Security Scan Report: aa-888.win

Redirected to: https://aa-888.win/#/

Site favicon
Submitted: Jan 15, 2026, 1:12:21 PMCompleted: Jan 15, 2026, 1:14:30 PMpubliccompleted
Loading additional data...

Summary

This website contacted 3 IPs in 1 country across 3 domains to perform 20 HTTP transactions. The main domain is aa-888.win and was registered NaN years ago.

Submitted URL: https://aa-888.win/

Effective URL: https://aa-888.win/#/Redirected

AI Security Verdict

Low Risk

Confidence: 70%

2
Risk Score

New domain with no malicious indicators; low risk but monitor for future changes.

Safety Factors
No credential‑harvesting or payment collection forms
No external links or known malicious Indicators of Compromise
Page content appears to be a simple promotional message
Domain age information unavailable

Details

Page Title

AA888

Scan Type

public

Language

🇵🇹

Portuguese

(80% confidence)

Category

technology software

(56%)

Domain Information

The domain 'aa-888.win' uses the .win top-level domain while skipping any subdomain. Count 6 characters in 'aa-888' holding two vowels versus 0 consonants, along with three digits and 1 hyphen. Tokenizing the label suggests three words: a, a, 888. Expect 1 character per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://aa-888.win/

Page Load Overview

1.94s
Total Load Time
15
HTTP Requests
2
Domains
405 KB
Total Size

Language Analysis

Primary Language

🇵🇹Portuguese
Code: pt
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:pt
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:pt-BR
Text Length:133 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software56% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

technology software
56%
adult content
28%
documentation technical
26%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
518.244.18.124United States
AS16509AMAZON-02
5108.138.7.104United States
AS16509AMAZON-02
5124.220.203.60United States
153--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T13703B620401A945E9533BCD375C93F12BD2D4127ABD2C856FB6D29ACCFE78AF6254388

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:GwVo8TlTieNV9AZPc+bxLBzU29DMUfk1CshPpSwi6F9MuEqhFe29/C8gbt0eqcft:jv2Tqv5iqcfTzhBeC3D

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:37777:JeCDkFiiJAu4AwERqMgOCAEALRHlMa8EmYDMLLANgyGAuRb4BQon8AzEqsBnAeaoYZEBMCSEUWHGB6l1BgkCcAYCChiQEREQ

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0000387e7e7e3e00
Perceptual Hash:957869876696da25
Difference Hash:b133f0eccef4dcb2
Wavelet Hash:08003efe7f7e7e00
Color Hash:#5b40bf

Scan History

Scan history not available

Unable to load historical scan data