Security Scan Report: gfg1777.com

Redirected to: https://gfg1777.com/

Site favicon
Submitted: Nov 22, 2025, 6:32:30 PMCompleted: Nov 22, 2025, 6:35:28 PMpubliccompleted
Loading additional data...

Summary

This website contacted 31 IPs in 4 countries across 9 domains to perform 171 HTTP transactions. The main domain is gfg1777.com and was registered NaN years ago.

Submitted URL: http://gfg1777.com/

Effective URL: https://gfg1777.com/Redirected

AI Security Verdict

Confirmed Scam

Confidence: 95%

10
Risk Score

New unranked site collecting passwords – confirmed phishing scam.

Risk Factors
Brand new domain (<7 days) with credential collection form
Unranked, low‑reputation domain
Social engineering via monetary incentives
Domain age information unavailable

Details

Page Title

gfg1777 Bem-vindo

Scan Type

public

Language

🇵🇹

Portuguese

(80% confidence)

Category

gambling betting

(87%)

Domain Information

The domain 'gfg1777.com' uses the commercial generic top-level domain (.com) while skipping any subdomain. The registrable portion 'gfg1777' spans 7 characters holding zero vowels versus three consonants, notching 4 digits. Segmentation suggests 3 words: gf, g, 1777. Average segment length settles at two characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of http://gfg1777.com/

Page Load Overview

0.53s
Total Load Time
171
HTTP Requests
9
Domains
16.9 MB
Total Size

Language Analysis

Primary Language

🇵🇹Portuguese
Code: pt
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:pt
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:pt
Text Length:3,204 chars
Detector Agreement:100%

Website Classification

Primary Category

gambling betting87% confidence
Type: static
Method: ml+structural

All Detected Categories

gambling betting
87%
cryptocurrency blockchain
85%
technology software
66%
entertainment media
63%
finance banking
63%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
8113.32.99.81New York, New York, United States
AS16509AMAZON-02
6352.222.236.2United States
AS16509AMAZON-02
2152.222.236.48United States
AS16509AMAZON-02
1456.125.160.209São Paulo, São Paulo, Brazil
AS16509AMAZON-02
652.222.136.19United States
AS16509AMAZON-02
513.32.99.32New York, New York, United States
AS16509AMAZON-02
552.222.236.58United States
AS16509AMAZON-02
552.222.236.112United States
AS16509AMAZON-02
552.222.136.15United States
AS16509AMAZON-02
552.222.136.101United States
AS16509AMAZON-02
17131--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1BE948D3A7A53380F2967CAA4F4B21E193D1AAB2FC1180F7C657D37613E9A9E054353E4

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

6144:+FUETsfaf8UqU6qbF/SxCfNqUN8D8E8q8E89:HqbF/DN8A9X99

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:440553:cIdQWpENINJ1icKAEYmhEASFBDUQ+oTAIQKCRRpACDQy2BoETmYAQERMpoKRHEhERD+QiMvEUEEEIYQDOwDg4zqBASIxYyIY

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:4218181018181810
Perceptual Hash:cc33339926339b66
Difference Hash:4c14303434323434
Wavelet Hash:0018181818181810
Color Hash:#c6d279

Other Hashes

Crop Resistant:4c14303434323434

Scan History

Scan history not available

Unable to load historical scan data