Security Scan Report: www.bqzl36.vip

Redirected to:
https://www.m82ijc.vip:9061/register20586?i_code=73104968
Site favicon
Submitted: Sep 13, 2026, 1:47:48 AMCompleted: Sep 13, 2026, 1:48:56 AMpubliccompleted

Summary

This website contacted 4 IPs in 4 countries across 4 domains to perform 9 HTTP transactions. The main domain is m82ijc.vip and was registered 1 month ago.

Submitted URL: https://www.bqzl36.vip

Effective URL: https://www.m82ijc.vip:9061/register20586?i_code=73104968Redirected

AI Security Verdict

High Risk

Confidence: 78%

8
Risk Score

Unranked .vip gambling page impersonating Kaiyun Sports and claiming Real Madrid partnership, harvesting account credentials via a registration form with a malware-linked domain.

Risk Factors
Impersonation of a well-known gambling brand (Kaiyun Sports) and Real Madrid club endorsement on a mismatched domain
Credential-capturing registration form on an unranked, recently registered gambling domain
Formbook malware threat-intelligence association on the primary domain (single-source)
Cross-domain redirect to an unusual non-standard port (9061)
Domain age information unavailable

Details

Page Title

部官方区域合作伙伴    开云体育官网-皇家马德里足球俱乐

Scan Type

public

Language

🇨🇳

Chinese

(60% confidence)

Category

gambling betting

(31%)

Domain Information

The domain 'www.bqzl36.vip' uses the .vip top-level domain, featuring subdomain 'www'. The registrable portion 'bqzl36' spans 6 characters with zero vowels and four consonants, plus 2 digits. Word splitting yields three words: bq, zl, 36. Median word length comes out to two characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://www.bqzl36.vip

Page Load Overview

23.70s
Total Load Time
39
HTTP Requests
4
Domains
252 KB
Total Size

Language Analysis

Primary Language

🇨🇳Chinese
Code: zh
Confidence:60%
Script:Han
Direction:ltr

Detection Details

Language Code:zh
Detection Confidence:60%
Script Type:Han
Text Length:126 chars
Detector Agreement:50%

Website Classification

Primary Category

gambling betting31% confidence
Type: spa
Method: ml+structural

All Detected Categories

gambling betting
31%
adult content
31%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
12154.220.10.112Seychelles
AS135097LUOGELANG (FRANCE) LIMITED
943.251.114.42Australia
AS132825MYTEK TRADING PTY LTD
943.243.240.205Hong Kong
AS153494XRUI TECHNOLOGY LIMITED
914.0.58.130Cdnetworks · CDNBangkok, Bangkok, Thailand
AS54994Meteverse Limited.
394--

Page Statistics

39
Requests
4
Unique Domains
1.0 MB
Total Size

Detected Technologies3

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T10AC23B334909B4730C3A3C9AE1E26A4E1D0DD21AD56346C8F2ACF6EAD6DEF095C0F494

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:8EhxQCp8MZHhmqdOTBtSk99MjFVuA+1o/W:8whJdOFLMjFVBW

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:26607:BEaAUEAowQA8mEEABBgBFtKBgUWgUQBBpUgUKIH8oBUGwCQIoBwZoCgsiuiaBRZQAVC4hUBHGAgMAIQA0ALAfTCDEQmwACyE

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffffbd1818180000
Perceptual Hash:cc88b306b69b9de2
Difference Hash:6171333333337141
Wavelet Hash:fffffb1818180091
Color Hash:#e0ce6c

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data