Security Scan Report: cp2.7dewaslot.org

Response type:Plain texttext/plainHTTP 200The server returned plain text, not a web page. The screenshot shows the text as a browser displays it.
Submitted: Completed: publiccompleted
This website contacted 3 IPs in 3 countries across 1 domain to perform 2 HTTP transactions. The main domain is 7dewaslot.org and was registered 1 year 9 months ago.

Submitted URL: https://cp2.7dewaslot.org/t2z/

AI Security Verdict

Confirmed Scam

Confidence: 93%

9
Risk Score

Plain-text endpoint on a domain flagged by two independent feeds as Vidar malware, with the exact URL also reported and a CRITICAL IDS C2/malware alert. Do not interact.

Risk Factors (4)
Content-malware (Vidar infostealer) Indicator of Compromise on the primary domain, corroborated by two independent threat-intel feeds
URL-level content-malware Indicator of Compromise for the scanned path
CRITICAL IDS alert classifying the traffic as command-and-control (C2) with a suspicious SSL certificate
Response is raw plain text on a host with no legitimate site content, typical of malware staging/command endpoints
Domain age information unavailable

Details

Page Title

N/A

Scan Type

public

Domain Name Analysis

You're looking at domain 'cp2.7dewaslot.org' on the non-profit oriented generic top-level domain (.org) with subdomain 'cp2'. The second-level label '7dewaslot' is 9 characters long holding 3 vowels versus 5 consonants; it also includes one digit. Breaking it apart gives 4 words: 7, de, was, lot. Median word length comes out to 2.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://cp2.7dewaslot.org/t2z/

Page Load Overview

1.01s
Total Load Time
0 KB
Total Size

Language Analysis

Primary Language

🏳️UNKNOWN
Code: unknown
Confidence:0%

Detection Details

0
Detector Agreement:0%

Website Classification

Primary Category

unknown0% confidence
Type: static
Method: structural

All Detected Categories

No categories detected

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
2104.131.68.180Clifton, New Jersey, United States
AS14061DigitalOcean, LLC
045.77.249.79Singapore, Singapore
AS20473The Constant Company, LLC
0178.62.201.34Amsterdam, North Holland, Netherlands
AS14061DigitalOcean, LLC
23--

Content Similarity HashesFor malware variant detection

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3:qVZxQXbZ6iF4:qzxO965

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:1:0:a7fe83ec64bb23eb28090598db3d166e

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:N/A
Perceptual Hash:N/A
Difference Hash:N/A
Wavelet Hash:N/A
Color Hash:N/A

Other Hashes

Crop Resistant:N/A

Scan History

Scan history not available

Unable to load historical scan data