Security Scan Report: d9f4g1h7j.top

Redirected to:
https://bassbet-4485.com/eu/registration?mid=99545_1454555&fluid=45045...
Site favicon
Submitted: Sep 17, 2026, 6:39:06 PMCompleted: Sep 17, 2026, 6:39:58 PMpubliccompleted

This website contacted 10 IPs in 4 countries across 19 domains to perform 41 HTTP transactions. The main domain is bassbet-4485.com and was registered 2 years ago.

Submitted URL: https://d9f4g1h7j.top/3xqB3Jtx?sub2=craftmann.org

Effective URL:

https://bassbet-4485.com/eu/registration?mid=99545_1454555&fluid=45045...
Redirected

AI Security Verdict

Moderate Risk

Confidence: 60%

5
Risk Score

Grey-market casino/betting registration funnel reached via a throwaway .top redirect chain with affiliate tracking; branding is inconsistent (BankonBet vs BassBet) but no credential or payment form is present, so risk is moderate, not confirmed phishing.

Risk Factors
Multi-domain redirect chain from an unrelated .top hostname into a gambling registration page
Internally inconsistent branding (title 'BankonBet' vs og:site_name and footer 'BassBet.com')
Numeric-suffixed lookalike-style gambling domain (bassbet-4485.com) reached only through affiliate redirect hops
IDS alerts flagging *.top domain traffic as potentially hostile
Safety Factors
No credential, login or payment forms detected in the DOM
No Indicators of Compromise matches against the page or its resources
No YARA/JavaScript malware patterns and no credential exfiltration behaviour detected
No Safe Browsing or IDS phishing/malware alert — the two alerts are generic '.top domain' reputation tags
Domain age information unavailable

Details

Page Title

BankonBet Registration

Scan Type

public

Domain Name Analysis

The domain 'd9f4g1h7j.top' uses the .top top-level domain. The registrable portion 'd9f4g1h7j' spans 9 characters holding zero vowels versus 5 consonants, along with 4 digits. Splitting it apart reveals 9 words: d, 9, f, 4, g, 1, h, 7, j. Median word length comes out to 1 character. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://d9f4g1h7j.top/3xqB3Jtx?sub2=craftmann.org

Page Load Overview

2.62s
Total Load Time
1.2 MB
Total Size

Language Analysis

Primary Language

🇫🇷French
Code: fr
Confidence:29%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:fr-eu
Text Length:972 chars
Detector Agreement:75%

Website Classification

Primary Category

gambling betting54% confidence
Type: spa
Method: ml+structural

All Detected Categories

gambling betting
54%
adult content
42%
corporate
25%

Detected Features

OG: website

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
5104.21.73.246Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
489.125.171.150United Arab Emirates
AS59692IQWeb FZ-LLC
4104.21.22.221Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
4142.251.13.94Google · CDNUnited States
AS15169Google LLC
4185.207.196.69Marshall Islands
AS213846Nalmi Limited
4185.207.198.11Marshall Islands
AS213846Nalmi Limited
4185.207.198.137Marshall Islands
AS213846Nalmi Limited
4188.114.96.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
452.211.153.232Aws · CLOUDDublin, Leinster, Ireland
AS16509Amazon.com, Inc.
434.252.32.161Aws · CLOUDDublin, Leinster, Ireland
AS16509Amazon.com, Inc.
4110--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T174A20F122116A54596534DC721CCB626A94AA173B8F8C573F9FC1CACAFDBC7703A2738

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:cIQLuLQmTAsVeTmiAFktSm9AWTotmsAfqHMm/AgRaPmeAZAZ+m5AEzEGEzEImEb3:Dy4z4MIFvewM/nSA

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:22033:g4gwjD4VaABo6AEkyChQAQ8IBieBOiCBQAgVUUgBDgmkATEAGKANSpMCFC0IciPDgQgxAqTCAI4bYBl8CsQQUlEDWNDQ4AIO

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:5a1c181818181818
Perceptual Hash:ccb399666666c989
Difference Hash:96f0f2b0b2b2b2b2
Wavelet Hash:ff7e7e3c18181818
Color Hash:#87a5c5

Scan History

Scan history not available

Unable to load historical scan data