Security Scan Report: bw22.top

Redirected to:
https://svip-welcome1.n56uk.com/register?superId=454798106&bindMode=1
Site favicon
Submitted: Completed: publiccompleted
This website contacted 9 IPs in 5 countries across 8 domains to perform 31 HTTP transactions. The main domain is bw22.top and was registered 1 month ago.

Submitted URL: http://bw22.top/

Effective URL:
https://svip-welcome1.n56uk.com/register?superId=454798106&bindMode=1
Redirected

AI Security Verdict

High Risk

Confidence: 72%

7
Risk Score

Cross-domain redirect funnel ending at an account-registration page using the casino brand name 云顶国际 on a non-official, unranked domain; unlicensed gambling with brand misuse and hostile-.top IDS alerts. Avoid entering credentials.

Risk Factors (5)
Unlicensed gambling operation branded with a third-party casino name (云顶国际) on a domain that is not the brand's official domain
Registration/account-creation form with two password fields on an unranked domain of unknown age
Seven-step cross-domain redirect chain with circular-redirect behavior and affiliate referral parameters
HIGH-severity IDS alerts for hostile '.top' domain traffic on the entry domain
Complete absence of licensing, operator or corporate information on the sign-up page
Domain age information unavailable

Details

Page Title

云顶国际

Scan Type

public

Domain Name Analysis

Domain 'bw22.top' uses the .top top-level domain with no subdomain. The second-level label 'bw22' is 4 characters long with 0 vowels and 2 consonants; bonus characters include two digits. Tokenizing the label suggests 3 words: b, w, 22. The median word length lands at one character. No strong language cues emerged from the frequency lists.

Screenshot

| a — =, a =, q O aia an | SEARED PICU aIKS SHS) D Geek

Page Load Overview

6.72s
Total Load Time
1.1 MB
Total Size

Language Analysis

Primary Language

🇨🇳Chinese
Code: zh
Confidence:60%
Script:Han
Direction:ltr

Detection Details

HTML Lang Attribute:zh-CN
Text Length:56 chars
Detector Agreement:100%

Website Classification

Primary Category

healthcare medical86% confidence
Type: static
Method: ml+structural+ocr_tiebreaker

All Detected Categories

healthcare medical
86%
finance banking
56%
cryptocurrency blockchain
49%
news media journalism
47%
technology software
41%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
714.0.58.122Cdnetworks · CDNBangkok, Bangkok, Thailand
AS54994Meteverse Limited.
3104.21.10.20Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3163.181.254.192United States
AS24429Zhejiang Taobao Network Co.,Ltd
365.8.102.55Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
3203.107.60.137China
AS37963Hangzhou Alibaba Advertising Co.,Ltd.
3138.113.181.103Meteverse · CDNStockholm, Stockholm County, Sweden
AS54994Meteverse Limited.
3172.67.162.32Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
365.8.102.111Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
343.134.73.94Singapore, Singapore
AS132203Tencent Building, Kejizhongyi Avenue
319--

Detected Technologies2

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T19E42C730241124421337DE91B4A38F0C6913973BCB4559A873AE56A1EFC6DF98E77BB8

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:1mRkjU3Hvxs9PxwBh0gXwBNNgSoiYokDQx3pDQxHUigyxTzhBeC3D:YWGmgT7oEQNNQVZTzhBeC3D

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:12144:QBRYoAHEJAOwwgQGkQQRABOWTBMNMoETYkgNBQDiOVoqAjQAAxhAiHQGQnQCCXKKQQYDOkBgZIAqgCNB+EkmYIkJVAYJqiAx

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:e7e7e7ffe7e7e7ff
Perceptual Hash:b333333399cc668c
Difference Hash:4c4c4d140c4d0c00
Wavelet Hash:24242020e7e7e7e7
Color Hash:N/A

Other Hashes

Crop Resistant:4c4c4d140c4d0c00

Scan History

Scan history not available

Unable to load historical scan data