Security Scan Report: btgfootballbookings.com

Redirected to: https://btgfootballbookings.com/bookings/Norwich

Submitted: Jan 21, 2026, 7:14:27 PMCompleted: Jan 21, 2026, 7:15:36 PMpubliccompleted
Loading additional data...

Summary

This website contacted 7 IPs in 2 countries across 7 domains to perform 20 HTTP transactions. The main domain is btgfootballbookings.com and was registered NaN years ago.

Submitted URL: http://btgfootballbookings.com/bookings/Norwich

Effective URL: https://btgfootballbookings.com/bookings/NorwichRedirected

AI Security Verdict

High Risk

Confidence: 85%

7
Risk Score

Site impersonates a major brand (Apple) on an unrelated domain; treat as high‑risk phishing.

Risk Factors
Brand impersonation on an unrelated domain
Unranked domain with low reputation
Email-only form that could be used for credential harvesting
Domain age information unavailable

Details

Page Title

BTG Bookings

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

technology software

(53%)

Domain Information

You're looking at domain 'btgfootballbookings.com' on the commercial generic top-level domain (.com) with no subdomain. Count 19 characters in 'btgfootballbookings' with six vowels and 13 consonants. It segments into four words: bt, g, football, bookings. Median word length comes out to five characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of http://btgfootballbookings.com/bookings/Norwich

Page Load Overview

1.58s
Total Load Time
26
HTTP Requests
8
Domains
7.8 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en
Text Length:1,920 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software53% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

technology software
53%
documentation technical
49%
cryptocurrency blockchain
36%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
8142.251.140.170United States
AS15169GOOGLE
3146.75.120.238Frankfurt am Main, Hesse, Germany
AS54113FASTLY
3172.67.131.96United States
AS13335CLOUDFLARENET
3151.101.193.229United States
AS54113FASTLY
3104.18.0.22United States
AS13335CLOUDFLARENET
3104.18.40.68United States
AS13335CLOUDFLARENET
3104.16.80.73GermanyUnknown
267--

Detected Technologies4

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T10173A129B6F321B6964B907D5FE11209322E4097D40B8BD47C7CB1C47FCCDD8869A6EA

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:/IrHkT095UEJkWVyiphn0nCnCnqvE+loPedcqEXQSXQAHOlOsziWmuOtbVt2vvt4:v0fkLMIftsO7t2cSnz+jgx/jg

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:80465:0GDAgCFMwZqQDFHAsmJGW0AOQGAoexGDZuA4RDUT2AhABiTAoFeghG4gSAAkgWAw3A0FwplWBiFBgQBDmYIwMRkswGVBhCaA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0000ffff02ffffff
Perceptual Hash:cd5c5e0f08be97a0
Difference Hash:3436b23a9652b2a2
Wavelet Hash:0000c29b00ffffff
Color Hash:#acab53

Scan History

Scan history not available

Unable to load historical scan data