Security Scan Report: bj66c1.com

Site favicon
Submitted: Oct 14, 2026, 9:05:24 PMCompleted: Oct 14, 2026, 9:06:02 PMpubliccompleted

AI Security Verdict

Confirmed Scam

Confidence: 96%

10
Risk Score

Compromised/attacker-built gambling page carrying the analyst-vetted ClickFix 'Human Verification' overlay kit and EtherHiding blockchain loader, with CRITICAL YARA and IDS malware hits and the primary domain flagged as malware by two feeds. Avoid; do not interact.

Risk Factors (6)
Known malicious phishing kit injected into the page (ClickFix Win+X/Terminal 'Human Verification' overlay)
EtherHiding malware technique — next-stage payload address retrieved from a Polygon smart contract
Threat-feed hosts (1rpc.io, polygon.drpc.org, tenderly) concealed inside an obfuscated script
CRITICAL IDS alerts for exploit-kit activity and malware EtherHiding exfiltration
Primary domain flagged as malware by two independent threat-intelligence feeds
Unranked domain (absent from Cisco Umbrella top 1M) on a gambling/cockfighting landing page
Domain age information unavailable

Details

Page Title

Đá Gà 88 | BJ66 – Hành Trình Cá Cược Đá Gà Trực Tuyến Đỉnh Cao

Scan Type

public

Domain Name Analysis

You're looking at domain 'bj66c1.com' on the commercial generic top-level domain (.com) while skipping any subdomain. Its registrable label 'bj66c1' stretches across 6 characters with zero vowels and 3 consonants, notching 3 digits. Word splitting yields four words: bj, 66, c, 1. Median word length comes out to 1.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://bj66c1.com

Page Load Overview

4.50s
Total Load Time
4.2 MB
Total Size

Language Analysis

Primary Language

🇻🇳Vietnamese
Code: vi
Confidence:62%
Script:Unknown
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:9,511 chars
Detector Agreement:80%
Language mismatch: Declared as en-US but detected as vi

Website Classification

Primary Category

entertainment media86% confidence
Type: spa
Method: ml+structural

All Detected Categories

entertainment media
86%
gambling betting
67%
corporate
35%

Detected Features

OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
4838.54.14.214Ho Chi Minh City, Ho Chi Minh, Vietnam
AS138915Kaopu Cloud HK Limited
46132.145.155.63Oracle · CLOUDAshburn, Virginia, United States
AS31898Oracle Corporation
46178.16.52.101Frankfurt am Main, Hesse, Germany
AS202412Omegatech LTD
46150.136.141.142Oracle · CLOUDAshburn, Virginia, United States
AS31898Oracle Corporation
1864--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1CF04933276612136352F15CFD01B330C5097F7CAC99567E6E2B4A1A8EAB4EA635F321C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:pe2OqkWE6QYbipaP7qpK2mKlMGGZADVg088fTFJs95gL9QNU3QnjCRiKWE8sC9ty:EaoKeQnOEKUZ0662o

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:176061:+IVgQaGoSQqliEyVwAAABAaIAXFEBWjaBh4YbIIAVyGnhARAgUJN8ACEiSIABjBMrlECrAgwKvFJwQJAAIMXQiEYCqENBEAM

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:3404767e1e7c4606
Perceptual Hash:924f368b4de6cdc0
Difference Hash:ad1cacacdad89c9c
Wavelet Hash:3604767e7e7c4606
Color Hash:#862d5b

Scan History

Scan history not available

Unable to load historical scan data