Security Scan: Loading Page

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/0b06466d-5c80-4153-9bd5-d649733b1b2c Domain and IP registration (RDAP)/api/v1/rdap/0b06466d-5c80-4153-9bd5-d649733b1b2cHow often this domain was scanned/api/v1/domain/stats/sofor2.web.app Scan history for this domain/api/v1/domain/history/sofor2.web.app?limit=15

This website contacted 9 IPs in 1 country across 6 domains to perform 8 HTTP transactions. The main domain is web.app and was registered 7 years ago.

Submitted URL: https://sofor2.web.app/

Effective URL:

https://web-protect.pages.dev/?iduser=TkRnek1nPT0=&0H=fjvEJ

Redirected

AI Security Verdict

High Risk

Confidence: 82%

Risk Score

Content-free 'Loading' page on an anonymous pages.dev tenant that redirects from web.app, carries encoded tracking parameters, performs IP fingerprinting and claims '© 2024 Google' despite no affiliation — a brand-impersonation/cloaking staging page. No forms were captured, but the setup is characteristic of a phishing redirect flow; treat as high risk.

Risk Factors (5)

Impersonation of Google branding on a non-Google domain (web-protect.pages.dev)

Cross-domain redirect into an anonymous shared-hosting subdomain with no verifiable ownership

Opaque/encoded URL parameters (double-base64 user id, random token) consistent with kit tracking

External IP-address lookup used for visitor profiling on a content-free 'Loading' page

No operability content, no ownership information, no ranking or reputation for the final host

Domain age information unavailable

Details

Page Title

Loading Page

Scan Type

public

Favicon Hash

MMH3: 49830300

MD5: 2945a3271019c1a43599ef2b67ae7784

Domain Name Analysis

Within the application-focused generic top-level domain (.app), 'sofor2.web.app' is registered; it also runs on subdomain 'sofor2'. Its registrable label 'web' stretches across 3 characters split between one vowel and 2 consonants. Tokenizing the label suggests one word: web. The median word length lands at three characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

1.43s

Total Load Time

13 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:134 chars

Detector Agreement:100%

Website Classification

Primary Category

technology software42% confidence

Type: static

Method: ml+structural

All Detected Categories

technology software

42%

news media journalism

40%

government public service

36%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
8	188.114.96.3Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
0	199.36.158.100Fastly · CDN	United States	AS54113Fastly, Inc.
0	142.251.153.119Google · CDN	United States	AS15169Google LLC
0	104.26.12.205Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
0	142.251.110.138Google · CDN	United States	AS15169Google LLC
0	188.114.97.3Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
0	142.251.154.119Google · CDN	United States	AS15169Google LLC
0	104.26.13.205Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
0	142.251.13.139Google · CDN	United States	AS15169Google LLC
8	9	-	-