Security Scan: 502 Bad Gateway

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/25530020-9156-438f-b71d-e9a9d778d301 Domain and IP registration (RDAP)/api/v1/rdap/25530020-9156-438f-b71d-e9a9d778d301 Certificate Transparency/api/v1/ct/docu-sign.creativaplanning.com How often this domain was scanned/api/v1/domain/stats/objectstorage.ap-sydney-1.oraclecloud.com Scan history for this domain/api/v1/domain/history/objectstorage.ap-sydney-1.oraclecloud.com?limit=15

This website contacted 2 IPs in 2 countries across 2 domains to perform 3 HTTP transactions. The main domain is docu-sign.creativaplanning.com and was registered 4 months ago.

Submitted URL: https://objectstorage.ap-sydney-1.oraclecloud.com/n/sdl2lsmh7igo/b/Wire/o/paybonus.htm

Effective URL:

https://docu-sign.creativaplanning.com/

Redirected

The Cisco Umbrella rank of the primary domain is #4,295 of the top 1 million websitesTop 10K Site

AI Security Verdict

High Risk

Confidence: 78%

Risk Score

Deceptive domain impersonates DocuSign/Microsoft with anti-analysis scripts; no forms or IoC, but brand impersonation alone warrants high risk.

Risk Factors (4)

Brand impersonation via deceptive subdomain and page title

ML phishing classification (74% confidence)

Anti-analysis JavaScript behavior

Suspicious redirect from cloud storage to unrelated domain

Domain age information unavailable

Details

Page Title

502 Bad Gateway

Scan Type

public

Domain Name Analysis

The domain name 'objectstorage.ap-sydney-1.oraclecloud.com' uses the commercial generic top-level domain (.com) with subdomain 'objectstorage.ap-sydney-1'. Its registrable label 'oraclecloud' stretches across 11 characters containing 5 vowels alongside 6 consonants. Word splitting yields 2 words: oracle, cloud. Median word length is 5.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

2.12s

Total Load Time

7 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:17 chars

Detector Agreement:0%

Website Classification

Primary Category

phishing scam74% confidence

Type: static

Method: ml+structural+ocr_tiebreaker

All Detected Categories

phishing scam

74%

documentation technical

68%

technology software

66%

adult content

43%

news media journalism

35%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
2	134.70.92.3Oracle · CLOUD	Bungarribee, New South Wales, Australia	AS31898Oracle Corporation
1	172.232.140.122	Stockholm, Stockholm County, Sweden	AS63949Akamai Connected Cloud
3	2	-	-