Security Scan: Loading Page

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/45521369-102f-40d7-b162-5e98223a1f75 Domain and IP registration (RDAP)/api/v1/rdap/45521369-102f-40d7-b162-5e98223a1f75How often this domain was scanned/api/v1/domain/stats/sofor2.web.app Scan history for this domain/api/v1/domain/history/sofor2.web.app?limit=15

This website contacted 8 IPs in 1 country across 6 domains to perform 8 HTTP transactions. The main domain is web.app and was registered 7 years ago.

Submitted URL: https://sofor2.web.app/

Effective URL:

https://web-protect.pages.dev/?iduser=TkRnek1nPT0=&0H=fjvEJ

Redirected

AI Security Verdict

High Risk

Confidence: 76%

Risk Score

Cloaked Google-branded loading gateway on a pages.dev host, redirecting with a double-base64 victim ID and beaconing to an unranked endpoint. No forms served, but the brand impersonation and tracking chain indicate a phishing redirect path.

Risk Factors (5)

Impersonation of Google branding on a non-Google domain

Obfuscated base64-encoded user parameter used for victim tracking

Cross-origin fetch to an unknown, unranked external endpoint (connect.robot-agachado.org)

Interstitial 'Loading' gateway page — typical of a phishing redirect/cloaking chain

Domain hop from web.app to pages.dev with no legitimate business identity or ranking

Domain age information unavailable

Details

Page Title

Loading Page

Scan Type

public

Favicon Hash

MMH3: 49830300

MD5: 2945a3271019c1a43599ef2b67ae7784

Domain Name Analysis

Within the application-focused generic top-level domain (.app), 'sofor2.web.app' is registered; it also runs on subdomain 'sofor2'. The second-level label 'web' is 3 characters long holding 1 vowel versus two consonants. Splitting it apart reveals 1 word: web. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

0.71s

Total Load Time

13 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:134 chars

Detector Agreement:100%

Website Classification

Primary Category

technology software42% confidence

Type: static

Method: ml+structural

All Detected Categories

technology software

42%

news media journalism

40%

government public service

36%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
1	188.114.96.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	199.36.158.100Fastly · CDN	United States	AS54113Fastly, Inc.
1	142.251.153.119Google · CDN	United States	AS15169Google LLC
1	104.26.12.205Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	142.251.20.100Google · CDN	United States	AS15169Google LLC
1	142.251.150.119Google · CDN	United States	AS15169Google LLC
1	142.251.20.113Google · CDN	United States	AS15169Google LLC
1	188.114.97.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
8	8	-	-