Security Scan Report: heyreferee.io

Redirected to:
https://heyreferee.io/login
Site favicon
Submitted: Nov 11, 2025, 10:18:07 AMCompleted: Nov 11, 2025, 10:18:49 AMpubliccompleted
Loading additional data...

Summary

This website contacted 4 IPs in 0 countries across 1 domain to perform 6 HTTP transactions. The main domain is heyreferee.io and was registered NaN years ago.

Submitted URL: https://heyreferee.io/

Effective URL: https://heyreferee.io/loginRedirected

AI Security Verdict

Confirmed Scam

Confidence: 96%

10
Risk Score

New, unranked domain with a suspicious password‑only login form – likely a phishing site.

Risk Factors
Brand‑new domain (<7 days) hosting a password‑only login form
Password field without accompanying username/email field
Unranked domain with no established reputation
Potential brand impersonation on a non‑official domain
Domain age information unavailable

Details

Page Title

HeyRef!

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

gambling betting

(56%)

Domain Information

The domain 'heyreferee.io' uses the British Indian Ocean Territory country-code top-level domain (.io) without a subdomain. The second-level label 'heyreferee' is 10 characters long containing 5 vowels alongside 5 consonants. Breaking it apart gives two words: hey, referee. Expect five characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://heyreferee.io/

Page Load Overview

4.29s
Total Load Time
6
HTTP Requests
1
Domains
4.3 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en
Text Length:97 chars
Detector Agreement:100%

Website Classification

Primary Category

gambling betting56% confidence
Type: static
Method: ml+structural

All Detected Categories

gambling betting
56%
adult content
29%
government public service
28%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
318.66.102.70UnknownUnknown
118.66.102.55UnknownUnknown
118.66.102.109UnknownUnknown
118.66.102.99UnknownUnknown
64--

Content Similarity HashesFor malware variant detection

Image Hashes

Perceptual Hashes

Average Hash:N/A
Perceptual Hash:N/A
Difference Hash:N/A
Wavelet Hash:N/A
Color Hash:N/A

Other Hashes

Crop Resistant:N/A

Scan History

Scan history not available

Unable to load historical scan data