ScanMalware.com

Security Scan Report: 1xbeet.xyz

Site favicon
Submitted: Sep 12, 2026, 6:14:22 PMCompleted: Sep 12, 2026, 6:17:08 PMpubliccompleted

Summary

This website contacted 2 IPs in 1 country across 2 domains to perform 2 HTTP transactions. The main domain is 1xbeet.xyz and was registered 2 years 8 months ago.

Submitted URL: https://1xbeet.xyz

AI Security Verdict

High Risk

Confidence: 70%

7
Risk Score

Typosquatted 1xbeet.xyz mimicking 1xBet, serving login-guide content with a primary-domain malware threat-intel hit and links to a second flagged gambling domain. No forms found, but brand imitation plus IoC signals make it high-risk.

Risk Factors
Typosquatted domain mimicking 1xBet brand
Primary domain reported as malware/clearfake in threat intelligence
Third-party resource linked (betwinner.bet) also flagged in threat intelligence
Domain unranked / no reputation in Cisco Umbrella
Content built around another entity's brand (1xBet) on a non-official domain
Domain age information unavailable

Details

Page Title

how to login 1xbet without google authenticator​ | fix login problem

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

technology software

(87%)

Domain Information

Domain '1xbeet.xyz' uses the open generic top-level domain (.xyz) while skipping any subdomain. Count 6 characters in '1xbeet' with 2 vowels and three consonants; bonus characters include 1 digit. It segments into 3 words: 1, x, beet. The median word length lands at one character. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://1xbeet.xyz

Page Load Overview

39.64s
Total Load Time
50
HTTP Requests
2
Domains
481 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en-US
Text Length:10,542 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software87% confidence
Type: spa
Method: ml+structural

All Detected Categories

technology software
87%
gambling betting
80%
documentation technical
59%
education learning
58%
government public service
46%

Detected Features

OG: website

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
25185.111.111.158Frankfurt am Main, Hesse, Germany
AS212238Datacamp Limited
25185.111.111.157Frankfurt am Main, Hesse, Germany
AS212238Datacamp Limited
502--

Page Statistics

50
Requests
2
Unique Domains
756.6 KB
Total Size

Detected Technologies8

Open-Graph-Protocolvwebsite
100%
MetaGenerator
100%
JQueryv3.7.1
100%
WordPress
85%
PHP
50%
MySQL
50%
Bunny
40%
Swiper
20%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1F471743BFA4E8A0B03259369B157334CC61D5C8BC278DF38E525126E1FF1BE4A2A7611

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

48:Pzq7l08cHF6mvrViXKpHafstodwV+jqojg2ojjbLQbKcy9lMrl4lkGh4CVwN8wNb:Pu7lQFSgtSAyqgFgjHg7YkfSON

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:3729:AhIAABRAKEiEAAARhMQARAOAAkCEBAAALJEABIQAAIABABQgEQAAEBEAAAEAwhEgCAETAQAAAgZEAAIghFCQCkEAIgiJAYkE

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Scan History

Scan history not available

Unable to load historical scan data