Security Scan: VegasHero

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/acf01855-2739-44cd-854e-c3211e5f5024 Domain and IP registration (RDAP)/api/v1/rdap/acf01855-2739-44cd-854e-c3211e5f5024How often this domain was scanned/api/v1/domain/stats/nationalonline3.bond Scan history for this domain/api/v1/domain/history/nationalonline3.bond?limit=15

This website contacted 47 IPs in 6 countries across 45 domains to perform 273 HTTP transactions. The main domain is nationalonline3.bond and was registered 10 months ago.

Submitted URL: http://nationalonline3.bond/registration/?id=slotvcasino

Effective URL:

https://vegashero2.com/de/registration

Redirected

AI Security Verdict

High Risk

Confidence: 85%

Risk Score

The site pretends to be the official VegasHero betting platform, uses an unranked domain, multiple redirects and heavily obfuscated JavaScript, indicating a high‑risk brand‑impersonation scam.

Risk Factors (5)

Brand impersonation with domain mismatch

Unranked / low‑reputation domain

Excessive redirects (4)

Critical JavaScript obfuscation

Gambling‑related branding on a non‑official domain

Domain age information unavailable

Details

Page Title

VegasHero

Scan Type

public

Domain Name Analysis

Within the .bond top-level domain, 'nationalonline3.bond' is registered while skipping any subdomain. Count 15 characters in 'nationalonline3' containing 7 vowels alongside 7 consonants, plus 1 digit. Word splitting yields three words: national, online, 3. Average segment length settles at six characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

8.58s

Total Load Time

6.3 MB

Total Size

Language Analysis

Primary Language

🇩🇪German

Code: de

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:de-de

Text Length:13,174 chars

Detector Agreement:67%

Website Classification

Primary Category

technology software33% confidence

Type: static

Method: ml+structural

All Detected Categories

technology software

33%

gambling betting

27%

corporate

25%

Detected Features

OG: website

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
43	35.244.174.68	Kansas City, Missouri, United States	AS396982Google LLC
5	79.125.31.154	Dublin, Leinster, Ireland	AS16509Amazon.com, Inc.
5	104.21.48.84	United States	AS13335Cloudflare, Inc.
5	108.128.60.29	Dublin, Leinster, Ireland	AS16509Amazon.com, Inc.
5	193.0.160.130	United States	AS54312Rocket Fuel Inc.
5	52.87.20.66	Ashburn, Virginia, United States	AS14618Amazon.com, Inc.
5	188.114.96.3	United States	AS13335Cloudflare, Inc.
5	108.131.231.133	Dublin, Leinster, Ireland	AS16509Amazon.com, Inc.
5	54.205.87.154	Ashburn, Virginia, United States	AS14618Amazon.com, Inc.
5	37.157.2.230	Denmark	AS198622Adform A/S
273	47	-	-

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T179B4D65DBB78593E075CC3858C34DDA99D7D4EC0C07190B8B7AF8A56434CAA4E83E26E

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

6144:UYH+5wsXwsiwsywsiws5Ug6+wsDwsa5yiitOaA8I4OqmL:T+asgshsxshs0sksa5II84d

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:500138:AwWAZb4YgwANMiErQrAgGI4KwJMFzBgRTWMhjeGBg0KEWFUYUibRB5jgYA0kGAJ5DECYPCKAIAwGAMteNUcAHmRB1gEAARUU

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:003c3c3c3c3c3c04

Perceptual Hash:c64d307d7d926992

Difference Hash:6861616169616d6d

Wavelet Hash:3c3c3c3c3c3c3c3c

Color Hash:#c879d2

Other Hashes

Crop Resistant:6861616169616d6d

Scan History

Scan history not available

Unable to load historical scan data

Security Scan Report: nationalonline3.bond