Security Scan Report: www.bqzl36.vip

Redirected to:
https://www.pe1ram.vip:6848/register97744?i_code=99848766
Site favicon
Submitted: Completed: publiccompleted
This website contacted 4 IPs in 4 countries across 4 domains to perform 40 HTTP transactions. The main domain is bqzl36.vip and was registered 2 months ago.

Submitted URL: https://www.bqzl36.vip

Effective URL:
https://www.pe1ram.vip:6848/register97744?i_code=99848766
Redirected

AI Security Verdict

Confirmed Scam

Confidence: 92%

9
Risk Score

Fake 开云体育/Real Madrid partner registration page on pe1ram.vip:6848, reached via a redirect from a domain flagged for Formbook malware; collects passwords. Avoid and report.

Risk Factors (5)
Impersonation of the 开云体育 / Real Madrid partner brand on a non-official domain
Credential-collecting registration form with two password fields
Threat-intel report of Formbook information-stealer malware associated with the entry domain
Cross-domain redirect to an unfamiliar host on a non-standard port
No verifiable legitimacy signals; no ranking or published domain age for the final host
Domain age information unavailable

Details

Page Title

合作伙伴    开云体育官网-皇家马德里足球俱乐部官方区域

Scan Type

public

Domain Name Analysis

Within the .vip top-level domain, 'www.bqzl36.vip' is registered with subdomain 'www'. The second-level label 'bqzl36' is 6 characters long with 0 vowels and four consonants, notching 2 digits. Segmentation suggests 3 words: bq, zl, 36. Expect two characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://www.bqzl36.vip

Page Load Overview

8.07s
Total Load Time
960 KB
Total Size

Language Analysis

Primary Language

🇨🇳Chinese
Code: zh
Confidence:60%
Script:Han
Direction:ltr

Detection Details

Text Length:126 chars
Detector Agreement:50%

Website Classification

Primary Category

government public service73% confidence
Type: spa
Method: ml+structural

All Detected Categories

government public service
73%
gambling betting
48%
corporate business
39%
news media journalism
38%
adult content
33%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
10172.65.218.116Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
10154.220.10.112Seychelles
AS135097LUOGELANG (FRANCE) LIMITED
1043.243.240.208Hong Kong
AS153494XRUI TECHNOLOGY LIMITED
1014.0.58.130Cdnetworks · CDNBangkok, Bangkok, Thailand
AS54994Meteverse Limited.
404--

Detected Technologies5

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1BDB22B334909B8730C363D9EE1F26A4E2908D219D5634684F2ECF6EAD6DFF1A5D0E194

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:BjkD8Mr0wqtah6mpYZxMU76gGBtS6xNlM5KRZsVuSbxfcRBx2OcRBq3hcROerVb:BjkD8Mr0VmqdOTBtSknM5XVuA+sp

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:24025:UUiMBARt/hSFiOiCRCSEEblQBRllEggI4VypgRqyVhFQCqQKmIEDAQQjZAoEAYCtgEG0hUhAAqOQGA0oyvQpgQHQpZEICSVS

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffffff1818180000
Perceptual Hash:cc88b326b69b99b2
Difference Hash:e8f0b2b2b2b2f0e0
Wavelet Hash:ffffff1818181800
Color Hash:#b72dd2

Other Hashes

Crop Resistant:e8f0b2b2b2b2f0e0

Scan History

Scan history not available

Unable to load historical scan data