Security Scan Report: www.bqzl36.vip

Redirected to:
https://www.q1tobu.vip:6502/register99083?i_code=99848766
Site favicon
Submitted: Completed: publiccompleted
This website contacted 3 IPs in 3 countries across 4 domains to perform 40 HTTP transactions. The main domain is bqzl36.vip and was registered 3 months ago.

Submitted URL: https://www.bqzl36.vip

Effective URL:
https://www.q1tobu.vip:6502/register99083?i_code=99848766
Redirected

AI Security Verdict

High Risk

Confidence: 80%

8
Risk Score

Gambling/betting front page falsely presenting itself as Real Madrid CFP's official regional partner for '开云体育', reached through a redirect chain with a fresh intermediary and a formbook malware tag on the entry domain; registration form harvests passwords.

Risk Factors (6)
Impersonation of Real Madrid CFP and the Kaiyun Sports gambling brand on a non-official, unranked domain
Formbook malware threat-intel match on the entry domain in the redirect chain (single-source, unverified)
Multi-hop redirect through a domain registered 87 days before the scan
Account registration form collecting passwords on a newly surfaced, unranked host
Password fields hidden from the rendered page
Service served on an unusual port (6502)
Domain age information unavailable

Details

Page Title

皇家马德里足球俱乐部官方区域合作伙伴    开云体育官网-

Scan Type

public

Domain Name Analysis

You're looking at domain 'www.bqzl36.vip' on the .vip top-level domain, featuring subdomain 'www'. The second-level label 'bqzl36' is 6 characters long containing 0 vowels alongside four consonants, along with two digits. Word splitting yields three words: bq, zl, 36. Expect 2 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://www.bqzl36.vip

Page Load Overview

6.66s
Total Load Time
1021 KB
Total Size

Language Analysis

Primary Language

🇨🇳Chinese
Code: zh
Confidence:60%
Script:Han
Direction:ltr

Detection Details

Text Length:126 chars
Detector Agreement:50%

Website Classification

Primary Category

real estate property97% confidence
Type: spa
Method: ml+structural+ocr_tiebreaker

All Detected Categories

real estate property
97%
finance banking
78%
adult content
67%
healthcare medical
60%
education learning
51%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1414.0.58.130Cdnetworks · CDNBangkok, Bangkok, Thailand
AS54994Meteverse Limited.
13154.220.10.112Seychelles
AS135097LUOGELANG (FRANCE) LIMITED
1343.243.240.202Hong Kong
AS153494XRUI TECHNOLOGY LIMITED
403--

Detected Technologies5

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T104B22B334909A8730C3A3D9EE1E26E4E190CE219C5635684F2ECF6E9D6DFF1A5D0E194

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:xjkD8Mrewqtah6mpYZxMU76gGBtS6xNlM5KRZsVuSbxfcRBx2OcRBq3hcROHNReU:xjkD8MreVmqdOTBtSknM5XVuA+r3

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:24019:A0Q9rBAA0FJXSKQIQggoRJJRUgwSkwxQQoUSJEBAGQJSMGahImFgYAKICAFybJuAETMoYlgBvA4IUtyjAqCwKpB5B4AQUIAF

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffffff1818180000
Perceptual Hash:cc88b326b69b99b2
Difference Hash:e8f0b2b2b2b2f0e0
Wavelet Hash:ffffff1818181800
Color Hash:N/A

Other Hashes

Crop Resistant:e8f0b2b2b2b2f0e0

Scan History

Scan history not available

Unable to load historical scan data