Security Scan Report: capitalone.coupahost.com

Redirected to:
https://authn.capitalone.com/idp/SSO.saml2
Submitted: Sep 27, 2026, 11:06:07 PMCompleted: Sep 27, 2026, 11:06:47 PMpubliccompleted

This website contacted 8 IPs in 1 country across 4 domains to perform 8 HTTP transactions. The main domain is authn.capitalone.com and was registered 31 years ago.

Submitted URL: https://capitalone.coupahost.com

Effective URL:

https://authn.capitalone.com/idp/SSO.saml2
Redirected

The Cisco Umbrella rank of the primary domain is #18,321 of the top 1 million websites

AI Security Verdict

Safe Website

Confidence: 90%

0
Risk Score

Legitimate SSO redirect to official Capital One authentication domain. No phishing, malware, or credential-harvesting indicators; the 502 error is an infrastructure issue.

Safety Factors (4)
Official Capital One authentication domain in final URL
Standard SAML SSO redirect flow
No credential or payment collection on this page
No Indicators of Compromise or malicious behavioral signals
Domain age information unavailable

Details

Page Title

502 Bad Gateway

Scan Type

public

Domain Name Analysis

The domain 'capitalone.coupahost.com' uses the commercial generic top-level domain (.com) and includes subdomain 'capitalone'. The core label 'coupahost' covers 9 characters split between 4 vowels and five consonants. Word splitting yields 3 words: coup, a, host. The median word length lands at four characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://capitalone.coupahost.com

Page Load Overview

2.77s
Total Load Time
13 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:64%
Script:Latin
Direction:ltr

Detection Details

Text Length:115 chars
Detector Agreement:100%

Website Classification

Primary Category

documentation technical56% confidence
Type: static
Method: ml+structural

All Detected Categories

documentation technical
56%
technology software
28%

Detected Features

Search

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
154.236.3.27Aws · CLOUDAshburn, Virginia, United States
AS14618Amazon.com, Inc.
154.236.3.101Aws · CLOUDAshburn, Virginia, United States
AS14618Amazon.com, Inc.
13.95.40.77Aws · CLOUDAshburn, Virginia, United States
AS14618Amazon.com, Inc.
13.95.40.72Aws · CLOUDAshburn, Virginia, United States
AS14618Amazon.com, Inc.
176.223.13.154Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
154.244.34.54Aws · CLOUDBoardman, Oregon, United States
AS16509Amazon.com, Inc.
152.223.59.71Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
152.27.121.233Aws · CLOUDBoardman, Oregon, United States
AS16509Amazon.com, Inc.
88--

Detected Technologies3

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T13731A8299CF6DC91CA7211109AF5F10C5D5DA6CF5216C8C430CC56953FD1F85C96BAEC

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

24:I7ta2QJ68qk+ARl7MWSpIVMxznAsdod111uK6t+nrtcMc2BeQqdD:IJVGl7MhpIInvqd11OtIt1h69

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:1533:AgEACAAAABAACQhkAAAABACABAAAAADAAAAACAAQAgACABAAAIAAACAQAYAAAAAgAgAAAggAAAQCABAAAAAgABIAyIAAAgAA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:3fffffffffffffff
Perceptual Hash:87070f0f0f0f0f1f
Difference Hash:e000000000000000
Wavelet Hash:30f0f0f000000000
Color Hash:#663a78

Other Hashes

Crop Resistant:e000000000000000

Scan History

Scan history not available

Unable to load historical scan data