Security Scan Report: www.bqzl36.vip

Redirected to:
https://www.boithn.vip:6502/register56107?i_code=73104968
Site favicon
Submitted: Sep 21, 2026, 4:47:28 AMCompleted: Sep 21, 2026, 4:47:54 AMpubliccompleted

This website contacted 4 IPs in 4 countries across 4 domains to perform 39 HTTP transactions. The main domain is boithn.vip and was registered 1 year 2 months ago.

Submitted URL: https://www.bqzl36.vip

Effective URL:

https://www.boithn.vip:6502/register56107?i_code=73104968
Redirected

AI Security Verdict

High Risk

Confidence: 76%

8
Risk Score

Unlicensed Kaiyun/Real Madrid-branded betting site on .vip domains, using a password registration form and cross-domain redirects; entry domain also flagged as Formbook malware infrastructure — avoid entirely.

Risk Factors (6)
Illegal/unlicensed online gambling operation (Kaiyun Sports branding)
Brand impersonation of Real Madrid FC ('official regional partner' claim)
Credential-collecting registration form on an unrelated .vip domain
Entry domain flagged as Formbook malware infrastructure (single-source, unverified)
Obfuscated code generation (Function() constructor) on a minimal page
Entry domain unranked in Cisco Umbrella with no reputation
Domain age information unavailable

Details

Page Title

官方区域合作伙伴    开云体育官网-皇家马德里足球俱乐部

Scan Type

public

Domain Name Analysis

Within the .vip top-level domain, 'www.bqzl36.vip' is registered, featuring subdomain 'www'. The second-level label 'bqzl36' is 6 characters long holding zero vowels versus four consonants; bonus characters include 2 digits. Splitting it apart reveals three words: bq, zl, 36. Median word length is 2 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://www.bqzl36.vip

Page Load Overview

6.58s
Total Load Time
1010 KB
Total Size

Language Analysis

Primary Language

🇨🇳Chinese
Code: zh
Confidence:60%
Script:Han
Direction:ltr

Detection Details

Text Length:126 chars
Detector Agreement:50%

Website Classification

Primary Category

adult content28% confidence
Type: spa
Method: ml+structural

All Detected Categories

adult content
28%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
12174.35.84.221Meteverse · CDNPalermo, Sicily, Italy
AS54994Meteverse Limited.
9154.220.10.112Seychelles
AS135097LUOGELANG (FRANCE) LIMITED
943.243.240.205Hong Kong
AS153494XRUI TECHNOLOGY LIMITED
914.0.58.130Cdnetworks · CDNBangkok, Bangkok, Thailand
AS54994Meteverse Limited.
394--

Detected Technologies3

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T12CC23C334809B8730D363C9AE5E66A4E1D0CD21AD56346C4F2ADF6EAD6DEF0A5C0F494

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:dEhxQCp8MZTMqtah6mpYZxMU76gGBtS6x9flMjURZsVuSbxfcRBx2OcRBq3hcROW:dEhxQCp8MZThmqdOTBtSk99MjFVuA+I

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:26607:J1AgkAwp1RsR6BEJJAADAMAFgmXAAEBDgCEaJJN8+kSGUDQsEBBYQIyo0cCuDIQwEHGQiEkIEE6gQIAJwKNxAsAzE0gAJwMW

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffffff1818180000
Perceptual Hash:cc8cb326b69899b3
Difference Hash:e8f0b2b2b2b2f0e0
Wavelet Hash:ffffff1818181800
Color Hash:#bf9540

Other Hashes

Crop Resistant:e8f0b2b2b2b2f0e0

Scan History

Scan history not available

Unable to load historical scan data