Security Scan Report: winnercasino1.fr

Site favicon
Submitted: Completed: publiccompleted
This website contacted 7 IPs in 2 countries across 5 domains to perform 39 HTTP transactions. The main domain is winnercasino1.fr and was registered 1 month ago.

Submitted URL: https://winnercasino1.fr/

AI Security Verdict

Moderate Risk

Confidence: 60%

5
Risk Score

New (33-day) unranked casino site using a digit-suffixed lookalike of an established brand and unverifiable Curaçao/licence claims; no credential or payment forms and no threat-intel hits, so unproven gambling risk rather than confirmed phishing.

Risk Factors (5)
Very new domain (33 days) making unverifiable longevity and licensing claims
Digit-suffixed lookalike of an established casino brand name on a non-official domain
Gambling offer aimed at French players under a Curaçao licence rather than a domestic authorisation
Chain of six cross-domain redirects to reach the landing page
Marketing claims (297,000 active players, €239M paid monthly, 18-minute withdrawals) are unsourced and unverifiable
Safety Factors (4)
No credential, login or payment form present on the page (password, disguised-password and payment field counts all zero)
No Indicators of Compromise matches, no YARA malware pattern, no IDS alert and no known-kit roster match
No cross-origin credential exfiltration or suspicious JavaScript behaviour detected
Only first-party static content; scripts loaded from Google Fonts and Yandex Metrica
Domain age information unavailable

Details

Page Title

Winner Casino — Casino en ligne officiel et agréé

Scan Type

public

Domain Name Analysis

The domain 'winnercasino1.fr' uses the French country-code top-level domain (.fr). The core label 'winnercasino1' covers 13 characters with five vowels and seven consonants, notching 1 digit. Splitting it apart reveals three words: winner, casino, 1. Average segment length settles at six characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://winnercasino1.fr/

Page Load Overview

1.78s
Total Load Time
5.6 MB
Total Size

Language Analysis

Primary Language

🇫🇷French
Code: fr
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:fr
Text Length:17,213 chars
Detector Agreement:100%

Website Classification

Primary Category

gambling betting55% confidence
Type: static
Method: ml+structural

All Detected Categories

gambling betting
55%
corporate
25%

Detected Features

OG: website

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
9188.114.96.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
5188.114.97.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
5142.251.14.95Google · CDNUnited States
AS15169Google LLC
5142.250.154.94Google · CDNUnited States
AS15169Google LLC
587.250.250.119Yandex · CLOUDRussia
AS13238YANDEX LLC
587.250.251.119Yandex · CLOUDRussia
AS13238YANDEX LLC
577.88.21.119Yandex · CLOUDMoscow, Moscow, Russia
AS13238YANDEX LLC
397--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T107C3092720152536317B49C0E827B7AA72ADE687FE4B630856F9457883CFDC8F5339A4

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:sCUUF1M/Z+vTNSY8H0YFv3ibCfnAKXpuiy6xGLIEsV5nPpv9CRagMgWguqXY9lV/:sCRF1M/Z+vg7DVEfp8

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:126454:wu4qH9KSE6GAQAxDA44CCAJiCwhSQwjeACiQEkDBD6AcgMYApITq6gwxMgHkaGqAiwCAFJSBOAT9XTakhQdSEYE4hU4MARAA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffff818181c3c300
Perceptual Hash:e9c196c553694379
Difference Hash:ca2b2b0b2b2b2bcd
Wavelet Hash:ffff818181fbc100
Color Hash:#7740bf

Scan History

Scan history not available

Unable to load historical scan data