Security Report: tuasesorcontable.com.co - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/d0a9bf28-fb06-4438-880a-66e155e45a3d Domain and IP registration (RDAP)/api/v1/rdap/d0a9bf28-fb06-4438-880a-66e155e45a3dHow often this domain was scanned/api/v1/domain/stats/tuasesorcontable.com.co Scan history for this domain/api/v1/domain/history/tuasesorcontable.com.co?limit=15

This website contacted 6 IPs in 2 countries across 6 domains to perform 90 HTTP transactions. The main domain is tuasesorcontable.com.co and was registered 3 months ago.

Submitted URL: https://tuasesorcontable.com.co/

AI Security Verdict

Confirmed Scam

Confidence: 97%

Risk Score

Compromised/repurposed domain serving an injected ClickFix kit: a fake Cloudflare 'Human Verification' overlay loads a blockchain-resolved payload (EtherHiding) and tells Windows users to open Terminal. Malware distribution — avoid.

Risk Factors (6)

Known malicious ClickFix kit (analyst-vetted, CRITICAL phishing) with a fake Cloudflare 'Human Verification' overlay directing users to Terminal/PowerShell

EtherHiding / blockchain-based payload retrieval via Polygon RPC and smart contract getDomain() calls

Obfuscated JavaScript concealing threat-feed hosts (1rpc.io, polygon.drpc.org, polygon.gateway.tenderly.co)

Primary domain and URL matched in malware threat intelligence feeds (iclickfix, unknown malware)

Domain only 92 days old, unranked, presenting an unrelated Vietnamese gambling brand (Iwin Club) and claiming a domain change to this host

Page text tries to pre-empt security review ('not a robot', fake connection security challenge)

Domain age information unavailable

Details

Page Title

Iwin Tuase ⭐️ Iwin Club | Iwinclub - Game Bài Đổi Thưởng Uy Tín #1 2026from scan record

Scan Type

public

Favicon Hash

MMH3: 1783598889

MD5: 22d031568e79b5706cb369ec2347f7a0

Domain Name Analysis

The domain name 'tuasesorcontable.com.co' uses the Colombian country-code top-level domain (.com.co) without a subdomain. The second-level label 'tuasesorcontable' is 16 characters long containing 7 vowels alongside nine consonants. Tokenizing the label suggests 4 words: tu, asesor, con, table. The median word length lands at 4 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

6.28s

Total Load Time

1.7 MB

Total Size

Language Analysis

Primary Language

🇻🇳Vietnamese

Code: vi

Confidence:70%

Script:Unknown

Direction:ltr

Detection Details

HTML Lang Attribute:en-US

Text Length:10,264 chars

Detector Agreement:100%

Language mismatch: Declared as en-US but detected as vi

Website Classification

Primary Category

gambling betting65% confidence

Type: spa

Method: ml+structural

All Detected Categories

gambling betting

65%

corporate

35%

news/blog

20%

Detected Features

OG: website

Schema.org

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
15	188.114.97.3Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
15	172.66.146.203Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
15	178.16.52.101	Frankfurt am Main, Hesse, Germany	AS202412Omegatech LTD
15	188.114.96.3Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
15	185.111.111.156	Frankfurt am Main, Hesse, Germany	AS212238Datacamp Limited
15	192.178.183.97Google · CDN	United States	AS15169Google LLC
90	6	-	-