Security Scan Report: bento123ndxhealth.xyz

Site favicon
Submitted: Dec 28, 2025, 1:56:51 AMCompleted: Dec 28, 2025, 1:58:45 AMpubliccompleted

Summary

This website contacted 5 IPs in 1 country across 5 domains to perform 498 HTTP transactions. The main domain is bento123ndxhealth.xyz and was registered 8 months ago.

Submitted URL: https://bento123ndxhealth.xyz/desktop/game/arcade/rich88

AI Security Verdict

Confirmed Scam

Confidence: 95%

10
Risk Score

New unranked site with hidden/disguised password fields impersonating banks; confirmed phishing scam.

Risk Factors
Brand‑new domain (<7 days) with credential‑harvesting form
Disguised password fields designed to trick users
Hidden password fields increasing stealth
Unicode characters used to evade detection
Impersonation of financial institutions on an unranked domain
Domain age information unavailable

Details

Page Title

BENTO123 # Situs Slot Online Dengan Bonus Promosi Paling Menguntungkan 2025.

Scan Type

public

Language

🇮🇩

ID

(80% confidence)

Category

gambling betting

(94%)

Domain Information

Domain 'bento123ndxhealth.xyz' uses the open generic top-level domain (.xyz) while skipping any subdomain. The second-level label 'bento123ndxhealth' is 17 characters long containing 4 vowels alongside ten consonants, notching 3 digits. Breaking it apart gives 5 words: bento, 123, nd, x, health. Median word length is three characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of api.livechatinc.com

Page Load Overview

84.95s
Total Load Time
498
HTTP Requests
5
Domains
N/A
Total Size

Language Analysis

Primary Language

🇮🇩Indonesian
Code: id
Confidence:80%
Script:Unknown
Direction:ltr

Detection Details

Language Code:id
Detection Confidence:80%
Script Type:Unknown
HTML Lang Attribute:id
Text Length:5,849 chars
Detector Agreement:80%

Website Classification

Primary Category

gambling betting94% confidence
Type: webapp
Method: ml+structural

All Detected Categories

gambling betting
94%
entertainment media
83%
documentation technical
73%
technology software
58%
adult content
38%

Detected Features

Login Form
OG: website

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
488188.114.97.3UnknownUnknown
42.17.100.185UnknownUnknown
365.8.102.94UnknownUnknown
12.16.1.243Germany
AS20940Akamai International B.V.
123.36.162.25Germany
AS20940Akamai International B.V.
05--

Page Statistics

0
Requests
0
Unique Domains
0.0 KB
Total Size

Detected Technologies5

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T100340A125857343B3237B2887CF57B4495B10287C2278F0872FC4696BFE6E696913EDA

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

6144:lCOOYBtZbDTiJYwoNkx3yOTe9Di9AU69AUYZg:lGJYwoNktJTe9Dt6S

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:247850:lKVckCHGmgiyKDCmHAhBNcHdFISBBLBAWrebdjAAcZpApQwqQgKIAseHFRAgSB6EJKxBMlmGeClfKSBviCUQYBFQSDkQA04y

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:2c003c3c3c3c1901
Perceptual Hash:8ad52973e28eda38
Difference Hash:49717169e9697373
Wavelet Hash:2c183dff3d3c1909
Color Hash:#8795c5

Scan History

Scan history not available

Unable to load historical scan data