Security Scan Report: win888slots.mx

Redirected to: https://www.win888slots.mx/#/

Site favicon
Submitted: Jan 15, 2026, 1:28:34 AMCompleted: Jan 15, 2026, 1:30:43 AMpubliccompleted
Loading additional data...

Summary

This website contacted 10 IPs in 5 countries across 11 domains to perform 220 HTTP transactions. The main domain is win888slots.mx and was registered NaN years ago.

Submitted URL: http://win888slots.mx/

Effective URL: https://www.win888slots.mx/#/Redirected

AI Security Verdict

High Risk

Confidence: 88%

9
Risk Score

Brand‑new, unranked domain impersonating a known brand – high‑risk phishing site.

Risk Factors
Brand impersonation on an unranked, brand‑new domain
Domain age less than 7 days (critical)
Domain not listed in Cisco Umbrella top 1M (low reputation)
Domain age information unavailable

Details

Page Title

O Cassino que está Bombando!

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

entertainment media

(51%)

Domain Information

Within the Mexican country-code top-level domain (.mx), 'win888slots.mx' is registered. Count 11 characters in 'win888slots' holding two vowels versus 6 consonants, plus three digits. Word splitting yields three words: win, 888, slots. Average segment length settles at 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of http://win888slots.mx/

Page Load Overview

4.15s
Total Load Time
248
HTTP Requests
13
Domains
5.0 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en
Text Length:2,053 chars
Detector Agreement:50%

Website Classification

Primary Category

entertainment media51% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

entertainment media
51%
technology software
40%
adult content
29%
gambling betting
28%
cryptocurrency blockchain
26%

Detected Features

OG: website

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
32185.89.210.153China
24157.240.0.6Frankfurt am Main, Hesse, Germany
AS32934FACEBOOK
2452.222.136.70United States
AS16509AMAZON-02
24162.141.183.88Netherlands
AS135391AOFEI DATA INTERNATIONAL COMPANY LIMITED
2456.126.172.37São Paulo, São Paulo, Brazil
AS16509AMAZON-02
24172.217.18.2Unknown
24106.54.228.253Unknown
2423.36.162.7Unknown
24164.90.105.105Frankfurt am Main, Hesse, Germany
AS10122NETSTAR SG PTE. LTD.
2418.66.122.76United States
AS16509AMAZON-02
24810--

Detected Technologies3

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T16A643B39B107B8970867D9C4B0A22E15EDA77B3FC22958D4FA9D32A01FC7CE865653C4

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

6144:k6Ut69Z+sVeuLl+6Ut69Z+sVeuLlaYNMbxv1X9LRuLDnImvyDT7mHXHHjqONd:Exv1X9LRuLDnImvyDT7mHXHHjqcd

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:307334:6gHhsCgAEBIwYEIEAgmtOZADgGEiASJgyICLwQgGgWsAYHIoGzQYAlAyTFAdmDRCAALKoAWYTFUBwMFQBCAlQQDECwYSUPMo

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:1c181818000e0c00
Perceptual Hash:98d99ab2639a9c4d
Difference Hash:b0b2b2b2133c3c33
Wavelet Hash:1e1c1818181e1e18
Color Hash:#a32dd2

Scan History

Scan history not available

Unable to load historical scan data