ScanMalware.com

Security Scan Report: www.bqzl36.vip

Redirected to:
https://www.onca59.vip:9163/register49804?i_code=73104968
Submitted: Sep 14, 2026, 7:47:38 AMCompleted: Sep 14, 2026, 7:49:25 AMpubliccompleted

Summary

This website contacted 4 IPs in 3 countries across 3 domains to perform 10 HTTP transactions. The main domain is onca59.vip and was registered 1 month ago.

Submitted URL: https://www.bqzl36.vip

Effective URL: https://www.onca59.vip:9163/register49804?i_code=73104968Redirected

AI Security Verdict

High Risk

Confidence: 72%

7
Risk Score

Offshore gambling registration site impersonating Kaiyun Sports (开云体育) and Real Madrid on an unrelated .vip domain, with a formbook malware indicator on the scanned domain. High risk; do not register or enter data.

Risk Factors
Brand impersonation of 开云体育 (Kaiyun Sports) and Real Madrid on an unrelated .vip domain
Illegal/offshore gambling registration page with password fields
Formbook malware family indicator on the scanned domain (single-source)
Cross-domain redirect from bqzl36.vip to a different registrable domain onca59.vip:9163
Domain age information unavailable

Details

Page Title

N/A

Scan Type

public

Language

🇨🇳

Chinese

(60% confidence)

Category

cryptocurrency blockchain

(41%)

Domain Information

You're looking at domain 'www.bqzl36.vip' on the .vip top-level domain and includes subdomain 'www'. The core label 'bqzl36' covers 6 characters with zero vowels and 4 consonants, plus 2 digits. Tokenizing the label suggests 3 words: bq, zl, 36. Median word length comes out to two characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://www.bqzl36.vip

Page Load Overview

80.28s
Total Load Time
32
HTTP Requests
3
Domains
126 KB
Total Size

Language Analysis

Primary Language

🇨🇳Chinese
Code: zh
Confidence:60%
Script:Han
Direction:ltr

Detection Details

Language Code:zh
Detection Confidence:60%
Script Type:Han
Text Length:96 chars
Detector Agreement:100%

Website Classification

Primary Category

cryptocurrency blockchain41% confidence
Type: spa
Method: ml+structural

All Detected Categories

cryptocurrency blockchain
41%
blog personal website
40%
government public service
40%
news media journalism
40%
adult content
35%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
843.243.240.205Hong Kong
AS153494XRUI TECHNOLOGY LIMITED
8154.220.10.112Seychelles
AS135097LUOGELANG (FRANCE) LIMITED
843.251.114.42Australia
AS132825MYTEK TRADING PTY LTD
813.70.30.8Azure · CLOUDHong Kong, Hong Kong
AS8075Microsoft Corporation
324--

Page Statistics

32
Requests
3
Unique Domains
475.2 KB
Total Size

Detected Technologies3

X-UA-Compatible
100%
React
30%
Ant Design
30%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1EDC22B334909B4730D363C9AE1E26A4E1D0CD21AD56346C8F2ACF6EAD6DEF095D0F494

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:8EhxQCp8MZHhmqdOTBtSk99MjFVuA+JI4:8whJdOFLMjFVYv

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:26607:BVKBkgQJkAg5EAlIJChBGrKJIxFRZJNQBwEsAJVYwAWGIDwbEpoIEBiAY4APCZIQMbCIyaiDOAukAgULAgCRUkASkEjYIxds

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffffbd1818180000
Perceptual Hash:cc88b306b69b9de2
Difference Hash:6171333333337141
Wavelet Hash:fffffb1818180091
Color Hash:#2dd2c2

Other Hashes

Crop Resistant:6161616161716161,6971333333337141

Scan History

Scan history not available

Unable to load historical scan data