Security Scan: Einfaches Captcha

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/2c6d7ba2-db6d-4b0e-89a2-4387fa0e13ef Domain and IP registration (RDAP)/api/v1/rdap/2c6d7ba2-db6d-4b0e-89a2-4387fa0e13efHow often this domain was scanned/api/v1/domain/stats/eppxqghubp.web.app Scan history for this domain/api/v1/domain/history/eppxqghubp.web.app?limit=15

This website contacted 8 IPs in 1 country across 7 domains to perform 15 HTTP transactions. The main domain is web.app and was registered 7 years ago.

Submitted URL: https://eppxqghubp.web.app/

Effective URL:

https://sid-check-aktivierenupdates.web.app/

Redirected

AI Security Verdict

Moderate Risk

Confidence: 62%

Risk Score

Anonymous fake-captcha gate on a free .web.app subdomain that bounces to a second throwaway 'check/activate updates' subdomain and asks for input. No password or payment fields, but no legitimate purpose or identity either.

Risk Factors (5)

Deceptive verification/captcha gate with no legitimate service purpose

Redirect chain from one anonymous .web.app subdomain to a second, differently named throwaway subdomain

Update/activation-themed subdomain name (sid-check-aktivierenupdates) typical of fake-verification lures

Anonymous free-hosting tenant with unknown creation date and no ownership information

Solicits user input (email/username field) without any stated recipient, purpose, or privacy notice

Safety Factors (5)

No password, disguised-password, or payment fields present — no credential or card harvesting observed

No cross-origin form submission or credential exfiltration detected

No JavaScript malware (hunting rule) matches, no known phishing kit in roster, no IDS alerts

Third-party scripts come from well-known CDNs (cdnjs.cloudflare.com, fonts.googleapis.com/gstatic.com, maxcdn.bootstrapcdn.com, upload.wikimedia.org)

No brand impersonation or typosquatting of a specific trademark detected

Domain age information unavailable

Details

Page Title

Einfaches Captcha

Scan Type

public

Domain Name Analysis

Within the application-focused generic top-level domain (.app), 'eppxqghubp.web.app' is registered; it also runs on subdomain 'eppxqghubp'. Its registrable label 'web' stretches across 3 characters with one vowel and 2 consonants. Breaking it apart gives one word: web. Median word length comes out to 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

Wir stellen sicher, dass Sie kein Roboter sind. Bitte bestätigen Sie das Captcha

Page Load Overview

0.43s

Total Load Time

235 KB

Total Size

Language Analysis

Primary Language

🇩🇪German

Code: de

Confidence:51%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:174 chars

Detector Agreement:100%

Language mismatch: Declared as en but detected as de

Website Classification

Primary Category

documentation technical76% confidence

Type: static

Method: ml+structural+ocr_tiebreaker

All Detected Categories

documentation technical

76%

government public service

64%

phishing scam

62%

adult content

61%

news media journalism

51%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
5	199.36.158.100Fastly · CDN	United States	AS54113Fastly, Inc.
4	104.18.11.207Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	142.251.14.94Google · CDN	United States	AS15169Google LLC
2	104.17.24.14Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	185.15.59.240	United States	AS14907Wikimedia Foundation Inc.
1	104.17.25.14Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	104.18.10.207Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	192.178.183.95Google · CDN	United States	AS15169Google LLC
15	8	-	-