Security Scan: 502 Bad Gateway

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/3091eecd-647b-46fe-8642-8a74e3a5273f Domain and IP registration (RDAP)/api/v1/rdap/3091eecd-647b-46fe-8642-8a74e3a5273fHow often this domain was scanned/api/v1/domain/stats/bqzl36.vip Scan history for this domain/api/v1/domain/history/bqzl36.vip?limit=15

This website contacted 3 IPs in 3 countries across 3 domains to perform 4 HTTP transactions. The main domain is bqzl36.vip and was registered 2 months ago.

Submitted URL: https://www.bqzl36.vip

Effective URL:

https://www.j8nzm5.vip:9973/register34610?i_code=73104968

Redirected

AI Security Verdict

High Risk

Confidence: 78%

Risk Score

Kaiyun-branded gambling page on non-official domains serving a credential-capturing registration form with hidden password fields, plus a single-source formbook malware report — high risk, avoid.

Risk Factors (6)

Impersonation of the Kaiyun gambling brand on a non-official domain

Credential-capturing registration form (password + confirm password)

Hidden password fields in the DOM

Cross-domain redirect to a second unknown domain (j8nzm5.vip) for registration

Single-source unverified 'formbook' malware threat-intel match on the entry domain

Domain is unranked in Cisco Umbrella, no established reputation

Domain age information unavailable

Details

Page Title

502 Bad Gatewayfrom scan record

Scan Type

public

Domain Name Analysis

Domain 'www.bqzl36.vip' uses the .vip top-level domain and includes subdomain 'www'. The core label 'bqzl36' covers 6 characters containing 0 vowels alongside 4 consonants, along with two digits. Splitting it apart reveals three words: bq, zl, 36. Expect 2 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

42.28s

Total Load Time

1 KB

Total Size

Language Analysis

Primary Language

🇨🇳Chinese

Code: zh

Confidence:60%

Script:Han

Direction:ltr

Detection Details

Text Length:96 chars

Detector Agreement:100%

Website Classification

Primary Category

cryptocurrency blockchain41% confidence

Type: spa

Method: ml+structural

All Detected Categories

cryptocurrency blockchain

41%

blog personal website

40%

government public service

40%

news media journalism

40%

adult content

35%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
2	43.243.240.205	Hong Kong	AS153494XRUI TECHNOLOGY LIMITED
1	154.220.10.112	Seychelles	AS135097LUOGELANG (FRANCE) LIMITED
1	43.251.114.42	Australia	AS132825MYTEK TRADING PTY LTD
4	3	-	-