Security Scan Report: cakhiatv.media

Redirected to:
https://cakhiatv7.mobi/
Site favicon
Submitted: Completed: publiccompleted
This website contacted 17 IPs in 1 country across 11 domains to perform 240 HTTP transactions. The main domain is cakhiatv.media and was registered 2 months ago.

Submitted URL: https://cakhiatv.media

Effective URL:
https://cakhiatv7.mobi/
Redirected

AI Security Verdict

Confirmed Scam

Confidence: 88%

9
Risk Score

AsyncRAT malware Indicator of Compromise on the domain plus a hidden password/email form on an 11-day-old site redirecting to another domain — a malware/credential-harvesting operation, not a football streaming service.

Risk Factors (5)
Multi-source threat-intel match for AsyncRAT malware on the scanned domain
Concealed (non-visible) password/email fields indicating hidden credential capture
Very new domain (11 days) making implausible longevity/scale claims
Cross-domain redirect to a separate registrable domain
Network traffic to a suspicious .fit domain flagged by IDS
Domain age information unavailable

Details

Page Title

CAKHIATV – Xem Bóng Đá Trực Tiếp NHA, V.League Chuẩn FULL HD

Scan Type

public

Domain Name Analysis

The domain 'cakhiatv.media' uses the .media top-level domain with no subdomain. Its registrable label 'cakhiatv' stretches across 8 characters containing 3 vowels alongside 5 consonants. Breaking it apart gives four words: ca, kh, i, atv. Average segment length settles at 2 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://cakhiatv.media

Page Load Overview

38.33s
Total Load Time
2.0 MB
Total Size

Language Analysis

Primary Language

🇻🇳Vietnamese
Code: vi
Confidence:80%
Script:Unknown
Direction:ltr

Detection Details

HTML Lang Attribute:vi
Text Length:18,510 chars
Detector Agreement:100%

Website Classification

Primary Category

news/blog70% confidence
Type: spa
Method: structural

All Detected Categories

news/blog
70%
corporate
70%

Detected Features

Login Form
Articles
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
16104.21.31.56Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
14192.178.170.95Google · CDNUnited States
AS15169Google LLC
14188.114.96.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
14104.17.25.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
14172.67.178.180Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
14188.114.97.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
14172.67.214.122Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
14172.67.175.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
14104.18.25.158Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
14142.251.110.97Google · CDNUnited States
AS15169Google LLC
24017--

Detected Technologies11

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1EF94E87B42DE1C3E031742D7919A6B8DA9CF9A33E6458950F7FF4E1C5F84CB2121292A

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

6144:h2MLyWP6ABPhPB7bIYJwjwQsyZemSZ/hG2zV6irHPjgu4MlC:sSZx6irHPjakC

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:436660:ExeUIBHCKQRZAAEESSAZZAiQMKAMAbcSAwEG2iAoZ8MowACZaSDeLKQBRFDLkmkCE0jCQhDAQaZmCAUygFIIswAGCNIkNsgQ

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ff3c300000010000
Perceptual Hash:aac49cbfe0a1bc86
Difference Hash:2fe1c593492b692b
Wavelet Hash:ff7f7f4125012501
Color Hash:#4bd22d

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data