Security Scan: Einfaches Captcha

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/14d460b6-a7dd-4ee4-815b-53cb39f833b8 Domain and IP registration (RDAP)/api/v1/rdap/14d460b6-a7dd-4ee4-815b-53cb39f833b8How often this domain was scanned/api/v1/domain/stats/afswkwveam.web.app Scan history for this domain/api/v1/domain/history/afswkwveam.web.app?limit=15

This website contacted 8 IPs in 1 country across 7 domains to perform 15 HTTP transactions. The main domain is web.app and was registered 7 years ago.

Submitted URL: https://afswkwveam.web.app/

Effective URL:

https://sid-check-aktivierenupdates.web.app/

Redirected

AI Security Verdict

Moderate Risk

Confidence: 68%

Risk Score

Fake-CAPTCHA gate on a throwaway Firebase subdomain that swaps to a second random subdomain; no payload or credential form confirmed, but the lure pattern, unranked domain and phishing ML label make it unsafe to interact with.

Risk Factors (5)

Fake CAPTCHA / 'verify you are human' gate used as the only page content, with no legitimate verification service behind it

Redirect/domain change between two unrelated random-looking web.app subdomains (afswkwveam.web.app -> sid-check-aktivierenupdates.web.app)

Unranked, reputation-less domain on a free hosting platform namespace whose page-level age is unknown

Machine-learning classifier flags the content as phishing scam

Page collects an email address through a form without any stated purpose or identifiable operator

Safety Factors (5)

No password fields, no disguised password fields, no payment fields (verified form facts)

No JavaScript malware YARA matches, no network IDS alerts, no threat-intelligence matches on the page or its resources

No cross-origin credential form submissions and no credential exfiltration detected

Only well-known CDN/font hosts (cdnjs, Google Fonts, BootstrapCDN, Wikimedia) among external domains

No concrete malicious signal (no IoC / YARA / Safe-Browsing / IDS / credential form / brand impersonation) — elevated risk rested on domain age or reputation alone; clamped from 7 to 5

Domain age information unavailable

Details

Page Title

Einfaches Captcha

Scan Type

public

Domain Name Analysis

You're looking at domain 'afswkwveam.web.app' on the application-focused generic top-level domain (.app); it also runs on subdomain 'afswkwveam'. The second-level label 'web' is 3 characters long split between 1 vowel and 2 consonants. Breaking it apart gives one word: web. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

0.88s

Total Load Time

234 KB

Total Size

Language Analysis

Primary Language

🇩🇪German

Code: de

Confidence:51%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:174 chars

Detector Agreement:100%

Language mismatch: Declared as en but detected as de

Website Classification

Primary Category

phishing scam30% confidence

Type: static

Method: ml+structural

All Detected Categories

phishing scam

30%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
8	199.36.158.100Fastly · CDN	United States	AS54113Fastly, Inc.
1	185.15.59.240	United States	AS14907Wikimedia Foundation Inc.
1	104.17.25.14Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	104.18.10.207Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	142.251.110.95Google · CDN	United States	AS15169Google LLC
1	142.250.154.94Google · CDN	United States	AS15169Google LLC
1	104.17.24.14Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	104.18.11.207Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
15	8	-	-