Security Scan: 502 Bad Gateway

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/36280789-09e6-4f00-a4d5-146de14ea198 Domain and IP registration (RDAP)/api/v1/rdap/36280789-09e6-4f00-a4d5-146de14ea198How often this domain was scanned/api/v1/domain/stats/w-auth-wf.web.app Scan history for this domain/api/v1/domain/history/w-auth-wf.web.app?limit=15

This website contacted 1 IP in 1 country across 2 domains to perform 3 HTTP transactions. The main domain is web.app and was registered 7 years ago.

Submitted URL: https://w-auth-wf.web.app/

Effective URL:

https://abhaykantho.com/w-auth/?key

Redirected

AI Security Verdict

High Risk

Confidence: 78%

Risk Score

Unrelated domain abhaykantho.com, reached from a throwaway web.app subdomain via a /w-auth/?key link, displays a browser-check gate naming WELLS FARGO BANK — brand impersonation on a site that is not Wells Fargo's.

Risk Factors (4)

Impersonation of Wells Fargo Bank on an unrelated domain (abhaykantho.com)

Cross-domain redirect from a throwaway web.app subdomain to a separate registrable domain with a /w-auth/?key path

Anti-bot / 'checking your browser' gating page — a common phishing-kit access gate

Inconsistent, conditional serving of content (502 error visible to the scanner vs. branded gate in the HTML)

Domain age information unavailable

Details

Page Title

502 Bad Gateway

Scan Type

public

Domain Name Analysis

Domain 'w-auth-wf.web.app' uses the application-focused generic top-level domain (.app), featuring subdomain 'w-auth-wf'. The second-level label 'web' is 3 characters long with 1 vowel and 2 consonants. It segments into 1 word: web. No strong language cues emerged from the frequency lists.