Security Scan Report: r91597.com

Submitted: Completed: publiccompleted
This website contacted 3 IPs in 2 countries across 8 domains to perform 26 HTTP transactions. The main domain is r91597.com and was registered 8 years ago.

Submitted URL: https://r91597.com/

AI Security Verdict

High Risk

Confidence: 82%

8
Risk Score

Aged domain repurposed as an offshore casino mirror hub falsely presenting itself as Macao Sands; flagged as phishing by threat intel and Spamhaus DROP-listed. Avoid.

Risk Factors (5)
Impersonation of the Macao Sands / Sands casino brand on a non-official domain
Unlicensed online gambling funnel with rotating alternate mirror domains
Phishing threat-intel reports on the primary domain and two outbound-linked domains
Spamhaus DROP-listed traffic (IDS HIGH alert)
Domain not ranked in Cisco Umbrella despite being 8 years old — pattern consistent with a repurposed/aged domain
Domain age information unavailable

Details

Page Title

最快线路检测中心-全球最大门户

Scan Type

public

Domain Name Analysis

The domain name 'r91597.com' uses the commercial generic top-level domain (.com). The core label 'r91597' covers 6 characters split between 0 vowels and 1 consonant, along with 5 digits. It segments into two words: r, 91597. Median word length is three characters. No strong language cues emerged from the frequency lists.

Screenshot

WG PAP ]순72072 Biz: 8159.c0M 9169.66 Iw Sands 8159.com MNS WS NAN WEA RRB Wh r \\ 룬\띠수미. 9 LINE DETECTION CENTER ! 18806 | | 을 Online Service ls S\ 2x24 Ie 120ms > https:/www.1...

Page Load Overview

14.12s
Total Load Time
2.5 MB
Total Size

Language Analysis

Primary Language

🇨🇳Chinese
Code: zh
Confidence:60%
Script:Han
Direction:ltr

Detection Details

Text Length:636 chars
Detector Agreement:100%

Website Classification

Primary Category

cryptocurrency blockchain91% confidence
Type: static
Method: ml+structural+ocr_tiebreaker

All Detected Categories

cryptocurrency blockchain
91%
technology software
86%
finance banking
80%
documentation technical
77%
adult content
70%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
10202.95.11.96China
AS152194CTG Server Limited
8191.223.42.96Hong Kong, Hong Kong
AS140227Hong Kong Communications International Co., Limited
8191.223.42.198Hong Kong, Hong Kong
AS140227Hong Kong Communications International Co., Limited
263--

Detected Technologies4

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1523224B3D7E4A4163221D1CD7575FB6C68D3203BDD899951FA7C17AE0F88CA1540394B

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:qYdNw4cKOhytXEx0AOOC5xoHPkEupYvgq4LkCum7h9CjZKA54tHwe3:qYdNw4c5h2OYxfNpfh9El54tX

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:10993:hphoSQEBYRwAFBoJwOMphRahUqxJJEhxeeAAnCDnJZANwJwCSTZigZxDQ1b4gGCFgMYFIUg5IA09tIgSBsYogCy0WpDCcgAt

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:3c3c3c7c3c0c3c3c
Perceptual Hash:82c93b3b6c6cb23c
Difference Hash:d9d9e8e0e9e9e5e9
Wavelet Hash:3c3c3c7c343c3c3c
Color Hash:N/A

Other Hashes

Crop Resistant:d9d8e8e0e8e9e5e9

Scan History

Scan history not available

Unable to load historical scan data