Security Scan Report: swisspassportal.firebaseapp.com

Site favicon
Submitted: Completed: publiccompleted
This website contacted 5 IPs in 1 country across 7 domains to perform 12 HTTP transactions. The main domain is firebaseapp.com and was registered 14 years ago.

Submitted URL: https://swisspassportal.firebaseapp.com/

AI Security Verdict

Low Risk

Confidence: 55%

2
Risk Score

Bare hCaptcha puzzle page on an unknown-age firebaseapp.com subdomain. No forms, no branding, no threat-intel or malware signals — nothing malicious on the page itself, but the site is unverifiable and could be a staging gate.

Risk Factors (2)
Unbranded CAPTCHA interstitial on a shared hosting subdomain — no identifying content, no about/contact information, so the operator and purpose cannot be verified
Subdomain name ('swisspassportal') references a real transit-card brand (SwissPass) that is not substantiated by any branding on the page itself
Safety Factors (4)
No credential, email or payment field on the page; nothing is being harvested here
hCaptcha is a legitimate third-party bot-protection service
No Indicators of Compromise, malware, phishing or IDS evidence against the page or its resources
No cross-origin form actions or credential exfiltration detected
Domain age information unavailable

Details

Page Title

N/A

Scan Type

public

Domain Name Analysis

Within the commercial generic top-level domain (.com), 'swisspassportal.firebaseapp.com' is registered and includes subdomain 'swisspassportal'. The core label 'firebaseapp' covers 11 characters with five vowels and six consonants. Breaking it apart gives 3 words: fire, base, app. Expect 4 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://swisspassportal.firebaseapp.com/

Page Load Overview

1.12s
Total Load Time
1.2 MB
Total Size

Language Analysis

Primary Language

🏳️UNKNOWN
Code: unknown
Confidence:0%

Detection Details

0
Detector Agreement:0%

Website Classification

Primary Category

unknown0% confidence
Type: static
Method: structural

All Detected Categories

No categories detected

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
4199.36.158.100Fastly · CDNUnited States
AS54113Fastly, Inc.
2104.19.229.21Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2104.19.230.21Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2104.18.13.205Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2104.18.12.205Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
125--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1FA81D6B026311A285C6BA1C4E4AD67CED3333F0AFF01546830D95551B3CFAE9055FD9A

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

96:UhM8uaTmzuriXrjLYCmh53uLC2ZRENUAkLBIjC1+1k:HLktF12ZRENUAkLBIjCQe

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:4050:EIAkAAAABRiBAFAIBMUAoIkAABgAgCBAggAYgiAiBJoIhSgJAGCCEAAlAEAAiEACQAgAjAAIACBASQQAACJQBAGksBiIQUAT

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffe7e7e7e7e7ffff
Perceptual Hash:e732cc9933cc3233
Difference Hash:000c4d4d4d4d0408
Wavelet Hash:3f030303c3c3c3ff
Color Hash:#8479d2

Scan History

Scan history not available

Unable to load historical scan data