Security Scan Report: vnbj66.com

Site favicon
Submitted: Completed: publiccompleted
This website contacted 3 IPs in 3 countries across 3 domains to perform 171 HTTP transactions. The main domain is vnbj66.com and was registered 1 year 5 months ago.

Submitted URL: https://vnbj66.com

AI Security Verdict

Confirmed Scam

Confidence: 96%

10
Risk Score

Gambling/cockfighting page carrying two analyst-vetted ClickFix phishing kits: a fake 'Human Verification' overlay and a blockchain-hosted (EtherHiding) loader that pushes Terminal paste-to-execute malware to Windows visitors.

Risk Factors (5)
ClickFix social-engineering overlay ('Human Verification') instructing Windows users to paste attacker code into Terminal
Packed blockchain-hosted loader (EtherHiding) retrieving a malicious second stage from a smart contract
Obfuscated JavaScript concealing known-attacker blockchain RPC hosts
Critical exploit-kit and malware-exfiltration IDS alerts on traffic from this page
Untrusted unranked script host browse-codes-enter.beer consistent with the ErrTraffic/ClickFix infrastructure
Domain age information unavailable

Details

Page Title

BJ66 Da Ga Truc Tiep | Đấu Trường Kịch Tính Sống Động

Scan Type

public

Domain Name Analysis

You're looking at domain 'vnbj66.com' on the commercial generic top-level domain (.com) and has no subdomain. Its registrable label 'vnbj66' stretches across 6 characters holding 0 vowels versus four consonants; bonus characters include two digits. Tokenizing the label suggests 4 words: v, n, bj, 66. Median word length is 1.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://vnbj66.com

Page Load Overview

3.37s
Total Load Time
3.4 MB
Total Size

Language Analysis

Primary Language

🇻🇳Vietnamese
Code: vi
Confidence:62%
Script:Unknown
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:15,372 chars
Detector Agreement:80%
Language mismatch: Declared as en-US but detected as vi

Website Classification

Primary Category

entertainment media97% confidence
Type: spa
Method: ml+structural

All Detected Categories

entertainment media
97%
adult content
84%
gambling betting
80%
government public service
61%
corporate
35%

Detected Features

OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
57139.59.117.152Singapore, Singapore
AS14061DigitalOcean, LLC
57132.145.155.63Oracle · CLOUDAshburn, Virginia, United States
AS31898Oracle Corporation
57178.16.52.101Frankfurt am Main, Hesse, Germany
AS202412Omegatech LTD
1713--

Detected Technologies8

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T10E03B8736350412A7B5D87DE8190F11C81E9E60BDD1462AAF3A535EC9D9CEF300B7A2E

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:C3f2e2OqkWm1oW/JXJdKPiRNn3TrGOvJC0lG2j84y6JGc58Ra2SttIhiYBvjA:pe2OqkWHWxYlOvJC0lTj84y6JGc58RaF

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:40775:xZFoQkLbDPELAkBgEFAVAjQBxIEGoIsQeHBFMaSHgBANYDEBDELQWSoksBAIgEwAlQTAkOkmIoorwYy0khnjByCEyGCgooRo

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:f9bffbfbbb9ff3f1
Perceptual Hash:ed93699a69c11e61
Difference Hash:0b64630323210723
Wavelet Hash:a8b0f1f1f090f0f0
Color Hash:#87c5a9

Other Hashes

Crop Resistant:0b64630323210723

Scan History

Scan history not available

Unable to load historical scan data