Security Scan Report: z3d5.a3x4z3q2.com

Redirected to:
https://z3d5.a3x4z3q2.com/home
Site favicon
Submitted: Completed: publiccompleted
This website contacted 7 IPs in 1 country across 4 domains to perform 175 HTTP transactions. The main domain is a3x4z3q2.com and was registered 1 month ago.

Submitted URL: https://z3d5.a3x4z3q2.com

Effective URL:
https://z3d5.a3x4z3q2.com/home
Redirected

AI Security Verdict

Moderate Risk

Confidence: 70%

5
Risk Score

Self-branded Brazilian online casino/slots site on a 56-day-old unranked domain with randomized subdomain; login forms are the site's own account logins, no impersonation, no malware/IoC/IDS hits. Unlicensed gambling risk only.

Risk Factors (4)
Unlicensed-looking offshore online gambling/casino operation targeted at Brazil
New (56 days) and unranked domain with a randomized subdomain structure
Page title/brand (N5555.COM) does not match the serving domain
Circular/multiple redirects present on the gambling login funnel
Safety Factors (5)
No threat-intelligence Indicators of Compromise matched
No JavaScript malware/YARA patterns and no network IDS alerts
No credential exfiltration or cross-origin credential submission detected
No payment/card fields on the page
Login forms are the site's own account sign-in, not impersonation of another entity
Domain age information unavailable

Details

Page Title

N5555.COM

Scan Type

public

Domain Name Analysis

The domain name 'z3d5.a3x4z3q2.com' uses the commercial generic top-level domain (.com), featuring subdomain 'z3d5'. The registrable portion 'a3x4z3q2' spans 8 characters containing 1 vowel alongside 3 consonants; it also includes four digits. Tokenizing the label suggests 8 words: a, 3, x, 4, z, 3, q, 2. The median word length lands at 1 character. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://z3d5.a3x4z3q2.com

Page Load Overview

2.42s
Total Load Time
946 KB
Total Size

Language Analysis

Primary Language

🇵🇹Portuguese
Code: pt
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:pt-BR
Text Length:2,026 chars
Detector Agreement:100%

Website Classification

Primary Category

download file sharing74% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

download file sharing
74%
gambling betting
67%
news media journalism
60%
entertainment media
47%
cryptocurrency blockchain
37%

Detected Features

OG: website

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
25104.18.19.104Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
25104.18.13.254Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
25104.16.80.73Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
25104.18.18.252Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
25104.16.79.73Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
25104.18.18.104Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
25104.18.0.13Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1757--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T164841232685B80EB195BC4D0A465BB897866B73FC05E82C05EB883D04FD6C757FBD9A0

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

6144:YK6iHMMIIIIhcPtyaghyK9xLOBhj6/ZIZxHyVLFOjGIdyVLFOjGIy:R6iHMg8M

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:389033:YgDhEcECoAPANAlgcCEo8WBgxpgRiaEYIiChRCHAOJbsBCDUK4sYBFCCRJMCRIhhA/AApACFIMQAwiOABQAHgGsikeBKVKrP

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:1818181818180000
Perceptual Hash:9999666633333699
Difference Hash:b2b2b2b2b2b2b2b2
Wavelet Hash:ffffdb1818181818
Color Hash:#79d2b5

Scan History

Scan history not available

Unable to load historical scan data