Security Scan Report: www.bqzl36.vip

Redirected to:
https://www.j8nzm5.vip:9973/register34610?i_code=73104968
Site favicon
Submitted: Completed: publiccompleted
This website contacted 3 IPs in 3 countries across 3 domains to perform 37 HTTP transactions. The main domain is bqzl36.vip and was registered 2 months ago.

Submitted URL: https://www.bqzl36.vip

Effective URL:
https://www.j8nzm5.vip:9973/register34610?i_code=73104968
Redirected

AI Security Verdict

High Risk

Confidence: 80%

8
Risk Score

Gambling registration page falsely claiming affiliation with Real Madrid, served across redirected unrelated domains, with password-capture form and a single-source malware (Formbook) threat-intel hit on the entry domain.

Risk Factors (4)
Impersonation of Real Madrid football club brand on non-official domains
Credential-collecting registration form (password + confirm password) on a gambling site
Threat-intelligence match naming a malware family (Formbook) on the entry domain
Cross-domain redirect from entry domain to a different registrable domain hosting the form
Domain age information unavailable

Details

Page Title

网-皇家马德里足球俱乐部官方区域合作伙伴    开云体育官

Scan Type

public

Domain Name Analysis

You're looking at domain 'www.bqzl36.vip' on the .vip top-level domain; it also runs on subdomain 'www'. The second-level label 'bqzl36' is 6 characters long containing zero vowels alongside four consonants, notching 2 digits. Tokenizing the label suggests three words: bq, zl, 36. Average segment length settles at 2 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://www.bqzl36.vip

Page Load Overview

23.43s
Total Load Time
955 KB
Total Size

Language Analysis

Primary Language

🇨🇳Chinese
Code: zh
Confidence:60%
Script:Han
Direction:ltr

Detection Details

Text Length:126 chars
Detector Agreement:100%

Website Classification

Primary Category

adult content35% confidence
Type: spa
Method: ml+structural

All Detected Categories

adult content
35%
blog personal website
35%
education learning
30%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1343.243.240.205Hong Kong
AS153494XRUI TECHNOLOGY LIMITED
1243.251.114.42Australia
AS132825MYTEK TRADING PTY LTD
12154.220.10.112Seychelles
AS135097LUOGELANG (FRANCE) LIMITED
373--

Detected Technologies3

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T10AC22B334909B4730D363C9AE1E26A4E2D0CD21AD56356C4F2ACF6EAD6DEF095C0F594

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:8EhxQCp8MZHhmqdOTBtSk99MjFVuA+Pm3:8whJdOFLMjFVGm3

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:26627:ZlKgkgAg0TA4mBEIRBhjCLLtazE5IAkBJiEMCpDglAECUBQJMg4JoSCkSsgqCJQwsPCAgUlEGsysSAQBxCJgVECDAAkwxxJm

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffffff1818181000
Perceptual Hash:cc9cb306369a9de2
Difference Hash:e0f0b2b2b2b2b0e0
Wavelet Hash:ffffff1818181800
Color Hash:#5382ac

Other Hashes

Crop Resistant:e0f0b2b2b2b2b0e0

Scan History

Scan history not available

Unable to load historical scan data