Security Scan Report: www.bqzl36.vip

Redirected to:
https://www.pfxt58.vip:9553/register74554?i_code=99848766
Site favicon
Submitted: Completed: publiccompleted
This website contacted 4 IPs in 4 countries across 4 domains to perform 39 HTTP transactions. The main domain is bqzl36.vip and was registered 3 months ago.

Submitted URL: https://www.bqzl36.vip

Effective URL:
https://www.pfxt58.vip:9553/register74554?i_code=99848766
Redirected

AI Security Verdict

High Risk

Confidence: 82%

8
Risk Score

Unlicensed sports-betting registration page falsely claiming Real Madrid official-partner status, reached via a redirect chain through a newly registered domain; entry domain flagged as Formbook malware. Avoid.

Risk Factors (5)
Impersonation of Real Madrid football club's brand/official-partner status on a non-official domain
Illegal/unlicensed online gambling operation with account registration and referral codes
Multi-hop redirect chain through a freshly registered intermediary domain (kytiyu822.vip)
Entry domain flagged for the Formbook malware family (single-source, unverified)
Domain (bqzl36.vip) is 127 days old and absent from Cisco Umbrella top 1M
Domain age information unavailable

Details

Page Title

-皇家马德里足球俱乐部官方区域合作伙伴    开云体育官网

Scan Type

public

Domain Name Analysis

Within the .vip top-level domain, 'www.bqzl36.vip' is registered; it also runs on subdomain 'www'. Count 6 characters in 'bqzl36' holding 0 vowels versus 4 consonants, notching two digits. Breaking it apart gives three words: bq, zl, 36. The median word length lands at 2 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://www.bqzl36.vip

Page Load Overview

6.93s
Total Load Time
1009 KB
Total Size

Language Analysis

Primary Language

🇨🇳Chinese
Code: zh
Confidence:60%
Script:Han
Direction:ltr

Detection Details

Text Length:126 chars
Detector Agreement:100%

Website Classification

Primary Category

adult content35% confidence
Type: spa
Method: ml+structural

All Detected Categories

adult content
35%
blog personal website
35%
education learning
30%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
12172.65.242.166Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
9154.220.10.112Seychelles
AS135097LUOGELANG (FRANCE) LIMITED
943.243.240.202Hong Kong
AS153494XRUI TECHNOLOGY LIMITED
914.0.58.130Cdnetworks · CDNBangkok, Bangkok, Thailand
AS54994Meteverse Limited.
394--

Detected Technologies5

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1B9B22C33490DB9730C363C9EE1E26A4E2908E219C5635584F2ECF9EAD6DFF1A5D0E094

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:TjkD8Mr0wqtah6mpYZxMU76gGBtS6xNlM5KRZsVuSbxfcRBx2OcRBq3hcROkX0D9:TjkD8Mr0VmqdOTBtSknM5XVuA+aX0x

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:24025:QnhABDRl8nDHiEqMIGCAIMkABXklUwxI4VYpQBigBgkFGiAIIJMGhSg6RAgEidgznTE0gkGQgMXYgCCowuShxEGVqBAIAGUS

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffffff1818180000
Perceptual Hash:cc88b326b69b99b2
Difference Hash:e8f0b2b2b2b2f0e0
Wavelet Hash:ffffff1818181800
Color Hash:N/A

Other Hashes

Crop Resistant:e8f0b2b2b2b2f0e0

Scan History

Scan history not available

Unable to load historical scan data