Security Scan Report: slot888gacors.online

Submitted: Completed: publiccompleted
This website contacted 14 IPs in 3 countries across 9 domains to perform 69 HTTP transactions. The main domain is slot888gacors.online and was registered 11 months ago.

Submitted URL: https://slot888gacors.online/

AI Security Verdict

Confirmed Scam

Confidence: 97%

10
Risk Score

Fake Cloudflare 'verify you are human' page that copies a PowerShell command to the clipboard (clickfix) while EtherHiding exfiltration traffic fires — active malware delivery, not a real verification.

Risk Factors (6)
Clipboard injection of a PowerShell/Win+R execution command (clickfix malware delivery)
Fake bot-verification/Cloudflare-branded CAPTCHA used as social engineering to run code
19 CRITICAL EtherHiding exfiltration IDS alerts
Gambling ('judi slot gacor') content used as the lure, with off-domain affiliate redirect
Threat-intel malware reports on the primary URL and on a third-party resource it loads
Domain is unranked with no legitimacy signals (legitimacy score 10/100)
Domain age information unavailable

Details

Page Title

SLOT888 | Judi Slot Game Jamin Gampang Menang dengan MODAL KECIL!

Scan Type

public

Domain Name Analysis

The domain name 'slot888gacors.online' uses the modern generic top-level domain (.online) while skipping any subdomain. The core label 'slot888gacors' covers 13 characters containing three vowels alongside seven consonants; bonus characters include 3 digits. It segments into five words: slot, 888, gac, or, s. Expect three characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://slot888gacors.online/

Page Load Overview

10.67s
Total Load Time
222 KB
Total Size

Language Analysis

Primary Language

🇮🇩Indonesian
Code: id
Confidence:80%
Script:Unknown
Direction:ltr

Detection Details

HTML Lang Attribute:id
Text Length:1,285 chars
Detector Agreement:50%

Website Classification

Primary Category

gambling betting75% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

gambling betting
75%
technology software
73%
documentation technical
58%
phishing scam
42%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
17104.21.89.117Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
4172.67.141.161Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
4142.251.110.132Google · CDNUnited States
AS15169Google LLC
4104.16.78.6Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
4188.114.97.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
43.33.155.121Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
4146.75.121.137Fastly · CDNFrankfurt am Main, Hesse, Germany
AS54113Fastly, Inc.
4188.114.96.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
434.111.175.102Google · CDNKansas City, Missouri, United States
AS396982Google LLC
4104.21.27.152Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
6914--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T18983D623A8E510686197C36E6AA2B7793E39C003D7019DEDB99C6794CFC63DB357224C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:/Z5F4g5A4WR2vUBO3ATiCNM3V0SCmDKtBtGt6t8tXGaSMPUJ75:J3ZV0S/yruCAXGNDN

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:88506:JiQFKwsAjBDBdCQqEaKTBggM8wDMhwGiZSESBiQBCDCORMyRyEgVITDUAoo9oBZQlAwAqAwIAUBQCFYWEDgggulIxGPFJx1Q

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:cfc3c3ffffffffe7
Perceptual Hash:b03932cec6cec6cc
Difference Hash:189a16180000100c
Wavelet Hash:0f030f0f3f3f0f03
Color Hash:#c3c587

Other Hashes

Crop Resistant:189a16180000100c

Scan History

Scan history not available

Unable to load historical scan data