Security Scan: 502 Bad Gateway

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/9c41e5c1-a683-4a7e-bc19-d8105e8cc1ce Domain and IP registration (RDAP)/api/v1/rdap/9c41e5c1-a683-4a7e-bc19-d8105e8cc1ce Certificate Transparency/api/v1/ct/docu-sign.creativaplanning.com How often this domain was scanned/api/v1/domain/stats/objectstorage.ap-sydney-1.oraclecloud.com Scan history for this domain/api/v1/domain/history/objectstorage.ap-sydney-1.oraclecloud.com?limit=15

This website contacted 2 IPs in 2 countries across 2 domains to perform 3 HTTP transactions. The main domain is docu-sign.creativaplanning.com and was registered 17 years ago.

Submitted URL: https://objectstorage.ap-sydney-1.oraclecloud.com/n/sdl2lsmh7igo/b/Wire/o/paybonus.htm

Effective URL:

https://docu-sign.creativaplanning.com/

Redirected

The Cisco Umbrella rank of the primary domain is #4,295 of the top 1 million websitesTop 10K Site

AI Security Verdict

High Risk

Confidence: 72%

Risk Score

Redirects to docu-sign.creativaplanning.com, a non-DocuSign/non-Microsoft domain whose page claims 'Microsoft Outlook' — clear brand impersonation with a 74% phishing classifier hit and anti-analysis scripts.

Risk Factors (4)

Brand impersonation of DocuSign (subdomain) and Microsoft Outlook (page title) on a domain neither owns

ML content classifier: phishing scam 74%

Anti-analysis techniques and encoding/decoding inline script functions

Phishing-style lure page hosted in an object-storage bucket before redirect

Domain age information unavailable

Details

Page Title

502 Bad Gateway

Scan Type

public

Domain Name Analysis

Within the commercial generic top-level domain (.com), 'objectstorage.ap-sydney-1.oraclecloud.com' is registered with subdomain 'objectstorage.ap-sydney-1'. The second-level label 'oraclecloud' is 11 characters long split between 5 vowels and 6 consonants. Word splitting yields two words: oracle, cloud. Average segment length settles at 5.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

2.07s

Total Load Time

7 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:17 chars

Detector Agreement:0%

Website Classification

Primary Category

phishing scam74% confidence

Type: static

Method: ml+structural+ocr_tiebreaker

All Detected Categories

phishing scam

74%

documentation technical

68%

technology software

66%

adult content

43%

news media journalism

35%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
2	172.232.140.122	Stockholm, Stockholm County, Sweden	AS63949Akamai Connected Cloud
1	134.70.92.3Oracle · CLOUD	Bungarribee, New South Wales, Australia	AS31898Oracle Corporation
3	2	-	-