bqsp[.]com

Analysis of bqsp.com shows an active brand‑impersonation campaign aimed at the BNB Chain ecosystem. The site presents the page title “金星链‑分享区块链那点事” and is hosted on a Windows Server running Microsoft ASP.NET behind IIS. It resolves to IP 16.162.20.84, located in Hong Kong and announced by AS16509 (Amazon.com, Inc.). The domain employs a Let’s Encrypt R12 certificate and returns an HTTP 301 redirect. Reputation services rate the site poorly, with Scamadviser scoring 16/100, Gridinsoft 0/100, and the domain appearing on one security blocklist. VirusTotal reports 14 of 95 scanners flagging the host. Registration details indicate GoDaddy.com, LLC as registrar, with nameservers ns27.domaincontrol.com and ns28.domaincontrol.com, and a creation date of 14 September 2001. The domain is currently blocked by PhishDestroy. While the page content has not been fully inspected, the combination of high‑risk reputation metrics, confirmed brand targeting, and hosting on a cloud provider suggests a deliberate malicious infrastructure. Defenders should add the IP and domain to blocklists, monitor DNS queries for the associated nameservers, and consider sinkholing the address. Continuous re‑assessment is advised as threat actors may modify the payload or redirect logic. No further technical artifacts have been disclosed.