Security Scan Report: vipbet789-z.com

Site favicon
Submitted: Completed: publiccompleted
This website contacted 2 IPs in 2 countries across 4 domains to perform 21 HTTP transactions. The main domain is vipbet789-z.com and was registered 7 months ago.

Submitted URL: https://vipbet789-z.com

AI Security Verdict

Confirmed Scam

Confidence: 93%

9
Risk Score

Gambling portal compromised with an analyst-vetted ClearFake blockchain loader (critical YARA) and a JS beacon to ferma.seo-solutions.eu.cc; malware distribution, avoid and report.

Risk Factors (5)
Known malicious kit (ClearFake) detected by analyst-vetted roster and critical YARA pattern — malware distribution, not just gambling content
Threat-intelligence report of malware loader on the primary domain
Cross-origin JavaScript POST beacon to an unrelated third-party domain (ferma.seo-solutions.eu.cc) with bot-detection parameters
HIGH IDS alert for DNS query to a .cc TLD associated with the loader infrastructure
Unranked domain (not in Cisco Umbrella top 1M) with very low legitimacy score (10/100) presenting an unlicensed gambling operation
Domain age information unavailable

Details

Page Title

VIPBET789 – VIPBET789 เป็นเว็บสล็อตเว็บตรงที่ดีที่สุดในประเทศไทย ไม่ผ่านเอเย่นต์ ระบบฝากถอนออโต้ เร็วที่สุด เพียง 10 วินาที รองรับทรูวอเลท มีเกมสล็อตจากทุกค่ายดัง อัตราการแตกสูง RTP มากกว่า 96%

Scan Type

public

Domain Name Analysis

The domain name 'vipbet789-z.com' uses the commercial generic top-level domain (.com). The second-level label 'vipbet789-z' is 11 characters long holding 2 vowels versus 5 consonants, plus 3 digits and one hyphen. It segments into four words: vip, bet, 789, z. Average segment length settles at three characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://vipbet789-z.com

Page Load Overview

6.46s
Total Load Time
24.1 MB
Total Size

Language Analysis

Primary Language

🇹🇭Thai
Code: th
Confidence:80%
Script:Unknown
Direction:ltr

Detection Details

HTML Lang Attribute:th
Text Length:16,584 chars
Detector Agreement:100%

Website Classification

Primary Category

gambling betting100% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

gambling betting
100%
entertainment media
99%
government public service
85%
technology software
79%
corporate business
74%

Detected Features

Search

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1164.235.45.42Queenstown Estate, Singapore
AS26277ServerPoint.com
10104.21.58.227Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
212--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T19B04B573234948F93D0E479AA929B7197218FE14BF02F5D0B0E6E05861F8F564872EDB

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:u/yNWOtA/7xbOke5ypgIBcT1PgpZz3u+b7SaHfLLKiHPu+zzGJhPKSTTeOCajDGJ:HNNtA/9bO70QdU2lpmU+tUtm

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:183877:yJoPO35FCJBlkAYLEhgjPqFIbiouEAwLkIYEGIFRQA1AoBkAlAgAoAMhaQAQgalBJghghIIIAZA1H1eshgAAiyANEoExZWZA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffa4f1ff20a10009
Perceptual Hash:ebe09cc7809ced61
Difference Hash:b8494197c349613b
Wavelet Hash:ffa4f1ff21a10809
Color Hash:#b7bf40

Scan History

Scan history not available

Unable to load historical scan data