Security Scan Report: omo11-12.com

Site favicon
Submitted: Completed: publiccompleted
This website contacted 25 IPs in 3 countries across 18 domains to perform 187 HTTP transactions. The main domain is omo11-12.com and was registered 8 months ago.

Submitted URL: https://omo11-12.com

AI Security Verdict

Confirmed Scam

Confidence: 95%

9
Risk Score

Compromised gambling page carrying two analyst-vetted ClearFake kits: a Polygon EtherHiding loader and a rival-kit cleanup overlay, plus POSTs to an unranked seo-solutions domain.

Risk Factors (6)
ClearFake Polygon contract loader (CRITICAL phishing kit, analyst-vetted roster)
ClearFake rival-kit cleanup script (HIGH phishing kit, analyst-vetted roster)
Cross-origin POST of host/URI/bot parameters to unranked ferma.seo-solutions.eu.cc
Primary domain flagged as malware loader in threat intelligence
6 redirects, 5 cross-domain, indicating cloaking/redirection chain
Obfuscation heuristics and 5 eval() calls in page JavaScript
Domain age information unavailable

Details

Page Title

OMO1112 – OMO1112 ศูนย์รวมความบันเทิงระดับพรีเมียม ครบจบในที่เดียว! พบกับสุดยอดคาสิโนสด สล็อตออนไลน์ และเกมยอดฮิตอย่างรูเล็ต ไฮโล น้ำเต้าปูปลา ด้วยมาตรฐานอันดับต้นๆ ของวงการที่คุณไว้วางใจได้

Scan Type

public

Domain Name Analysis

Domain 'omo11-12.com' uses the commercial generic top-level domain (.com). The core label 'omo11-12' covers 8 characters split between two vowels and one consonant; it also includes four digits and one hyphen. It segments into 3 words: omo, 11, 12. Average segment length settles at 2 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://omo11-12.com

Page Load Overview

8.17s
Total Load Time
11.2 MB
Total Size

Language Analysis

Primary Language

🇹🇭Thai
Code: th
Confidence:80%
Script:Unknown
Direction:ltr

Detection Details

HTML Lang Attribute:th
Text Length:8,190 chars
Detector Agreement:75%

Website Classification

Primary Category

finance banking99% confidence
Type: webapp
Method: ml+structural

All Detected Categories

finance banking
99%
gambling betting
99%
entertainment media
97%
technology software
90%
e-commerce shopping
56%

Detected Features

Login Form

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1964.235.45.42Queenstown Estate, Singapore
AS26277ServerPoint.com
7104.17.25.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
774.125.29.95Google · CDNUnited States
AS15169Google LLC
7157.85.102.227Thailand
AS56309Siamdata Communication Co.,Ltd.
7172.67.183.150Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
7142.251.14.94Google · CDNUnited States
AS15169Google LLC
7142.251.152.4Google · CDNUnited States
AS15169Google LLC
7104.21.58.227Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
7188.114.96.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
7104.21.51.183Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
18725--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1D3F3D5B3618314A2790B52A66A76370D7978A903FB03F8E475ED2108DFE4F914613FDA

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:g/yNWOtA/7xxf5ypIdbmP5I9fOR1MsUTNX/l+LIUNcRtaMhwYV2jN7BvOVzYC6+z:lNNtA/9xf0wBy2IoY/wTzgxaXaiNF

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:158669:cCMgUJSEAACYguMIJIGdOCSCLHGI0oISjB0QBJOYdGPjmEDhPAEAQaRRAsoAP1JXYgjVPASQUCBmACgwCwEQMgVOcSACO3DI

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:f709080c4c0c08ed
Perceptual Hash:9b91e666d0999366
Difference Hash:8dd9199999995919
Wavelet Hash:ff7d080c2c0909ff
Color Hash:#97bf40

Scan History

Scan history not available

Unable to load historical scan data