Security Scan: HSBC

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/1c7d192f-5e17-4579-97d0-bd16aadee91a Domain and IP registration (RDAP)/api/v1/rdap/1c7d192f-5e17-4579-97d0-bd16aadee91aHow often this domain was scanned/api/v1/domain/stats/axa-cotizador-autos.web.app Scan history for this domain/api/v1/domain/history/axa-cotizador-autos.web.app?limit=15

This website contacted 29 IPs in 2 countries across 18 domains to perform 60 HTTP transactions. The main domain is web.app and was registered 7 years ago.

Submitted URL: https://axa-cotizador-autos.web.app/

Effective URL:

https://axa-cotizador-autos.web.app/inicio

Redirected

AI Security Verdict

High Risk

Confidence: 82%

Risk Score

Phishing-flagged AXA/HSBC-branded car insurance quote funnel on a free .web.app subdomain belonging to neither brand; brand impersonation on an unranked domain. Avoid entering personal data.

Risk Factors (4)

Threat-intel phishing report on the primary domain (single-source, unverified)

Impersonation of HSBC/AXA financial brands on a domain not owned by either

Free shared-hosting subdomain with unknown creation date and no reputation

Unauthorized use of brand names and 'solo para clientes HSBC' eligibility claim to build trust

Domain age information unavailable

Details

Page Title

HSBC

Scan Type

public

Favicon Hash

MMH3: 1656500889

MD5: 514278dafacc629e619d8579d0c6c632

Domain Name Analysis

The domain 'axa-cotizador-autos.web.app' uses the application-focused generic top-level domain (.app), featuring subdomain 'axa-cotizador-autos'. The core label 'web' covers 3 characters containing 1 vowel alongside 2 consonants. Word splitting yields 1 word: web. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

3.03s

Total Load Time

6.2 MB

Total Size

Language Analysis

Primary Language

🇪🇸Spanish

Code: es

Confidence:50%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:894 chars

Detector Agreement:100%

Language mismatch: Declared as en but detected as es

Website Classification

Primary Category

finance banking57% confidence

Type: spa

Method: ml+structural+ocr_tiebreaker

All Detected Categories

finance banking

57%

documentation technical

30%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
4	199.36.158.100Fastly · CDN	United States	AS54113Fastly, Inc.
2	142.250.154.113Google · CDN	United States	AS15169Google LLC
2	192.178.183.95Google · CDN	United States	AS15169Google LLC
2	142.251.110.94Google · CDN	United States	AS15169Google LLC
2	104.26.6.111Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	104.26.13.191Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	192.178.183.97Google · CDN	United States	AS15169Google LLC
2	142.251.110.207Google · CDN	United States	AS15169Google LLC
2	157.240.0.6Facebook · CDN	Frankfurt am Main, Hesse, Germany	AS32934Facebook, Inc.
2	142.251.156.119Google · CDN	United States	AS15169Google LLC
60	29	-	-