Security Scan Report: www.bqzl36.vip

Redirected to:
https://www.lrnnyn.vip:7443/register65764?i_code=73104968
Site favicon
Submitted: Sep 19, 2026, 1:47:31 PMCompleted: Sep 19, 2026, 1:48:05 PMpubliccompleted

This website contacted 4 IPs in 4 countries across 4 domains to perform 39 HTTP transactions. The main domain is lrnnyn.vip and was registered 1 year 2 months ago.

Submitted URL: https://www.bqzl36.vip

Effective URL:

https://www.lrnnyn.vip:7443/register65764?i_code=73104968
Redirected

AI Security Verdict

High Risk

Confidence: 78%

8
Risk Score

Impersonates 开云体育 (Kaiyun Sports) and Real Madrid as an unlicensed gambling site on an unranked domain, with a credential-capturing registration form and a single-source Formbook malware report on the entry domain. Avoid.

Risk Factors (6)
Brand impersonation of Kaiyun Sports and Real Madrid football club branding on an unauthorized domain
Illegal/unauthorized gambling platform
Account registration form with password fields collecting user credentials
Single-source (unverified) Formbook malware threat-intelligence match on the entry domain
Cross-domain redirect chain from an unrelated entry domain to the final registration host
Unranked domain not present in Cisco Umbrella top 1M
Domain age information unavailable

Details

Page Title

官方区域合作伙伴    开云体育官网-皇家马德里足球俱乐部

Scan Type

public

Domain Name Analysis

The domain name 'www.bqzl36.vip' uses the .vip top-level domain; it also runs on subdomain 'www'. The second-level label 'bqzl36' is 6 characters long with zero vowels and 4 consonants, notching 2 digits. Tokenizing the label suggests three words: bq, zl, 36. Average segment length settles at two characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://www.bqzl36.vip

Page Load Overview

13.52s
Total Load Time
950 KB
Total Size

Language Analysis

Primary Language

🇨🇳Chinese
Code: zh
Confidence:60%
Script:Han
Direction:ltr

Detection Details

Text Length:126 chars
Detector Agreement:50%

Website Classification

Primary Category

gambling betting60% confidence
Type: spa
Method: ml+structural

All Detected Categories

gambling betting
60%
adult content
25%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
12172.65.242.166Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
9154.220.10.112Seychelles
AS135097LUOGELANG (FRANCE) LIMITED
943.243.240.205Hong Kong
AS153494XRUI TECHNOLOGY LIMITED
914.0.58.130Cdnetworks · CDNBangkok, Bangkok, Thailand
AS54994Meteverse Limited.
394--

Detected Technologies3

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1C7C22B334909B8B30D363C9AE5E26A4E1808D21AD56346C4F2EDF6EAD6DEF095C1F094

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:dEhxQCp8MZThmqdOTBtSk99MjFVuA+DKI:dohJdOFLMjFVXI

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:26607:FkKwGg4hk8gVZQBABCgjAPCnixFodJCyIiEsCBR48iWiQAAEEBpZgQosWAgJCRAwMWCYyU0imgyEaB0MRCfRCsoCkAjYZkFo

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffffff1818180000
Perceptual Hash:cc8cb326b69899b3
Difference Hash:e8f0b2b2b2b2f0e0
Wavelet Hash:ffffff1818181800
Color Hash:#bf9540

Other Hashes

Crop Resistant:e8f0b2b2b2b2f0e0

Scan History

Scan history not available

Unable to load historical scan data