Security Report: leo88vn.vip - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/b9a56831-00db-455a-9902-625ef2fcc29d Domain and IP registration (RDAP)/api/v1/rdap/b9a56831-00db-455a-9902-625ef2fcc29dHow often this domain was scanned/api/v1/domain/stats/leo88vn.vip Scan history for this domain/api/v1/domain/history/leo88vn.vip?limit=15

This website contacted 22 IPs in 2 countries across 15 domains to perform 98 HTTP transactions. The main domain is leo88vn.vip and was registered 1 year 10 months ago.

Submitted URL: https://leo88vn.vip/

AI Security Verdict

Confirmed Scam

Confidence: 95%

Risk Score

Compromised or malicious Vietnamese gambling page serving a ClickFix fake 'Human Verification' overlay that walks Windows users into running Terminal commands; EtherHiding blockchain loader and four critical malware IDS alerts confirm the threat.

Risk Factors (5)

Known ClickFix/Windows social-engineering kit injected into the page (analyst-vetted roster match)

EtherHiding: payload stage address retrieved from a Polygon smart contract to evade takedown

Four CRITICAL IDS malware alerts (EtherHiding exfiltration) plus a HIGH Spamhaus DROP inbound alert

Obfuscated JavaScript hiding threat-feed RPC hosts, corroborated by multi-source malicious IoC on a third-party script host

Gambling/betting content on an unranked domain, including outbound links to numerous other betting brands

Domain age information unavailable

Details

Page Title

Leo88 | Khám Phá Trải Nghiệm Chơi Game Đỉnh Caoother network

Scan Type

public

Favicon Hash

MMH3: -252250590

MD5: 592a8c1620f2f2c73aace046250e9817

Domain Name Analysis

The domain name 'leo88vn.vip' uses the .vip top-level domain with no subdomain. Its registrable label 'leo88vn' stretches across 7 characters split between two vowels and 3 consonants, notching two digits. Breaking it apart gives four words: leo, 88, v, n. Average segment length settles at 1.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

3.27s

Total Load Time

4.0 MB

Total Size

Language Analysis

Primary Language

🇻🇳Vietnamese

Code: vi

Confidence:80%

Script:Unknown

Direction:ltr

Detection Details

HTML Lang Attribute:vi

Text Length:10,284 chars

Detector Agreement:100%

Website Classification

Primary Category

gambling betting100% confidence

Type: spa

Method: ml+structural

All Detected Categories

gambling betting

100%

entertainment media

97%

technology software

97%

download file sharing

87%

documentation technical

68%

Detected Features

OG: website

Schema.org

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
14	188.114.97.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
4	172.66.146.203Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
4	178.16.52.101	Frankfurt am Main, Hesse, Germany	AS202412Omegatech LTD
4	35.227.193.242Google · CDN	Kansas City, Missouri, United States	AS396982Google LLC
4	185.111.111.154	Frankfurt am Main, Hesse, Germany	AS212238Datacamp Limited
4	142.251.20.97Google · CDN	United States	AS15169Google LLC
4	188.114.97.3Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
4	188.114.96.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
4	142.251.151.4Google · CDN	United States	AS15169Google LLC
4	142.251.156.4Google · CDN	United States	AS15169Google LLC
98	22	-	-