Security Scan: Verification Recaptcha

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/4605becc-630f-43fe-8538-46d421ed568a Domain and IP registration (RDAP)/api/v1/rdap/4605becc-630f-43fe-8538-46d421ed568aHow often this domain was scanned/api/v1/domain/stats/wwxhajudjgwjklckvzgs1.web.app Scan history for this domain/api/v1/domain/history/wwxhajudjgwjklckvzgs1.web.app?limit=15

This website contacted 2 IPs in 1 country across 3 domains to perform 3 HTTP transactions. The main domain is web.app and was registered 7 years ago.

Submitted URL: https://wwxhajudjgwjklckvzgs1.web.app/

AI Security Verdict

High Risk

Confidence: 82%

Risk Score

Lone fake 'I'm not a robot' checkbox on a random Firebase subdomain, drawn without reCAPTCHA ever loading. A counterfeit verification gate with no legitimate purpose — do not click or proceed.

Risk Factors (5)

Fake reCAPTCHA checkbox drawn by the page itself rather than by reCAPTCHA's own script/frame — impersonation of Google's verification widget

Random-character subdomain on a free hosting platform with unknown tenant age

No content beyond the fake verification gate — a placeholder shell typical of attack staging pages

Unranked, zero-reputation host

Informational IDS hits for likely JavaScript obfuscator usage (not corroborated by hunting rule or threat intel)

Domain age information unavailable

Details

Page Title

Verification Recaptcha

Scan Type

public

Favicon Hash

MMH3: 973443000

MD5: 7fb80e09ed4955771b4cb9bc49e3e504

Domain Name Analysis

You're looking at domain 'wwxhajudjgwjklckvzgs1.web.app' on the application-focused generic top-level domain (.app) with subdomain 'wwxhajudjgwjklckvzgs1'. The core label 'web' covers 3 characters with 1 vowel and two consonants. Segmentation suggests one word: web. Median word length comes out to three characters. No strong language cues emerged from the frequency lists.