Security Scan Report: www.bqzl36.vip

Redirected to:
https://www.u96as9.vip:6507/register49141?i_code=73104968
Site favicon
Submitted: Sep 14, 2026, 3:47:42 PMCompleted: Sep 14, 2026, 3:48:48 PMpubliccompleted

Summary

This website contacted 4 IPs in 4 countries across 4 domains to perform 10 HTTP transactions. The main domain is u96as9.vip and was registered 1 month ago.

Submitted URL: https://www.bqzl36.vip

Effective URL: https://www.u96as9.vip:6507/register49141?i_code=73104968Redirected

AI Security Verdict

High Risk

Confidence: 82%

8
Risk Score

Illegal gambling registration page impersonating 开云体育/Kaiyun Sports and Real Madrid on unranked domains, with a formbook malware indicator on the entry domain. Avoid and report.

Risk Factors
Impersonation of the 开云体育 / Kaiyun Sports gambling brand and of Real Madrid football club on non-official domains
Credential-collecting registration form (2 password fields) inside an unlicensed gambling funnel
Single-source malware indicator (formbook) on the entry domain
Multi-hop cross-domain redirect with affiliate i_code parameter to a second unranked domain
Domain not present in Cisco Umbrella top 1M; entry domain only ~119 days old
OCR/served content is garbled and inconsistent with the claimed brand ('Foie Kalyun.com'), typical of recycled kit templates
Domain age information unavailable

Details

Page Title

部官方区域合作伙伴    开云体育官网-皇家马德里足球俱乐

Scan Type

public

Language

🇨🇳

Chinese

(60% confidence)

Category

gambling betting

(60%)

Domain Information

You're looking at domain 'www.bqzl36.vip' on the .vip top-level domain with subdomain 'www'. The second-level label 'bqzl36' is 6 characters long holding zero vowels versus four consonants, notching two digits. Breaking it apart gives three words: bq, zl, 36. Average segment length settles at two characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://www.bqzl36.vip

Page Load Overview

44.21s
Total Load Time
39
HTTP Requests
4
Domains
541 KB
Total Size

Language Analysis

Primary Language

🇨🇳Chinese
Code: zh
Confidence:60%
Script:Han
Direction:ltr

Detection Details

Language Code:zh
Detection Confidence:60%
Script Type:Han
Text Length:126 chars
Detector Agreement:50%

Website Classification

Primary Category

gambling betting60% confidence
Type: spa
Method: ml+structural

All Detected Categories

gambling betting
60%
adult content
25%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
12154.220.10.112Seychelles
AS135097LUOGELANG (FRANCE) LIMITED
943.243.240.205Hong Kong
AS153494XRUI TECHNOLOGY LIMITED
9174.35.84.221Meteverse · CDNPalermo, Sicily, Italy
AS54994Meteverse Limited.
914.0.58.130Cdnetworks · CDNBangkok, Bangkok, Thailand
AS54994Meteverse Limited.
394--

Page Statistics

39
Requests
4
Unique Domains
1.1 MB
Total Size

Detected Technologies3

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T11BC23C334909B4730C3A3C9AE1E26A4E1D0CD21AD56346C8F2ACF6EAD6DEF095C1F594

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:8EhxQCp8MZHMqtah6mpYZxMU76gGBtS6x9flMjURZsVuSbxfcRBx2OcRBq3hcROz:8EhxQCp8MZHhmqdOTBtSk99MjFVuA+8W

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:26627:NlKBEgAp0QAZ3B3IRABCGvItgVEIQcAAIkEQCBN0sAEGEAwtEC4IgLQkJYCdKBAQoZI86W3ECE20AgQiwCNBErg3gImAhBTG

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffffff1818180000
Perceptual Hash:cc8cb326b69c9cb2
Difference Hash:e0f0b2b2b2b2f0e0
Wavelet Hash:ffffff1818181800
Color Hash:#e0af6c

Other Hashes

Crop Resistant:e0f0b2b2b2b2f0e0

Scan History

Scan history not available

Unable to load historical scan data