Security Scan Report: gardoone-shans-pool.com

Site favicon
Submitted: Sep 13, 2026, 2:47:31 AMCompleted: Sep 13, 2026, 2:48:02 AMpubliccompleted

AI Security Verdict

High Risk

Confidence: 75%

8
Risk Score

Domain's primary Indicator of Compromise is the ClearFake malware family and it links to another ClearFake-flagged domain; gambling content promoting an APK download poses a real malware-distribution risk.

Risk Factors (4)
Content-malware Indicator of Compromise (ClearFake) on the primary domain
External link to a second ClearFake-flagged domain (bet404farsi.com)
Promotes gambling plus an Android APK download, a common malware-delivery vector
Gambling/betting promotion with no verifiable author or operator identity
Domain age information unavailable

Details

Page Title

گردونه پول و شانس پول نقد واقعی – چرخ رو بچرخون و جایزه ببر

Scan Type

public

Domain Name Analysis

You're looking at domain 'gardoone-shans-pool.com' on the commercial generic top-level domain (.com) with no subdomain. The registrable portion 'gardoone-shans-pool' spans 19 characters holding seven vowels versus 10 consonants, along with 2 hyphens. Segmentation suggests six words: gar, do, one, s, hans, pool. Median word length is 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://gardoone-shans-pool.com

Page Load Overview

11.02s
Total Load Time
1.8 MB
Total Size

Language Analysis

Primary Language

🇮🇷Persian
Code: fa
Confidence:80%
Script:Unknown
Direction:ltr

Detection Details

HTML Lang Attribute:fa-IR
Text Length:14,730 chars
Detector Agreement:100%

Website Classification

Primary Category

gambling betting100% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

gambling betting
100%
finance banking
99%
entertainment media
97%
technology software
90%
cryptocurrency blockchain
88%

Detected Features

Articles
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
6207.241.237.3United States
AS7941Internet Archive
6142.250.154.95Google · CDNUnited States
AS15169Google LLC
6188.114.97.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
6188.114.96.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
6192.0.77.48San Francisco, California, United States
AS2635Automattic, Inc
6142.251.110.94Google · CDNUnited States
AS15169Google LLC
366--

Detected Technologies8

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T121D3F8926368093312778369F193762896635E13D60EEFC0F4ADC3684DD9B23579A32F

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:ilYYrIJMvghl2JiEPzOYFKSsJhODr3Z9Q/aY5qqCbk1EOSKwghtbGlp8nRBw+VHQ:qYYrIJMvgH2JiEPzOYFKSsJIDr3Z9Q/M

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:134038:owCDABKHRGxALAgBC8agQMFWRSWYQY8BICmQV4FRBkggaSTSMqKgLIogBIIIGSUwSIEAGhAA6MIAEkEsDolJoFgQAjbMWAmC

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00ffffffffffff00
Perceptual Hash:ab840b96199c37ed
Difference Hash:fccb03330b4c0273
Wavelet Hash:00e1e1c3e7e7ff00
Color Hash:#537eac

Scan History

Scan history not available

Unable to load historical scan data