Security Scan: https://www.google.com/search?q=covid&sei=rwb

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/a63d6e83-2fc9-4919-98bd-3476bfe4d871 Domain and IP registration (RDAP)/api/v1/rdap/a63d6e83-2fc9-4919-98bd-3476bfe4d871How often this domain was scanned/api/v1/domain/stats/activateddnow.web.app Scan history for this domain/api/v1/domain/history/activateddnow.web.app?limit=15

This website contacted 18 IPs in 2 countries across 5 domains to perform 18 HTTP transactions. The main domain is web.app and was registered 7 years ago.

Submitted URL: https://activateddnow.web.app/

Effective URL:

https://www.google.com/sorry/index?continue=https://www.google.com/sea...

Redirected

AI Security Verdict

High Risk

Confidence: 75%

Risk Score

Redirect interstitial on a free web.app subdomain claiming to route users to 'BOFA EDD', paired with obfuscated JS and Telegram endpoints — a Bank of America/EDD impersonation lure; no legitimate content is served.

Risk Factors (5)

Impersonation of a different entity's brand (Bank of America / EDD) on an unrelated web.app subdomain

Scanner-evasion interstitial pattern: page serves only a 'please wait, redirecting' notice

Obfuscated JavaScript and Telegram messaging endpoints observed in the same session, a known phishing-kit exfiltration channel

No legitimate destination content; redirect chain dead-ends on a Google abuse block page

Free instant-provisioning hosting subdomain with unknown age and no reputation

Domain age information unavailable

Details

Page Title

https://www.google.com/search?q=covid&sei=rwbvatONEfrvi-gP0cTY2Qo

Scan Type

public

Favicon Hash

MMH3: 708578229

MD5: f3418a443e7d841097c714d69ec4bcb8

Domain Name Analysis

The domain name 'activateddnow.web.app' uses the application-focused generic top-level domain (.app); it also runs on subdomain 'activateddnow'. Count 3 characters in 'web' with 1 vowel and 2 consonants. Splitting it apart reveals one word: web. Median word length is 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

Please Wait... Redirecting you to BOFA EDD

Page Load Overview

0.14s

Total Load Time

1.2 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:40%

Script:Latin

Direction:ltr

Detection Details

Text Length:1,156 chars

Detector Agreement:50%

Website Classification

Primary Category

technology software79% confidence

Type: static

Method: ml+structural

All Detected Categories

technology software

79%

government public service

78%

documentation technical

74%

phishing scam

73%

cryptocurrency blockchain

72%

Detected Features

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
1	199.36.158.100Fastly · CDN	United States	AS54113Fastly, Inc.
1	149.154.166.110	Amsterdam, North Holland, Netherlands	AS62041Telegram Messenger Inc
1	142.251.153.119Google · CDN	United States	AS15169Google LLC
1	142.251.14.94Google · CDN	United States	AS15169Google LLC
1	192.178.183.157Google · CDN	United States	AS15169Google LLC
1	142.251.150.120Google · CDN	United States	AS15169Google LLC
1	142.251.20.97Google · CDN	United States	AS15169Google LLC
1	192.178.183.95Google · CDN	United States	AS15169Google LLC
1	142.251.157.7Google · CDN	United States	AS15169Google LLC
1	142.251.155.119Google · CDN	United States	AS15169Google LLC
18	18	-	-