Security Report: mahjong333pnn.site - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/bcc9a09f-704c-4cae-9632-bd72e91fdfe4 Domain and IP registration (RDAP)/api/v1/rdap/bcc9a09f-704c-4cae-9632-bd72e91fdfe4How often this domain was scanned/api/v1/domain/stats/mahjong333pnn.site Scan history for this domain/api/v1/domain/history/mahjong333pnn.site?limit=15

This website contacted 11 IPs in 2 countries across 7 domains to perform 61 HTTP transactions. The main domain is mahjong333pnn.site and was registered 8 months ago.

Submitted URL: https://mahjong333pnn.site/

AI Security Verdict

Confirmed Scam

Confidence: 97%

Risk Score

Fake Cloudflare 'verify you are human' page that copies a PowerShell command to the clipboard for the victim to run — ClickFix malware delivery, corroborated by critical EtherHiding IDS alerts and threat-intel hit.

Risk Factors (7)

Clipboard shell injection / fake CAPTCHA instructing PowerShell execution — active malware delivery

Critical IDS malware alerts (EtherHiding Exfil) on the page's traffic

Impersonation of Cloudflare's bot-verification UI to social-engineer code execution

Gambling/'SLOT GACOR' doorway content with outbound link to daftaraja.click

6 cross-domain redirects to reach the final page

Unranked domain with no legitimate business signals (legitimacy score 10/100)

Threat-intelligence malware matches on the URL and on an external resource it loads

Domain age information unavailable

Details

Page Title

SLOT MAHJONG - Link Slot Gacor Dengan Permainan Terlengkap Dan Terbaru

Scan Type

public

Favicon Hash

MMH3: 1653806253

MD5: 6b80682eea4ca62f07db15162efedc83

Domain Name Analysis

You're looking at domain 'mahjong333pnn.site' on the .site top-level domain with no subdomain. The registrable portion 'mahjong333pnn' spans 13 characters split between 2 vowels and 8 consonants, along with three digits. It segments into 4 words: mahjong, 333, pn, n. Median word length is 2.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

2.25s

Total Load Time

540 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en-ID

Text Length:1,085 chars

Detector Agreement:50%

Website Classification

Primary Category

technology software70% confidence

Type: dynamic

Method: ml+structural

All Detected Categories

technology software

70%

gambling betting

65%

documentation technical

46%

phishing scam

31%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
11	104.21.58.69Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
5	142.251.13.132Google · CDN	United States	AS15169Google LLC
5	172.67.157.119Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
5	15.197.152.159Aws · CLOUD	United States	AS16509Amazon.com, Inc.
5	34.111.175.102Google · CDN	Kansas City, Missouri, United States	AS396982Google LLC
5	104.21.27.152Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
5	3.33.155.121Aws · CLOUD	United States	AS16509Amazon.com, Inc.
5	172.67.142.245Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
5	87.250.250.119Yandex · CLOUD	Russia	AS13238YANDEX LLC
5	87.250.251.119Yandex · CLOUD	Russia	AS13238YANDEX LLC
61	11	-	-