Security Scan Report: www.bqzl36.vip

Redirected to:
https://www.6d7mw2.vip:3410/register80439?i_code=99848766
Site favicon
Submitted: Completed: publiccompleted
This website contacted 4 IPs in 4 countries across 4 domains to perform 39 HTTP transactions. The main domain is bqzl36.vip and was registered 2 months ago.

Submitted URL: https://www.bqzl36.vip

Effective URL:
https://www.6d7mw2.vip:3410/register80439?i_code=99848766
Redirected

AI Security Verdict

Confirmed Scam

Confidence: 88%

9
Risk Score

Unranked .vip redirect chain to a registration funnel that claims Real Madrid/Kaiyun Sports official status and collects passwords; entry domain carries a Formbook malware report. Avoid.

Risk Factors (5)
Formbook malware association on the entry domain (single-source, unverified)
Unauthorized use of the Real Madrid / Kaiyun Sports brand on non-official .vip domains
Cross-domain redirect to a separate host with an affiliate registration code
Credential-collecting registration form on an unidentified gambling/sports-betting host
Domain of the destination page is of unknown provenance; no verifiable corporate identity
Domain age information unavailable

Details

Page Title

网-皇家马德里足球俱乐部官方区域合作伙伴    开云体育官

Scan Type

public

Domain Name Analysis

Domain 'www.bqzl36.vip' uses the .vip top-level domain, featuring subdomain 'www'. The registrable portion 'bqzl36' spans 6 characters containing 0 vowels alongside four consonants, plus 2 digits. Breaking it apart gives three words: bq, zl, 36. Average segment length settles at two characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://www.bqzl36.vip

Page Load Overview

19.10s
Total Load Time
923 KB
Total Size

Language Analysis

Primary Language

🇨🇳Chinese
Code: zh
Confidence:60%
Script:Han
Direction:ltr

Detection Details

Text Length:126 chars
Detector Agreement:100%

Website Classification

Primary Category

e-commerce shopping57% confidence
Type: spa
Method: ml+structural+ocr_tiebreaker

All Detected Categories

e-commerce shopping
57%
news media journalism
55%
healthcare medical
49%
entertainment media
46%
adult content
43%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
12172.65.218.116Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
9154.220.10.112Seychelles
AS135097LUOGELANG (FRANCE) LIMITED
943.243.240.208Hong Kong
AS153494XRUI TECHNOLOGY LIMITED
914.0.58.130Cdnetworks · CDNBangkok, Bangkok, Thailand
AS54994Meteverse Limited.
394--

Detected Technologies5

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1BEB22B334909B8730C363D9ED1F26A4E2908E219D5634684F2ECF6EAD6DFF1A5D0E194

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:TjkD8Mr0wqtah6mpYZxMU76gGBtS6xNlM5KRZsVuSbxfcRBx2OcRBq3hcROxyssL:TjkD8Mr0VmqdOTBtSknM5XVuA+bXsL

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:24025:QXyMADEN+HHFBDpEJEUUEZmCJXtgUAhIAHipgRqARiBQEiiACIIDDgASQAIgidgXmCEpAAmSgMPxGDEgAvCjwkl0qBAKKCQS

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffffff1818180000
Perceptual Hash:cc8cb30e8e969db1
Difference Hash:e0f0b2b2b232f0e0
Wavelet Hash:ffffff1818181800
Color Hash:#40acbf

Other Hashes

Crop Resistant:e0f0b2b2b232f0e0

Scan History

Scan history not available

Unable to load historical scan data