Security Scan Report: www.bqzl36.vip

Redirected to:
https://www.t4pirx.vip:9077/register37131?i_code=73104968
Site favicon
Submitted: Completed: publiccompleted
This website contacted 5 IPs in 4 countries across 4 domains to perform 39 HTTP transactions. The main domain is bqzl36.vip and was registered 2 months ago.

Submitted URL: https://www.bqzl36.vip

Effective URL:
https://www.t4pirx.vip:9077/register37131?i_code=73104968
Redirected

AI Security Verdict

High Risk

Confidence: 78%

7
Risk Score

Gambling registration site impersonating Kaiyun Sports and claiming Real Madrid partnership on non-official domains; captures passwords and carries a formbook malware threat-intel match. Avoid.

Risk Factors (5)
Impersonation of a major football club (Real Madrid) and a known gambling brand
Credential-collecting registration form on a non-official domain
Formbook malware threat-intel match on the primary/entry domain
Multi-domain redirect chain ending on a different registrable domain
Suspicious Function() constructor usage (5 calls) in page JavaScript
Domain age information unavailable

Details

Page Title

体育官网-皇家马德里足球俱乐部官方区域合作伙伴    开云

Scan Type

public

Domain Name Analysis

Within the .vip top-level domain, 'www.bqzl36.vip' is registered; it also runs on subdomain 'www'. The core label 'bqzl36' covers 6 characters containing zero vowels alongside 4 consonants, along with 2 digits. Word splitting yields 3 words: bq, zl, 36. Average segment length settles at two characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://www.bqzl36.vip

Page Load Overview

8.88s
Total Load Time
1.1 MB
Total Size

Language Analysis

Primary Language

🇨🇳Chinese
Code: zh
Confidence:60%
Script:Han
Direction:ltr

Detection Details

Text Length:122 chars
Detector Agreement:100%

Website Classification

Primary Category

e-commerce shopping78% confidence
Type: spa
Method: ml+structural+ocr_tiebreaker

All Detected Categories

e-commerce shopping
78%
adult content
57%
healthcare medical
48%
news media journalism
41%
entertainment media
39%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
11154.220.10.112Seychelles
AS135097LUOGELANG (FRANCE) LIMITED
743.243.240.205Hong Kong
AS153494XRUI TECHNOLOGY LIMITED
743.251.114.42Australia
AS132825MYTEK TRADING PTY LTD
714.0.58.130Cdnetworks · CDNBangkok, Bangkok, Thailand
AS54994Meteverse Limited.
713.70.30.8Azure · CLOUDHong Kong, Hong Kong
AS8075Microsoft Corporation
395--

Detected Technologies3

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T15FC22B334909B4730D3A3C9AE1E26A4E1D0CD21AD56346C8F2ACF6EAD6DEF095D0F594

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:8EhxQCp8MZHMqtah6mpYZxMU76gGBtS6x9flMjURZsVuSbxfcRBx2OcRBq3hcRO2:8EhxQCp8MZHhmqdOTBtSk99MjFVuA+A1

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:26627:BkYgAAAoUyQO+FgABAADEvIhISCJBIHApykICAJg8HQmwASoEB5DoDIoI0iIKRIwIbiYAXwMmA2OSIQgUKZJHdCxEAkABGRE

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffffbd1818180000
Perceptual Hash:cc88b306b69b9de2
Difference Hash:6171333333337141
Wavelet Hash:fffffb1818180091
Color Hash:#e0ad6c

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data