Security Scan Report: romabelt1492.cam

Redirected to:
https://romabelt1492.cam/slot
Site favicon
Submitted: Completed: publiccompleted
This website contacted 19 IPs in 1 country across 15 domains to perform 421 HTTP transactions. The main domain is romabelt1492.cam and was registered 2 weeks ago.

Submitted URL: http://romabelt1492.cam/slot

Effective URL:
https://romabelt1492.cam/slot
Redirected

AI Security Verdict

Moderate Risk

Confidence: 68%

6
Risk Score

New (10-day) unranked .cam domain offering Turkish gambling/slot content with an account login form, mirror domains and implausible payout claims; no malware or credential exfiltration found, but interaction is not advisable.

Risk Factors (5)
Gambling/betting service on a 10-day-old domain (VERY_NEW, risk multiplier)
Domain romabelt1492.cam is not in Cisco Umbrella top 1M and does not match the brand's stated domain (RomaBet.co)
Credential login form on a brand-new unranked gambling domain
Unsubstantiated jackpot/bonus payout claims and a generated 'top winners' leaderboard
Network IDS alerts including an obfuscated-JavaScript signature
Safety Factors (5)
No Indicators of Compromise matched against the page or its loaded resources
No JavaScript YARA malware patterns, no high-precision native-YARA hits, no known malicious kit in the roster
No credential exfiltration: no cross-origin form submissions, zero cross-origin JS network targets
No payment-card fields; only one login form with hidden Cloudflare Turnstile field (normal anti-bot token)
Page text states an operator name, registration number and physical address (Exelogix Ltd., Kingstown, St Vincent and the Grenadines)
Domain age information unavailable

Details

Page Title

RomaBet Slot Oyunları - Prestijli Resmi Erişim Rehberi

Scan Type

public

Domain Name Analysis

Within the .cam top-level domain, 'romabelt1492.cam' is registered while skipping any subdomain. Count 12 characters in 'romabelt1492' containing 3 vowels alongside five consonants; it also includes four digits. Segmentation suggests 3 words: roma, belt, 1492. Expect four characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of http://romabelt1492.cam/slot

Page Load Overview

17.60s
Total Load Time
50.5 MB
Total Size

Language Analysis

Primary Language

🇹🇷Turkish
Code: tr
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:tr
Text Length:12,707 chars
Detector Agreement:80%

Website Classification

Primary Category

gambling betting45% confidence
Type: spa
Method: ml+structural

All Detected Categories

gambling betting
45%
social_media
25%
corporate
25%
forum
20%

Detected Features

Login Form
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
25172.67.223.246Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
22142.251.110.97Google · CDNUnited States
AS15169Google LLC
22104.17.25.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
22151.101.1.155Fastly · CDNUnited States
AS54113Fastly, Inc.
22104.17.207.5Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
22104.18.95.41Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
22142.251.110.95Google · CDNUnited States
AS15169Google LLC
22104.18.12.83Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
22104.20.42.169Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
22216.239.34.36Google · CDNUnited States
AS15169Google LLC
42119--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1A1C4B71074DE29215073C5C0E6F2AF87AA90F30BC10A17AA7DED57944FE7E793923269

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

12288:y/UpnZMQYenclgkBhRGSf9G1XaMb8Yry2gS3hjyO5ZSqqFd/dITrrl:y/UpnZMQYem5GSf9G1XaMbxngWjLZSqJ

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:576351:sAGm3FElBwkAIYoqEiRhIhEgVEgkYCaCXgSIUUosQmiIEDADVzqKBQcxJAZQAFWw9SABGFAYIGEhS7kjQg4SQEAWcSVYwEQi

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0000003c3c000000
Perceptual Hash:88aa63239cdc6377
Difference Hash:01200c70700c2000
Wavelet Hash:01013d3d3f3f0101
Color Hash:#931f7a

Other Hashes

Crop Resistant:01200c70700c2000

Scan History

Scan history not available

Unable to load historical scan data