Security Scan: 502 Bad Gateway

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/dbc020ca-cdb0-46b4-a4b3-671c3e643a9d Domain and IP registration (RDAP)/api/v1/rdap/dbc020ca-cdb0-46b4-a4b3-671c3e643a9dHow often this domain was scanned/api/v1/domain/stats/iccu-2fa.web.app Scan history for this domain/api/v1/domain/history/iccu-2fa.web.app?limit=15

This website contacted 6 IPs in 1 country across 7 domains to perform 9 HTTP transactions. The main domain is web.app and was registered 7 years ago.

Submitted URL: https://iccu-2fa.web.app/

Effective URL:

https://connect-secure-session23.ga/U3Nm4qH

Redirected

AI Security Verdict

Moderate Risk

Confidence: 68%

Risk Score

Deceptive 'iccu-2fa' hostname redirecting to a random .ga domain, a classic phishing-chain shape; no credential form was captured, so treat as high-risk impersonation infrastructure and avoid.

Risk Factors (4)

Deceptive hostname presenting as an 'ICCU' two-factor authentication portal on a non-official firebaseapp subdomain

Cross-domain redirect to an unrelated free .ga domain with a random alphanumeric path, consistent with phishing redirect infrastructure

Unreachable 502 error page with 'Redirecting...' title instead of substantive content — conceals the true destination

Unranked domain on shared hosting with unknown creation date for the subdomain

Safety Factors (5)

No verified credential, password or payment fields (0 forms parsed from DOM)

No Indicators of Compromise matched against the page or its resources

No JavaScript malware/YARA patterns and no credential exfiltration detected

No known malicious kit identified in the kit roster

No concrete malicious signal (no IoC / YARA / Safe-Browsing / IDS / credential form / brand impersonation) — elevated risk rested on domain age or reputation alone; clamped from 7 to 5

Domain age information unavailable

Details

Page Title

502 Bad Gateway

Scan Type

public

Domain Name Analysis

You're looking at domain 'iccu-2fa.web.app' on the application-focused generic top-level domain (.app) with subdomain 'iccu-2fa'. Its registrable label 'web' stretches across 3 characters holding 1 vowel versus 2 consonants. Tokenizing the label suggests one word: web. Median word length is 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

0.31s

Total Load Time

233 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:14 chars

Detector Agreement:0%

Website Classification

Primary Category

phishing/scam40% confidence

Type: dynamic

Method: structural

All Detected Categories

phishing/scam

40%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
4	199.36.158.100Fastly · CDN	United States	AS54113Fastly, Inc.
1	151.101.1.155Fastly · CDN	United States	AS54113Fastly, Inc.
1	104.26.9.123Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	142.251.150.120Google · CDN	United States	AS15169Google LLC
1	104.16.180.112Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	104.17.25.14Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
9	6	-	-