Security Scan Report: swisspassportal.web.app

Site favicon
Submitted: Completed: publiccompleted
This website contacted 4 IPs in 1 country across 7 domains to perform 12 HTTP transactions. The main domain is web.app and was registered 7 years ago.

Submitted URL: https://swisspassportal.web.app/

AI Security Verdict

Moderate Risk

Confidence: 55%

4
Risk Score

Bare hCaptcha challenge screen on an unnamed free .web.app subdomain; no forms, no threat-intel or malware hits, but unknown provenance and no visible legitimate purpose warrant caution.

Risk Factors (3)
Anonymous free-platform subdomain with unknown creation date gating all content behind a CAPTCHA challenge
Domain label suggests a real-world brand while the page itself offers no identifiable operator or disclosure
No visible legitimate purpose or content — a bare challenge screen can be used for cloaking/selective content delivery
Safety Factors (4)
No credential, login, email or payment fields present (password=0, payment=0)
No Indicators of Compromise against the page or its loaded resources
No obfuscated or malicious JavaScript, no cross-origin credential exfiltration
Only well-known third-party hosts observed (hCaptcha asset and API domains)
Domain age information unavailable

Details

Page Title

N/A

Scan Type

public

Domain Name Analysis

The domain name 'swisspassportal.web.app' uses the application-focused generic top-level domain (.app), featuring subdomain 'swisspassportal'. The registrable portion 'web' spans 3 characters holding one vowel versus two consonants. It segments into one word: web. Average segment length settles at three characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://swisspassportal.web.app/

Page Load Overview

0.53s
Total Load Time
1.2 MB
Total Size

Language Analysis

Primary Language

🏳️UNKNOWN
Code: unknown
Confidence:0%

Detection Details

0
Detector Agreement:0%

Website Classification

Primary Category

documentation technical46% confidence
Type: static
Method: ml+structural+ocr_tiebreaker

All Detected Categories

documentation technical
46%
healthcare medical
37%
government public service
36%
news media journalism
33%
adult content
31%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
3199.36.158.100Fastly · CDNUnited States
AS54113Fastly, Inc.
3104.19.230.21Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3104.18.13.205Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3104.19.229.21Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
124--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T18C81B5B06A311E289C2BA5C4E4AD6BCED3336F06FF01596830E9468173CFEE9054BD56

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

96:UhM8uaTmzsAXbjHYC0uyAQuLq2ZRENUAkLBIjC1+1k:HLsvO8J2ZRENUAkLBIjCQe

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:4038:UCEkAKQABQAIRMAAAIAAuICAAFAFgAAABgAgwgwiBIpIgQiIgCADAAQAkASEiARCQAAAiAAAAKBASARAASoCAIggEygIAXIA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffe7e7e7e7e7ffff
Perceptual Hash:e633cc8933cc3333
Difference Hash:000c4d4d4d4d0408
Wavelet Hash:3f030303c3c3c3ff
Color Hash:#d279cc

Scan History

Scan history not available

Unable to load historical scan data