Security Scan Report: verify-that-you-are-human.firebaseapp.com

Site favicon
Submitted: Oct 7, 2026, 9:53:44 AMCompleted: Oct 7, 2026, 9:54:36 AMpubliccompleted

AI Security Verdict

Moderate Risk

Confidence: 60%

4
Risk Score

CAPTCHA-only page on an unranked firebaseapp.com subdomain with a lure-style hostname and unknown creation date. No forms collect credentials or payment data and no threat-intel, YARA or IDS hits were found; no concrete malicious signal, so risk stays moderate.

Risk Factors (3)
Free hosting-platform subdomain with a lure-style hostname ('verify-that-you-are-human') whose real creation date cannot be determined
Domain is unranked in Cisco Umbrella and carries no reputation
Page has no discernible purpose beyond presenting a CAPTCHA challenge, a pattern also used as an interstitial in fake-verification scam chains
Safety Factors (5)
No credential, password, disguised-password or payment fields present in the parsed DOM
No credential exfiltration and no cross-origin form submission detected
No Indicators of Compromise, no YARA malware matches, no IDS alerts, no Google Safe Browsing or kit-roster hits
All third-party scripts come from the legitimate, top-ranked hCaptcha service
No brand impersonation — the page presents no other organisation's brand, logo or login
Domain age information unavailable

Details

Page Title

N/A

Scan Type

public

Domain Name Analysis

Domain 'verify-that-you-are-human.firebaseapp.com' uses the commercial generic top-level domain (.com) and includes subdomain 'verify-that-you-are-human'. The registrable portion 'firebaseapp' spans 11 characters containing 5 vowels alongside 6 consonants. It segments into three words: fire, base, app. Median word length comes out to four characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://verify-that-you-are-human.firebaseapp.com/

Page Load Overview

0.46s
Total Load Time
1000 KB
Total Size

Language Analysis

Primary Language

🏳️UNKNOWN
Code: unknown
Confidence:0%

Detection Details

0
Detector Agreement:0%

Website Classification

Primary Category

healthcare medical75% confidence
Type: static
Method: ml+structural+ocr_tiebreaker

All Detected Categories

healthcare medical
75%
documentation technical
69%
finance banking
67%
gambling betting
57%
news media journalism
57%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
5199.36.158.100Fastly · CDNUnited States
AS54113Fastly, Inc.
3104.19.229.21Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3104.18.13.205Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3104.19.230.21Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
144--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T14581D7B4663019182C5B66C5F0B977CA92376F46FE41587420D9919133CEEE8069FD8B

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

96:9Zk/2joOwxaT4rtz4sX45jqHcQrrsADuLW2ZRENUAkLBI8d1515:9O/moJrZUEdzJ2ZRENUAkLBI8dHH

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:4007:ACCwCKAxEgAFEAAAAIABAQAEQAJICAAkYErAAkEACFABCAIhSCAAAKAAgAMAAQAIDIgEoMQABiFAwQFA4QwACgAEgkCAAgKE

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffe7e7e7c3e7ffff
Perceptual Hash:e6338c3399cc6633
Difference Hash:004c4d454d4d0008
Wavelet Hash:fcc0c0c0c3c3c3ff
Color Hash:#2dd298

Scan History

Scan history not available

Unable to load historical scan data