Security Scan Report: gjjdhh-235dhdhkk.vip

Site favicon
Submitted: Completed: publiccompleted
This website contacted 19 IPs in 3 countries across 11 domains to perform 247 HTTP transactions. The main domain is gjjdhh-235dhdhkk.vip and was registered 1 year 8 months ago.

Submitted URL: https://gjjdhh-235dhdhkk.vip/

AI Security Verdict

High Risk

Confidence: 72%

7
Risk Score

Unranked .vip site presenting itself as the GO99 gambling brand on a non-official domain, with a member login form and a rotating mirror-domain network. Avoid interacting or entering credentials.

Risk Factors (5)
Brand claim (GO99) on a domain that does not match the brand's official go99.com property
Credential login form on an unranked .vip domain
Rotating mirror-domain network listed in page content
Heavy bonus/urgency gambling promotion and agent-commission solicitation
Low business-legitimacy score (15/100) with no verifiable operator information
Domain age information unavailable

Details

Page Title

GO99 Thiên đường trò chơi điện tử top 1 Châu Á - Uy tín làm nên thương hiệu!

Scan Type

public

Domain Name Analysis

The domain 'gjjdhh-235dhdhkk.vip' uses the .vip top-level domain while skipping any subdomain. The core label 'gjjdhh-235dhdhkk' covers 16 characters split between 0 vowels and twelve consonants, notching three digits and 1 hyphen. It segments into 7 words: gj, jd, hh, 235, dh, dh, kk. Median word length is two characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://gjjdhh-235dhdhkk.vip/

Page Load Overview

8.19s
Total Load Time
13.0 MB
Total Size

Language Analysis

Primary Language

🇻🇳Vietnamese
Code: vi
Confidence:74%
Script:Unknown
Direction:ltr

Detection Details

Text Length:13,478 chars
Detector Agreement:100%

Website Classification

Primary Category

gambling betting56% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

gambling betting
56%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
13166.117.252.99Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
1318.245.86.93Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
1352.222.236.21Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
13104.16.179.112Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1352.222.136.107Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
1334.141.15.207Google · CDNFrankfurt am Main, Hesse, Germany
AS396982Google LLC
13142.251.14.97Google · CDNUnited States
AS15169Google LLC
13157.240.0.6Facebook · CDNFrankfurt am Main, Hesse, Germany
AS32934Facebook, Inc.
1318.245.86.86Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
1375.2.26.95Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
24719--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T192462A11DF8820359F7BA533B04D2BBD63439407123205FED257AAAE5228DF5A7D2F1A

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

49152:hfmFrb2LfHDmP4j0y87bt/erim88t7n/OkrwtK1MPEagcuujtxpEW3qjIr+5sV//:q

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:5650561:WIEhgAnCYwgphCwAARkoqAAOmjRCAIQAfApAjBBJGBoAgKDGAjFA6QA8MIjgngAAUK3CSACELrAGQ4LXjAMe+ix5AQo0UHBB

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:3c207c7e7c640000
Perceptual Hash:c3c63c2b9d18c3cd
Difference Hash:f9c4ccc8c0c9c9c8
Wavelet Hash:3c647e7e7e6c002c
Color Hash:#4f40bf

Scan History

Scan history not available

Unable to load historical scan data