language

🇹🇷Turkish
Code: tr
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:tr
Text Length:3,616 chars
Detector Agreement:80%

Website Classification

Primary Category

gambling betting60% confidence
Type: spa
Method: ml+structural

All Detected Categories

gambling betting
60%
social_media
25%
corporate
25%
forum
20%

Detected Features

Login Form
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
10104.21.25.75Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
7142.250.154.97Google · CDNUnited States
AS15169Google LLC
7104.17.24.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
7151.101.193.155Fastly · CDNUnited States
AS54113Fastly, Inc.
7104.17.207.5Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
7104.18.95.41Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
7142.251.14.95Google · CDNUnited States
AS15169Google LLC
7216.239.34.36Google · CDNUnited States
AS15169Google LLC
7142.251.127.157Google · CDNUnited States
AS15169Google LLC
7142.251.14.94Google · CDNUnited States
AS15169Google LLC
15021--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1B9743A16F4982209A037C75096E15F899264E117C5062BEDB9AFD6208FC7EC73F7329E

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

6144:r/UpnZMQYelNclgkBhRGSf9G1XaMrYY89Cry2gS3hjyO5ZSqqFd/dITrBC:r/UpnZMQYenclgkBhRGSf9G1XaMb8YrI

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:350725:AFYAQUGhQaAjUB6gBaXwQJ4k4AHEAbWMAKFAZhyFoFEjaACCnPpIkYBLhVJHhYQUIgGABCAExCCgAIqCQoJQA6A8RAtK5ZU8

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:183c3c1c181c1800
Perceptual Hash:99cd677230349c6d
Difference Hash:f07171b171717078
Wavelet Hash:7e3c3c3c3c3c3c18
Color Hash:#931f31

Other Hashes

Crop Resistant:323232b8f2a49ed6,6b632387e7268cd8,f07171b171717078

Scan History

Scan history not available

Unable to load historical scan data