Security Scan Report: xn--42cga1id4d9c7co1e.com

Site favicon
Submitted: Completed: publiccompleted
This website contacted 1 IP in 1 country across 1 domain to perform 8 HTTP transactions. The main domain is xn--42cga1id4d9c7co1e.com and was registered 13 years ago.

Submitted URL: https://xn--42cga1id4d9c7co1e.com

AI Security Verdict

Confirmed Scam

Confidence: 92%

9
Risk Score

Compromised WordPress site (13-yr-old domain) carrying the ClearFake Polygon/EtherHiding ClickFix loader plus a rival-kit cleanup script, and flagged as a malware loader; injected gambling SEO spam. Do not visit.

Risk Factors (5)
ClearFake ClickFix malware loader injected into the page body (CRITICAL, roster-anchored)
Rival-kit cleanup script that removes other injected kits and blocks navigation up to 45 seconds (HIGH)
Primary domain flagged as a malware loader by threat intelligence
Compromised WordPress installation repurposed for injected gambling SEO spam content
Three IDS 'Javascript-Obfuscator Usage' heuristics corroborating obfuscated script behaviour
Domain age information unavailable

Details

Page Title

เครื่องแยง – เครื่องแยงท่อบอยเลอร์

Scan Type

public

Domain Name Analysis

Within the commercial generic top-level domain (.com), 'xn--42cga1id4d9c7co1e.com' is registered without a subdomain. Count 21 characters in 'xn--42cga1id4d9c7co1e' containing four vowels alongside eight consonants; bonus characters include 7 digits and two hyphens. Tokenizing the label suggests 14 words: xn, 42, cg, a, 1, id, 4, d, 9, c, 7, co, 1, e. Average segment length settles at 1 character. No strong language cues emerged from the frequency lists.

Screenshot

เพแทพ แกแพย แหกา CasinoBossy - GlUcksspiel Automaten Strategie Auto-generated excerpt Published 12 เทเกกก...

Page Load Overview

2.15s
Total Load Time
53 KB
Total Size

Language Analysis

Primary Language

🇹🇭Thai
Code: th
Confidence:80%
Script:Unknown
Direction:ltr

Detection Details

HTML Lang Attribute:th
Text Length:1,711 chars
Detector Agreement:33%

Website Classification

Primary Category

gambling betting72% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

gambling betting
72%
entertainment media
70%
adult content
37%

Detected Features

Search
Articles
Comments

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
8122.155.5.245Thailand
AS9335National Telecom Public Company Limited
81--

Detected Technologies6

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T15B631A71A2BC48B67A6E43E85C747318B8B4E510DF4352E4F0FAF1884A99EF30995B1D

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:p/yZWOVAw7xL5LypQVRgUJM9e45nsNlw1N2WRKZmukq6LfG/ZVGvejRm:wZNVAw9L5WeV4vejc

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:71706:EUQacmMqXEGBYcIIABoPVSEUQSEFkwG0hOSIEKAJE0KMhCACiBABCLKoMmo8+FwpBUAbgVQCySKCIMDGRBgAEtKEECA0nopA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:bfffc7cfdfe7c3cf
Perceptual Hash:b3cf4cce99333320
Difference Hash:60748d19110d8d95
Wavelet Hash:b0b3c3c3cdc1c1cd
Color Hash:N/A

Other Hashes

Crop Resistant:60748d19110d8d95

Scan History

Scan history not available

Unable to load historical scan data