Security Scan Report: www.bqzl36.vip

Redirected to:
https://www.j8nzm5.vip:9973/register34610?i_code=73104968
Submitted: Completed: publiccompleted
This website contacted 3 IPs in 3 countries across 3 domains to perform 37 HTTP transactions. The main domain is bqzl36.vip and was registered 2 months ago.

Submitted URL: https://www.bqzl36.vip

Effective URL:
https://www.j8nzm5.vip:9973/register34610?i_code=73104968
Redirected

AI Security Verdict

High Risk

Confidence: 78%

8
Risk Score

Kaiyun-branded gambling page on non-official domains serving a credential-capturing registration form with hidden password fields, plus a single-source formbook malware report — high risk, avoid.

Risk Factors (6)
Impersonation of the Kaiyun gambling brand on a non-official domain
Credential-capturing registration form (password + confirm password)
Hidden password fields in the DOM
Cross-domain redirect to a second unknown domain (j8nzm5.vip) for registration
Single-source unverified 'formbook' malware threat-intel match on the entry domain
Domain is unranked in Cisco Umbrella, no established reputation
Domain age information unavailable

Details

Page Title

N/Afrom scan record

Scan Type

public

Domain Name Analysis

The domain 'www.bqzl36.vip' uses the .vip top-level domain, featuring subdomain 'www'. Count 6 characters in 'bqzl36' split between zero vowels and four consonants, notching 2 digits. It segments into three words: bq, zl, 36. The median word length lands at two characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://www.bqzl36.vip

Page Load Overview

13.15s
Total Load Time
955 KB
Total Size

Language Analysis

Primary Language

🇨🇳Chinese
Code: zh
Confidence:60%
Script:Han
Direction:ltr

Detection Details

Text Length:96 chars
Detector Agreement:100%

Website Classification

Primary Category

cryptocurrency blockchain41% confidence
Type: spa
Method: ml+structural

All Detected Categories

cryptocurrency blockchain
41%
blog personal website
40%
government public service
40%
news media journalism
40%
adult content
35%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
13154.220.10.112Seychelles
AS135097LUOGELANG (FRANCE) LIMITED
1243.243.240.205Hong Kong
AS153494XRUI TECHNOLOGY LIMITED
1243.251.114.42Australia
AS132825MYTEK TRADING PTY LTD
373--

Detected Technologies3

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T18AC22B334909B4730C3A3C9AE1E26A4E1D0CD21AD56346C8F6ACF6EAD6DEF095D1F494

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:8EhxQCp8MZHhmqdOTBtSk99MjFVuA+LHT:8whJdOFLMjFVE

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:26627:FVKhgkwJ0iwe+FAABABDAMANKzBRNEUThSkOABDc8hSiQFQbEBpIgA6IwaAKR5ZAsDKABNlpEgOsQg0JlKXYPMCBAQgAJxII

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffffbd1818180000
Perceptual Hash:cc88b306b69b9de2
Difference Hash:6171333333337141
Wavelet Hash:fffffb1818180091
Color Hash:#53a9ac

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data