Security Scan: 502 Bad Gateway

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/753935fd-f6d1-4c83-be52-d8404f6b16bd Domain and IP registration (RDAP)/api/v1/rdap/753935fd-f6d1-4c83-be52-d8404f6b16bdHow often this domain was scanned/api/v1/domain/stats/unlockpremium.pages.dev Scan history for this domain/api/v1/domain/history/unlockpremium.pages.dev?limit=15

This website contacted 2 IPs in 1 country across 2 domains to perform 4 HTTP transactions. The main domain is pages.dev and was registered 6 years ago.

Submitted URL: http://unlockpremium.pages.dev/

Effective URL:

https://mysecretsnap.com/

Redirected

AI Security Verdict

Moderate Risk

Confidence: 55%

Risk Score

Cross-domain redirect from a free pages.dev subdomain to mysecretsnap.com, which serves only a 502 error page. No forms, no malware, no Indicators of Compromise; ML classifier flags phishing, so treat with caution.

Risk Factors (5)

Cross-domain redirect from a free hosting subdomain (unlockpremium.pages.dev) to an unrelated domain (mysecretsnap.com)

Unknown page age on a shared hosting tenant — subdomain could have been created recently

Machine-learning classifier flags the site as phishing scam (67% confidence)

Domain naming consistent with a premium-content/unlock lure

Unranked in Cisco Umbrella (no reputation) and page currently unreachable/erroring

Safety Factors (6)

No credential, login or payment forms present (verified: 0 total forms)

No Indicators of Compromise matches on the page or its resources

No JavaScript malware / YARA patterns and no native-YARA high-precision hits

No known malicious kit in the kit roster

No cross-origin credential exfiltration or third-party script hosts

Only IDS alerts are informational 'ET INFO' Cloudflare Pages.dev observations, not phishing/malware alerts

Domain age information unavailable

Details

Page Title

502 Bad Gateway

Scan Type

public

Domain Name Analysis

You're looking at domain 'unlockpremium.pages.dev' on the developer-focused generic top-level domain (.dev) with subdomain 'unlockpremium'. The second-level label 'pages' is 5 characters long containing 2 vowels alongside three consonants. Breaking it apart gives one word: pages. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

0.58s

Total Load Time

1 KB

Total Size

Language Analysis

Primary Language

🏳️UNKNOWN

Code: unknown

Confidence:0%

Detection Details

Detector Agreement:0%

Website Classification

Primary Category

phishing scam67% confidence

Type: static

Method: ml+structural+ocr_tiebreaker

All Detected Categories

phishing scam

67%

adult content

37%

real estate property

30%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
2	172.66.47.167Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	172.66.44.89Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
4	2	-	-

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1AC31F0FA36A754215D362D99A875A298B4B27029960EA11274CCCDC62F12C1215F7EDC

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

24:D4ILJZ4apncroiTEaKpn7cLS3erZr1JZ2uvpYLuutvr7sxRWyRWmKpHsHRWyRWmY:D4Iz5TiTh4om3eFr55ydvnsxwywmK5ss

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:1486:AQQAAAAAAAAAAAggAAQQAAAAJAEABwIAAAAQAAAAAggQAAAABACBAACABAAAAAAAAEAAABAAQAQIAAABAAgAAAJQAAAIIAAA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:3fffffffffffffff

Perceptual Hash:870707070f0f1f3f

Difference Hash:c000000000000000

Wavelet Hash:30f0f0f0f0f0f0f0

Color Hash:#e06c6c

Other Hashes

Crop Resistant:c000000000000000

Scan History

Scan history not available

Unable to load historical scan data

Security Scan Report: unlockpremium.pages.dev