Security Scan Report: www.bqzl36.vip

Redirected to:
https://www.1ojmdl.vip:9978/register17865?i_code=73104968
Site favicon
Submitted: Completed: publiccompleted
This website contacted 4 IPs in 4 countries across 4 domains to perform 39 HTTP transactions. The main domain is bqzl36.vip and was registered 2 months ago.

Submitted URL: https://www.bqzl36.vip

Effective URL:
https://www.1ojmdl.vip:9978/register17865?i_code=73104968
Redirected

AI Security Verdict

High Risk

Confidence: 78%

8
Risk Score

Chinese-language gambling page impersonating Kaiyun Sports/Real Madrid, served on an unrelated domain with a username+password registration form and a single-source 'formbook' malware threat-intel match. High risk.

Risk Factors (5)
Brand impersonation of Kaiyun Sports (开云体育) / Real Madrid on a non-official domain
Account registration form collecting username and two password fields
Content-malware threat-intel match ('formbook') associated with the entry domain (single-source, unverified)
Cross-domain redirect chain bqzl36.vip → 1ojmdl.vip:9978 hosting the registration page
Unranked domain with no verifiable ownership
Domain age information unavailable

Details

Page Title

官方区域合作伙伴    开云体育官网-皇家马德里足球俱乐部

Scan Type

public

Domain Name Analysis

Domain 'www.bqzl36.vip' uses the .vip top-level domain; it also runs on subdomain 'www'. The second-level label 'bqzl36' is 6 characters long split between zero vowels and four consonants, notching two digits. Word splitting yields three words: bq, zl, 36. Median word length comes out to 2 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://www.bqzl36.vip

Page Load Overview

10.52s
Total Load Time
1.1 MB
Total Size

Language Analysis

Primary Language

🇨🇳Chinese
Code: zh
Confidence:60%
Script:Han
Direction:ltr

Detection Details

Text Length:126 chars
Detector Agreement:50%

Website Classification

Primary Category

gambling betting32% confidence
Type: spa
Method: ml+structural

All Detected Categories

gambling betting
32%
news media journalism
32%
adult content
31%
government public service
28%
blog personal website
26%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
12154.220.10.112Seychelles
AS135097LUOGELANG (FRANCE) LIMITED
943.243.240.205Hong Kong
AS153494XRUI TECHNOLOGY LIMITED
943.251.114.42Australia
AS132825MYTEK TRADING PTY LTD
914.0.58.130Cdnetworks · CDNBangkok, Bangkok, Thailand
AS54994Meteverse Limited.
394--

Detected Technologies3

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T10AC22B334909B4730D3A3C9AE1E26A4E1D0CD21AD56346C8F2ACF6EAD6DEF095D1E494

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:8EhxQCp8MZHMqtah6mpYZxMU76gGBtS6x9flMjURZsVuSbxfcRBx2OcRBq3hcROn:8EhxQCp8MZHhmqdOTBtSk99MjFVuA+M0

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:26627:RUIQiBxpVb4hCRBIJAhhWLCFw1FQJIByJyEMAJFkqEWHwCwLIhIRgAwAUICOTYpAEDKCoUCLOIKEIBQrgIL4Q1IAkUgQYRNk

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffffff1818181000
Perceptual Hash:cc8cb306369a9de6
Difference Hash:e0f0b2b2b2b2b0e0
Wavelet Hash:ffffff1818181800
Color Hash:#d22d96

Other Hashes

Crop Resistant:e0f0b2b2b2b2b0e0

Scan History

Scan history not available

Unable to load historical scan data