Security Scan Report: dsport.bg

Site favicon
Submitted: Completed: publiccompleted
This website contacted 337 IPs in 12 countries across 227 domains to perform 1140 HTTP transactions. The main domain is dsport.bg.

Submitted URL: https://dsport.bg/chudesno-levski-se-adosa-na-hiks-v-niimegen~242387.html

AI Security Verdict

Low Risk

Confidence: 72%

2
Risk Score

Bulgarian sports news article on dsport.bg; self-branding, no credential or payment form, no IoC/YARA evidence. Only notable trait is a very long ad-driven redirect chain.

Risk Factors (2)
Exceptionally long redirect chain (80 hops, 55 cross-domain), a typical characteristic of ad-heavy pages and worth noting, though not malicious on its own
Unranked third-party script host razerads.com present among otherwise popular ad/analytics hosts
Safety Factors (4)
No credential-harvesting or payment form on the page
Site displays its own brand (dsport.bg) rather than impersonating another organisation
Content is genuine sports journalism with a visible article body, byline-style attribution and dated metadata
No threat-intelligence, YARA, Safe Browsing or JS-exfiltration evidence
Domain age information unavailable

Details

Page Title

Чудесно: Левски се ядоса на хикс в Ниймеген - Dsport.bg

Scan Type

public

Domain Name Analysis

Within the Bulgarian country-code top-level domain (.bg), 'dsport.bg' is registered. The core label 'dsport' covers 6 characters containing 1 vowel alongside five consonants. Segmentation suggests 2 words: d, sport. Expect 3 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://dsport.bg/chudesno-levski-se-adosa-na-hiks-v-niimegen~242387.html

Page Load Overview

3.72s
Total Load Time
6.6 MB
Total Size

Language Analysis

Primary Language

🇧🇬BG
Code: bg
Confidence:80%
Script:Unknown
Direction:ltr

Detection Details

HTML Lang Attribute:bg
Text Length:8,163 chars
Detector Agreement:100%

Website Classification

Primary Category

entertainment media69% confidence
Type: spa
Method: ml+structural

All Detected Categories

entertainment media
69%
gambling betting
52%
news/blog
50%
cryptocurrency blockchain
46%
adult content
35%

Detected Features

Search
Articles
OG: article
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
132104.21.64.144Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3104.16.160.145Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3172.66.171.133Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3172.66.171.172Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3104.21.33.196Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3188.114.96.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3151.101.193.155Fastly · CDNUnited States
AS54113Fastly, Inc.
3172.67.70.115Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3142.251.153.4Google · CDNUnited States
AS15169Google LLC
3142.251.14.97Google · CDNUnited States
AS15169Google LLC
1140337--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1BD24F962A3CD7C7E4007A1E2B864678CB06F1C7DEE730A91B5FF16395BC69D0052266E

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:rtyWsbsYSswpc0cNQconT0rjwlRrjecgcpuH9zBwxUDx5WVhtG:JOunTzlcTr

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:210196:c0GAbIIcLAxWEYM6BSTUpgBkrUAaPJQIAoAE+QYARQJUIQCMbgcsyjNIEygIIJIqBBEGFQIG4OaCAJEEGEiZiCIiVApuiEER

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:103d3c202d0e0c2c
Perceptual Hash:926d16366d4d92cd
Difference Hash:e1e96943cd8d6d4d
Wavelet Hash:185d3d3d7d0d0c2d
Color Hash:#3a3a78

Scan History

Scan history not available

Unable to load historical scan data