Security Scan Report: 1wkbrq.life

Site favicon
Submitted: Completed: publiccompleted
This website contacted 26 IPs in 2 countries across 17 domains to perform 608 HTTP transactions. The main domain is 1wkbrq.life and was registered 4 months ago.

Submitted URL: https://1wkbrq.life

AI Security Verdict

High Risk

Confidence: 80%

7
Risk Score

Unranked 131-day-old domain presenting itself as the 1win gambling brand, flagged in threat intelligence as an IClickFix lure with a Matanbuchus loader report on its network and repeated suspicious-domain IDS alerts. Brand impersonation plus malware-linked infrastructure; avoid.

Risk Factors (6)
Brand impersonation: presents itself as the 1win gambling brand on a non-official, unranked look-alike domain
Primary domain flagged as an IClickFix / ClickFix social-engineering lure (single-source)
Site network address flagged for Matanbuchus malware loader (single-source)
Repeated IDS alerts for suspicious *.life domain traffic
Obfuscated hostname (1wkbrq.life) with no brand relationship to the claimed brand; not in Cisco Umbrella top 1M
Circular redirect through an unrelated third-party domain
Domain age information unavailable

Details

Page Title

Online Casino & Sports Betting | 1win - 1654593.6159458219

Scan Type

public

Domain Name Analysis

Domain '1wkbrq.life' uses the .life top-level domain without a subdomain. The registrable portion '1wkbrq' spans 6 characters holding zero vowels versus 5 consonants, notching 1 digit. It segments into 4 words: 1, w, kbr, q. Median word length is one character. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://1wkbrq.life

Page Load Overview

2.22s
Total Load Time
3.8 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-001
Text Length:1,513 chars
Detector Agreement:100%

Website Classification

Primary Category

gambling betting50% confidence
Type: spa
Method: ml+structural

All Detected Categories

gambling betting
50%
adult content
37%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
33194.67.193.77Russia
AS211072Mfi Investments Limited
23194.67.193.4Russia
AS211072Mfi Investments Limited
23194.67.193.215Russia
AS211072Mfi Investments Limited
23142.251.20.97Google · CDNUnited States
AS15169Google LLC
23194.67.193.67Russia
AS211072Mfi Investments Limited
23172.64.150.231Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2335.163.91.135Aws · CLOUDBoardman, Oregon, United States
AS16509Amazon.com, Inc.
2318.66.102.106Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
23142.251.150.119Google · CDNUnited States
AS15169Google LLC
23142.251.110.148Google · CDNUnited States
AS15169Google LLC
60826--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T119151875FF60F13DAA375D29B78E665C9118E416CE028AECE51956280BC3FF312D2B09

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

6144:KqtPcOM/XNxuhcOJJ0DOSAA/QfKu4Xhq8fv9wCLvAY3Q:M/XNxuhcOr0DOS5xRfnrAY3Q

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:914943:pD2IGQQ0BAABAoCxEJUGxOA4AIxIHCA2i0EfQDUDJZwQadxGEAQgxCgLhQBqAxwQRVg4ALDMmFBRGDIJaEAAAgUAYYEqjZzB

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0010181c18380000
Perceptual Hash:9d3d676399182366
Difference Hash:137671b2b2f270ed
Wavelet Hash:003e3e1f187f1877
Color Hash:#938c1f

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data