Security Scan Report: ndxx1-bento123.com

Site favicon
Submitted: Jan 1, 2026, 3:03:24 PMCompleted: Jan 1, 2026, 3:04:43 PMpubliccompleted
Loading additional data...

Summary

This website contacted 9 IPs in 3 countries across 7 domains to perform 315 HTTP transactions. The main domain is ndxx1-bento123.com and was registered NaN years ago.

Submitted URL: https://ndxx1-bento123.com/desktop/game/slot/ggsoft

AI Security Verdict

High Risk

Confidence: 88%

8
Risk Score

New gambling site with hidden password field; likely phishing for credentials.

Risk Factors
Very new domain (<30 days) collecting credentials
Hidden password field that users cannot see
Unranked domain lacking established reputation
Credential harvesting form on a gambling site
Domain age information unavailable

Details

Page Title

BENTO123 # Situs Slot Online Dengan Bonus Promosi Paling Menguntungkan 2025.

Scan Type

public

Language

🇮🇩

ID

(80% confidence)

Category

entertainment media

(89%)

Domain Information

Within the commercial generic top-level domain (.com), 'ndxx1-bento123.com' is registered without a subdomain. Its registrable label 'ndxx1-bento123' stretches across 14 characters holding 2 vowels versus seven consonants; bonus characters include 4 digits and one hyphen. Segmentation suggests 5 words: nd, xx, 1, bento, 123. Median word length is 2 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://ndxx1-bento123.com/desktop/game/slot/ggsoft

Page Load Overview

11.25s
Total Load Time
227
HTTP Requests
7
Domains
608 KB
Total Size

Language Analysis

Primary Language

🇮🇩Indonesian
Code: id
Confidence:80%
Script:Unknown
Direction:ltr

Detection Details

Language Code:id
Detection Confidence:80%
Script Type:Unknown
HTML Lang Attribute:id
Text Length:3,603 chars
Detector Agreement:80%

Website Classification

Primary Category

entertainment media89% confidence
Type: webapp
Method: ml+structural

All Detected Categories

entertainment media
89%
technology software
87%
gambling betting
86%
adult content
54%
cryptocurrency blockchain
35%

Detected Features

Login Form
OG: website

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
2765.8.102.99United States
AS16509AMAZON-02
2565.8.102.72Mauritius
2523.50.131.153Frankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
2523.36.162.17Frankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
2552.222.232.184United States
AS16509AMAZON-02
2545.192.223.64Mauritius
AS13335CLOUDFLARENET
2552.222.232.119United States
AS16509AMAZON-02
2523.36.162.25Frankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
2523.50.131.150Frankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
2279--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1C4F3EA2254E1342212B390F57DA4BE0BEEC5A603C21A8E44B1FD57B59FE7F569C0336A

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:x9CZOXOYBtZ+gDTOsFqcTQf/AYvpILCsagvVknrJlxLbX0/SkXYzx/sauh3Z:LCZOXOYBtZbDT1Qf1p6YVxzx/sauhp

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:158950:HwASAQQ7Eg55INhHYMArgRIkmEAUURAsAsUkNHEDUEAIkoGqBMgEmWBZ2IFUoAcCAhCMEAD8ABgCJAosdiQNsESyg8gQQ1Ik

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:2010fd3d003c3d3d
Perceptual Hash:8a7423772d8bd338
Difference Hash:4db0f171f1696969
Wavelet Hash:2038ff3f003c3d3d
Color Hash:#784b3a

Scan History

Scan history not available

Unable to load historical scan data