Security Report: xocdiapro.co - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/b47f29f4-5c61-4660-91a9-71fc0f0dbd5d Domain and IP registration (RDAP)/api/v1/rdap/b47f29f4-5c61-4660-91a9-71fc0f0dbd5dHow often this domain was scanned/api/v1/domain/stats/xocdiapro.co Scan history for this domain/api/v1/domain/history/xocdiapro.co?limit=15

This website contacted 9 IPs in 2 countries across 6 domains to perform 50 HTTP transactions. The main domain is xocdiapro.co and was registered 1 year 5 months ago.

Submitted URL: https://xocdiapro.co/

AI Security Verdict

Confirmed Scam

Confidence: 97%

Risk Score

Compromised gambling page carries an analyst-vetted ClickFix fake 'Human Verification' overlay and EtherHiding blockchain loader; the primary domain and URL are flagged as malware.

Risk Factors (5)

Injected fake 'Human Verification' overlay instructing Windows users to open Terminal via Win+X and paste attacker-supplied commands.

Blockchain-based EtherHiding loader retrieves malicious next-stage content from a smart contract.

Analyst-vetted ClickFix kit roster match for a known Windows phishing/malware campaign.

Primary domain and full URL are reported as malware by multiple threat-intelligence sources.

Critical network IDS alerts for malware and EtherHiding exfiltration behavior.

Domain age information unavailable

Details

Page Title

Xóc đĩa online – Game xóc đĩa đổi thưởng hấp dẫn uy tín 2025

Scan Type

public

Favicon Hash

MMH3: -696468203

MD5: e3acabb56d161f5755e0ca1393c9ff37

Domain Name Analysis

Domain 'xocdiapro.co' uses the Colombian country-code top-level domain (.co). The registrable portion 'xocdiapro' spans 9 characters containing four vowels alongside five consonants. Splitting it apart reveals 4 words: xo, cdi, a, pro. Expect 2.5 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

7.78s

Total Load Time

1.6 MB

Total Size

Language Analysis

Primary Language

🇻🇳Vietnamese

Code: vi

Confidence:80%

Script:Unknown

Direction:ltr

Detection Details

HTML Lang Attribute:vi

Text Length:7,548 chars

Detector Agreement:80%

Website Classification

Primary Category

entertainment media99% confidence

Type: dynamic

Method: ml+structural

All Detected Categories

entertainment media

99%

gambling betting

96%

social media network

53%

technology software

43%

corporate

35%

Detected Features

OG: website

Schema.org

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
10	104.21.61.66Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
5	104.20.46.180Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
5	178.16.52.101	Frankfurt am Main, Hesse, Germany	AS202412Omegatech LTD
5	185.111.111.154	Frankfurt am Main, Hesse, Germany	AS212238Datacamp Limited
5	172.67.71.179Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
5	35.227.193.242Google · CDN	Kansas City, Missouri, United States	AS396982Google LLC
5	172.67.206.243Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
5	104.26.1.211Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
5	104.26.0.211Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
50	9	-	-