Security Scan Report: stawar-prosgfant00020.firebaseapp.com

Redirected to:
https://connect-captcha.pages.dev/?iduser=TkRnME9RPT0=&G2=AnvBE
Site favicon
Submitted: Sep 29, 2026, 12:53:05 AMCompleted: Sep 29, 2026, 12:53:38 AMpubliccompleted

This website contacted 9 IPs in 1 country across 6 domains to perform 7 HTTP transactions. The main domain is connect-captcha.pages.dev and was registered 17 years ago.

Submitted URL: https://stawar-prosgfant00020.firebaseapp.com/

Effective URL:

https://connect-captcha.pages.dev/?iduser=TkRnME9RPT0=&G2=AnvBE
Redirected

AI Security Verdict

Moderate Risk

Confidence: 55%

5
Risk Score

Bare 'Loading Page' at the end of a firebaseapp.com→pages.dev redirect carrying encoded parameters, contacting an unranked host and claiming a Google copyright. No forms, malware or phishing alert — suspicious redirect funnel, not proven phishing.

Risk Factors (4)
Cross-domain redirect from firebaseapp.com to pages.dev with encoded query parameters (iduser, G2)
Mismatched brand/ownership claim: Google copyright notice displayed on a Cloudflare Pages domain
Loading/redirect interstitial with no real content, contacting an unranked external endpoint (connect.robot-agachado.org)
External IP-lookup performed by page scripts (api.ipify.org), consistent with visitor fingerprinting in redirect/cloaking chains
Safety Factors (4)
No credential, login, password or payment fields parsed from the DOM (0 forms, 0 password fields, 0 payment fields)
No JavaScript malware (YARA) matches, no known phishing-kit roster hits, no obfuscated JS with a network sink
No Google Safe Browsing or IDS phishing/malware alert
Privacy Policy and Terms of Service links present
Domain age information unavailable

Details

Page Title

Loading Page

Scan Type

public

Domain Name Analysis

Domain 'stawar-prosgfant00020.firebaseapp.com' uses the commercial generic top-level domain (.com) and includes subdomain 'stawar-prosgfant00020'. The core label 'firebaseapp' covers 11 characters with five vowels and 6 consonants. Splitting it apart reveals three words: fire, base, app. Median word length comes out to 4 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://stawar-prosgfant00020.firebaseapp.com/

Page Load Overview

0.54s
Total Load Time
12 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:134 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software41% confidence
Type: static
Method: ml+structural

All Detected Categories

technology software
41%
news media journalism
40%
government public service
36%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
7199.36.158.100Fastly · CDNUnited States
AS54113Fastly, Inc.
0172.66.47.12Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
0142.251.150.119Google · CDNUnited States
AS15169Google LLC
0104.26.12.205Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
0142.251.13.113Google · CDNUnited States
AS15169Google LLC
0142.251.151.119Google · CDNUnited States
AS15169Google LLC
0104.26.13.205Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
0142.251.13.100Google · CDNUnited States
AS15169Google LLC
0172.66.44.244Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
79--

Detected Technologies3

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T15BD023F69C50C48EA99114C0F4D3F598CC0760259002ED45BBDAD8679711BDD8C817DC

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

6:qzxscVAqJmxdfyL7YmYnhLVMZakfnUp4Nhr6ECz:kxsklJmxhJPRmZn84NkEC

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:1:0:a720d65afc3fea24e51a81f11c6026af

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0000083c3c000000
Perceptual Hash:cc3333ccce3331cc
Difference Hash:0000102a20100000
Wavelet Hash:c0c0f4fcf8f0f0f0
Color Hash:#ac7a53

Other Hashes

Crop Resistant:0000102a20100000

Scan History

Scan history not available

Unable to load historical scan data