Security Scan Report: evg-crystal.ru

Site favicon
Submitted: Completed: publiccompleted
This website contacted 4 IPs in 1 country across 2 domains to perform 104 HTTP transactions. The main domain is evg-crystal.ru.

Submitted URL: https://evg-crystal.ru

AI Security Verdict

High Risk

Confidence: 72%

7
Risk Score

Unrelated aged domain evg-crystal.ru impersonates the official 'Lucky Bear / Лаки Бир' casino, promoting mirror access to illegal gambling; no forms or malware found, but brand misuse and bypass-block marketing make it high risk.

Risk Factors (4)
Different entity's gambling brand presented as the page's own official site on a mismatched domain
Illegal online gambling promotion with instructions to evade regional blocking via mirror links
Repurposed/aged unrelated domain (evg-crystal.ru) carrying casino SEO content
Unranked in Cisco Umbrella with no verifiable operator/legal identity shown
Domain age information unavailable

Details

Page Title

Лаки Бир – Lucky Bear casino | Официальный сайт, зеркало и вход · 2026

Scan Type

public

Domain Name Analysis

The domain name 'evg-crystal.ru' uses the Russian country-code top-level domain (.ru). Count 11 characters in 'evg-crystal' containing 2 vowels alongside eight consonants; bonus characters include one hyphen. It segments into 2 words: evg, crystal. Median word length is five characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://evg-crystal.ru

Page Load Overview

2.31s
Total Load Time
2.4 MB
Total Size

Language Analysis

Primary Language

🇷🇺Russian
Code: ru
Confidence:80%
Script:Cyrillic
Direction:ltr

Detection Details

HTML Lang Attribute:ru
Text Length:9,142 chars
Detector Agreement:80%

Website Classification

Primary Category

gambling betting99% confidence
Type: static
Method: ml+structural

All Detected Categories

gambling betting
99%
finance banking
96%
entertainment media
95%
news media journalism
59%
adult content
54%

Detected Features

Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
26172.67.130.6Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
26104.21.72.124Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
26104.21.3.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
26172.67.184.158Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1044--

Detected Technologies3

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T11E63222190F9186B0192F0D5DF152E4F7E91427BDD664606B3BC0EEA3FC2E5ACD63928

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:4ViJkEr42EjszozK+qi2+DN8WQEaRm7ioTp+rFsTsfR7GMiN383Tegb:VPX+zQEIm7irsTsZanM5

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:67601:oDSMqkgACUGghQmFmmApBjBwKeDS6Qgk8AtAAgaIClAGaMFhYhAKBQAMOSkSgPiFQWAAIEzghACAHEWTIBKCQGAZCpXZ0AFA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:02565e7e78007c00
Perceptual Hash:80b46f6b69c53785
Difference Hash:8a94b49490edc4c5
Wavelet Hash:225e7e7e7f007e00
Color Hash:#5cac53

Scan History

Scan history not available

Unable to load historical scan data