Security Scan Report: bj66khuyenmai.com

Site favicon
Submitted: Oct 14, 2026, 9:03:28 PMCompleted: Oct 14, 2026, 9:04:07 PMpubliccompleted

AI Security Verdict

Confirmed Scam

Confidence: 97%

10
Risk Score

Compromised Vietnamese cockfight betting page serving an injected ClickFix fake-Verification overlay; EtherHiding loader pulls its next stage from a Polygon contract. Confirmed malware distribution — do not visit or follow any on-screen instructions.

Risk Factors (5)
ClickFix malware overlay kit injected into the page (fake 'Human Verification' prompting Win+X/Terminal paste)
EtherHiding blockchain-based payload loader resolving stage-2 host from a smart contract
Page impersonates Cloudflare's human-verification widget with a fake Ray ID
Malicious third-party script host browse-codes-enter.beer serving injected JavaScript
Primary domain flagged as clearfake malware in multi-source threat intelligence
Domain age information unavailable

Details

Page Title

BJ66 Đá Gà 88: Trải Nghiệm Đá Gà Trực Tuyến Đỉnh Cao Với Hướng Dẫn Chi Tiết

Scan Type

public

Domain Name Analysis

Within the commercial generic top-level domain (.com), 'bj66khuyenmai.com' is registered with no subdomain. The core label 'bj66khuyenmai' covers 13 characters holding 4 vowels versus seven consonants, notching two digits. Segmentation suggests six words: bj, 66, k, huy, enma, i. Expect 2 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://bj66khuyenmai.com

Page Load Overview

4.77s
Total Load Time
4.0 MB
Total Size

Language Analysis

Primary Language

🇻🇳Vietnamese
Code: vi
Confidence:62%
Script:Unknown
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:8,660 chars
Detector Agreement:80%
Language mismatch: Declared as en-US but detected as vi

Website Classification

Primary Category

entertainment media100% confidence
Type: spa
Method: ml+structural

All Detected Categories

entertainment media
100%
gambling betting
100%
technology software
92%
documentation technical
84%
cryptocurrency blockchain
80%

Detected Features

OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
61154.205.140.118Hanoi, Hanoi, Vietnam
AS154177LIGHT NODE LIMITED
59150.136.141.142Oracle · CLOUDAshburn, Virginia, United States
AS31898Oracle Corporation
59178.16.52.101Frankfurt am Main, Hesse, Germany
AS202412Omegatech LTD
1793--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T16A13C773B35401297B6D83DA9151B12C81EAE603DD5466AEF3E134DDAD88EF300BB91E

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:C3f2e2OqkWBpQslj9pXJdKPiRdnJTdQL3jlm0z9wmOBjMcrMNxKiVl+HwqRksNda:pe2OqkWBpVjrYbL3jlm0z9wmOBjMcrMn

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:42000:QZQDSLDABHggbESBIEPhgUKFmmEpVYyQJkoVQA5aAAARwhkFk0VElCKAVASFhIZIQhABgCV+BKIpAxBggQvAQdgOEwGC4iYR

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0b6060606064666e
Perceptual Hash:e06d958db5a5b1e0
Difference Hash:dac98989898ccc8c
Wavelet Hash:fb606060606e676f
Color Hash:#d25c2d

Scan History

Scan history not available

Unable to load historical scan data