Security Scan Report: win2daycasino.fr

Site favicon
Submitted: Completed: publiccompleted
This website contacted 5 IPs in 2 countries across 3 domains to perform 40 HTTP transactions. The main domain is win2daycasino.fr and was registered 1 month ago.

Submitted URL: https://win2daycasino.fr/

AI Security Verdict

High Risk

Confidence: 78%

7
Risk Score

Unaffiliated clone styled as the 'official' win2day France site on a 33-day-old look-alike domain. No credential or payment form, but clear brand impersonation of a licensed gambling operator.

Risk Factors (4)
Impersonation of a known gambling brand (win2day / Österreichische Lotterien) on a non-official domain that claims 'Site officiel'
Domain registered 33 days ago and absent from Cisco Umbrella top 1M
Six cross-domain redirects used to reach the page
Bonus-claim call to action with mangled currency amounts
Domain age information unavailable

Details

Page Title

win2day — Site officiel France

Scan Type

public

Domain Name Analysis

Domain 'win2daycasino.fr' uses the French country-code top-level domain (.fr). The second-level label 'win2daycasino' is 13 characters long split between five vowels and seven consonants, plus one digit. Segmentation suggests four words: win, 2, day, casino. Median word length is three characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://win2daycasino.fr/

Page Load Overview

1.03s
Total Load Time
447 KB
Total Size

Language Analysis

Primary Language

🇫🇷French
Code: fr
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:fr
Text Length:13,052 chars
Detector Agreement:60%

Website Classification

Primary Category

gambling betting100% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

gambling betting
100%
adult content
95%
entertainment media
67%
corporate
35%

Detected Features

OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
8172.67.223.91Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
887.250.251.119Yandex · CLOUDRussia
AS13238YANDEX LLC
877.88.21.119Yandex · CLOUDMoscow, Moscow, Russia
AS13238YANDEX LLC
8104.21.62.112Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
887.250.250.119Yandex · CLOUDRussia
AS13238YANDEX LLC
405--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T148230936B1D4143B01F321D1B32ABB6BB5E6A717CE0B9110FABD96D50BD7C64CA23069

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:8QUYFYj+IIHVaJB+zvY0+u4SaO/cE2sStqGSf:8QVwJB+x+u4YCq

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:49171:mYEADQOZYBgSCQrCCgAZDxRJQEWEMpdABypbiJICIAIODhHS0ghEkAyyPC0gRgVACCMiED8BhLGCABIEE8kwJBQABAUAMBoA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:8118181818407e7e
Perceptual Hash:883ee22b8da3639e
Difference Hash:33b1b13033cdd0cc
Wavelet Hash:8119191f19417f7f
Color Hash:#79bed2

Other Hashes

Crop Resistant:33b1b13033cdd0cc

Scan History

Scan history not available

Unable to load historical scan data