axa-cotizador-autos[.]web[.]app

The domain axa-cotizador-autos.web.app was registered on 2026-02-21 through a cloud hosting provider and currently resolves to IP 199.36.158.100, which belongs to a US‑based content delivery network (ASN Fastly). The site presents an SSL certificate issued by a well‑known certificate authority (Google Trust Services / WR4) and enforces HTTP Strict Transport Security. The page title reads "HSBC" and the brand target is identified as HSBC, confirming a brand‑impersonation attempt. VirusTotal scans show 18 of 93 security vendors flag the domain, while a commercial trust score rates it 0 out of 100. It appears on one public blocklist and is already blocked by PhishDestroy, but the infrastructure remains active as of the report date. Detected technologies include cloud hosting, sign‑in integration, and typical analytics and social‑media tracking scripts, as well as support for HTTP/3. No additional content analysis is available beyond the page title, leaving the exact credential‑harvesting mechanism unclear. Defenders should immediately add the domain and its IP to network and email filtering blocklists, monitor DNS queries for the host, and enforce strict outbound traffic controls to the associated CDN. Continuous re‑evaluation of the domain’s reputation on threat‑intel feeds is advised, as the high‑risk classification and active status indicate ongoing abuse potential.