Security Scan Report: coldthicket.shop

Submitted: Completed: publiccompleted
This website contacted 2 IPs in 2 countries across 4 domains to perform 37 HTTP transactions. The main domain is coldthicket.shop.

Submitted URL: https://coldthicket.shop

AI Security Verdict

High Risk

Confidence: 66%

7
Risk Score

Unranked, geo-blocked page presenting the 'Coldbet' brand on a mismatched domain with no forms or malware, but flagged by IDS for Spamhaus-listed and hostile-domain traffic. Treat as an untrusted gambling/mirror site.

Risk Factors (4)
Brand 'Coldbet' presented on a non-matching domain (coldthicket.shop) with contact email on cold.bet
Unranked / no established reputation for the scanned domain
Geo-blocking access-denied interstitial exposing bare IP address
Suricata HIGH alerts: Spamhaus DROP-listed inbound traffic and likely-hostile *.top domain DNS/HTTP traffic
Domain age information unavailable

Details

Page Title

Coldbetother network

Scan Type

public

Domain Name Analysis

The domain 'coldthicket.shop' uses the commerce-oriented generic top-level domain (.shop) with no subdomain. Its registrable label 'coldthicket' stretches across 11 characters holding three vowels versus eight consonants. Splitting it apart reveals 2 words: cold, thicket. Median word length is 5.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://coldthicket.shop

Page Load Overview

N/A
Total Load Time
157 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:59%
Script:Latin
Direction:ltr

Detection Details

Text Length:108 chars
Detector Agreement:100%

Website Classification

Primary Category

gambling betting53% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

gambling betting
53%
news media journalism
48%
documentation technical
43%
phishing scam
41%
adult content
40%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1985.158.149.49Azerbaijan
AS202492Silverhill Group Holding Ltd
1892.223.124.62Frankfurt am Main, Hesse, Germany
AS199524G-Core Labs S.A.
02--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T15C92A516E49DB02EBBE751C4983A6ACBF1BFE32BC24E41A551FDD5E00646A27B707C10

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:1JbVq0oh6Ns6oeVCr3rywsf3EqOt8H7ibfp/B:1JbVq0oFr3rywy/Oa+bfp/B

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:19762:JrqCCAZXRdx5MEyFlBDQKDwKokERBAAWaBEQmRAoJ24FOACgM8ygCAAgSCWYAFUUKkxsgRCQ3M48BQHApJqw8ygACiglgFF5

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0000181818000000
Perceptual Hash:c8c9627299cd7770
Difference Hash:80ccb2b2b2b0ccd0
Wavelet Hash:f8f8f8f8f8703018
Color Hash:#8a1f93

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data