Summary
API
Submitted URL: https://iccu-a.web.app/
AI Security Verdict
High Risk
Confidence: 82%
Redirects from a free web.app subdomain to a non-government alwaysdata.net host serving an 'SSA_GOV_eStatement.zip' archive; this is a government-branded file lure consistent with malware distribution, though ZIP contents were not retrieved.
Risk Factors (5)
Details
Page Title
N/A
Scan Type
public
Domain Name Analysis
Within the application-focused generic top-level domain (.app), 'iccu-a.web.app' is registered; it also runs on subdomain 'iccu-a'. The core label 'web' covers 3 characters containing 1 vowel alongside two consonants. Breaking it apart gives 1 word: web. The median word length lands at 3 characters. No strong language cues emerged from the frequency lists.
Screenshot
Domain does not exist
There was no DNS record for backupendgoes.alwaysdata.net when we scanned it, so there is no screenshot.
Page Load Overview
Domain & IP Information
| Requests | IP Address | Location | AS Autonomous System |
|---|---|---|---|
| 4 | 199.36.158.100Fastly · CDN | United States | AS54113Fastly, Inc. |
| 1 | 151.101.193.155Fastly · CDN | United States | AS54113Fastly, Inc. |
| 1 | 104.26.8.123Cloudflare · WAF | United States | AS13335Cloudflare, Inc. |
| 1 | 142.251.156.120Google · CDN | United States | AS15169Google LLC |
| 1 | 104.16.179.112Cloudflare · WAF | United States | AS13335Cloudflare, Inc. |
| 1 | 104.17.24.14Cloudflare · WAF | United States | AS13335Cloudflare, Inc. |
| 9 | 6 | - | - |
Content Similarity HashesFor malware variant detection
Image Hashes
Perceptual Hashes
Other Hashes
Scan History
Scan history not available
Unable to load historical scan data