Security Scan: 502 Bad Gateway

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/fcd063d6-bb41-4ad1-9b46-0d6f7133a78e Domain and IP registration (RDAP)/api/v1/rdap/fcd063d6-bb41-4ad1-9b46-0d6f7133a78eHow often this domain was scanned/api/v1/domain/stats/hvcu.web.app Scan history for this domain/api/v1/domain/history/hvcu.web.app?limit=15

This website contacted 6 IPs in 1 country across 7 domains to perform 9 HTTP transactions. The main domain is web.app and was registered 7 years ago.

Submitted URL: https://hvcu.web.app/

Effective URL:

https://izciparki.com/wp-admin/maint/hvcu/

Redirected

AI Security Verdict

Moderate Risk

Confidence: 55%

Risk Score

Redirect from a free hosting subdomain to an unrelated WordPress maintenance path, but only a 502 error page is served: no forms, no impersonation, no malware or threat-intel hits. Suspicious redirect chain, unverified intent.

Risk Factors (3)

Cross-domain redirect from a free hosting subdomain to a WordPress /wp-admin/maint/ path on an unrelated domain

Nothing is actually served — the destination is misconfigured or down, so its intent cannot be verified

Platform subdomain with unknown creation date (age of the web.app apex is not attributable to this page)

Safety Factors (4)

No credential, login or payment form present on the captured page (0 forms, 0 password fields, 0 payment fields)

No Indicators of Compromise, no YARA malware patterns, no network IDS alerts

No brand impersonation detected; no cross-origin credential exfiltration

Page text is a generic gateway error with no lure, urgency or data-collection content

Domain age information unavailable

Details

Page Title

502 Bad Gateway

Scan Type

public

Domain Name Analysis

The domain 'hvcu.web.app' uses the application-focused generic top-level domain (.app) with subdomain 'hvcu'. The second-level label 'web' is 3 characters long split between one vowel and two consonants. Splitting it apart reveals one word: web. Median word length is 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

0.64s

Total Load Time

231 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:14 chars

Detector Agreement:0%

Website Classification

Primary Category

phishing scam65% confidence

Type: dynamic

Method: ml+structural+ocr_tiebreaker

All Detected Categories

phishing scam

65%

adult content

41%

real estate property

34%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
4	199.36.158.100Fastly · CDN	United States	AS54113Fastly, Inc.
1	151.101.1.155Fastly · CDN	United States	AS54113Fastly, Inc.
1	172.67.75.33Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	142.251.157.120Google · CDN	United States	AS15169Google LLC
1	104.16.180.112Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	104.17.25.14Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
9	6	-	-