Security Scan: 502 Bad Gateway

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/d3846518-291e-4b51-9822-19dba737adb4 Domain and IP registration (RDAP)/api/v1/rdap/d3846518-291e-4b51-9822-19dba737adb4 Certificate Transparency/api/v1/ct/5o8n.j3de6.com How often this domain was scanned/api/v1/domain/stats/pub-e4a012d9691c4c53ab023eacf2db2601.r2.dev Scan history for this domain/api/v1/domain/history/pub-e4a012d9691c4c53ab023eacf2db2601.r2.dev?limit=15

This website contacted 3 IPs in 1 country across 3 domains to perform 5 HTTP transactions. The main domain is 5o8n.j3de6.com and was registered 29 years ago.

Submitted URL: https://pub-e4a012d9691c4c53ab023eacf2db2601.r2.dev/Google%20Verification.html

Effective URL:

https://5o8n.j3de6.com/5O8N/

Redirected

AI Security Verdict

High Risk

Confidence: 80%

Risk Score

Page impersonates Google with 'Google Verification' branding on a non-Google domain, hosted on Cloudflare R2 and redirected to j3de6.com. ML classifier flags phishing. High risk of credential theft or scam.

Risk Factors (4)

Brand impersonation of Google

Hosted on cloud storage bucket (r2.dev) and redirects to a different domain

ML classifier flags as phishing scam

Unranked domain (not in Cisco Umbrella top 1M)

Domain age information unavailable

Details

Page Title

502 Bad Gateway

Scan Type

public

Domain Name Analysis

The domain 'pub-e4a012d9691c4c53ab023eacf2db2601.r2.dev' uses the developer-focused generic top-level domain (.dev), featuring subdomain 'pub-e4a012d9691c4c53ab023eacf2db2601'. The registrable portion 'r2' spans 2 characters with 0 vowels and 1 consonant; bonus characters include one digit. Breaking it apart gives two words: r, 2. Average segment length settles at 1 character. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

1.72s

Total Load Time

5 KB

Total Size

Language Analysis

Primary Language

🇩🇪German

Code: de

Confidence:21%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:47 chars

Detector Agreement:50%

Language mismatch: Declared as en but detected as de

Website Classification

Primary Category

phishing scam67% confidence

Type: static

Method: ml+structural+ocr_tiebreaker

All Detected Categories

phishing scam

67%

adult content

37%

real estate property

30%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
3	104.18.54.45Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	142.251.157.119Google · CDN	United States	AS15169Google LLC
1	104.18.50.34Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
5	3	-	-