Security Scan Report: site-connect-26.web.app

Redirected to:
https://pital.shop/Yk44dlU0N2dTVnUwdHFzbWlUOWhla0VNZmVubnNGb0h6TkRkb05...
Site favicon
Submitted: Oct 1, 2026, 2:01:25 AMCompleted: Oct 1, 2026, 2:02:19 AMpubliccompleted

This website contacted 2 IPs in 2 countries across 2 domains to perform 3 HTTP transactions. The main domain is pital.shop and was registered 8 months ago.

Submitted URL: https://site-connect-26.web.app/#/Yk44dlU0N2dTVnUwdHFzbWlUOWhla0VNZmVubnNGb0h6TkRkb05na1lZY2F3aVBwN1dBNUdwTXlzeGc4djk2SXlBaEFhU3VCL3pXK3pzN3VxNTVMRVFHdkNMM0pnYmJkWC9IWUVwdWUxcXM9

Effective URL:

https://pital.shop/Yk44dlU0N2dTVnUwdHFzbWlUOWhla0VNZmVubnNGb0h6TkRkb05...
Redirected

AI Security Verdict

Moderate Risk

Confidence: 58%

5
Risk Score

Page is a bare math-captcha gate reached via an obfuscated cross-domain redirect to the unranked domain pital.shop. No credential, payment, malware or threat-intel evidence, but the cloaking pattern warrants caution.

Risk Factors (3)
Redirect chain that moves the visitor to a different registrable domain with an obfuscated (base64-like) path
Anti-analysis math captcha gate with no substantive content, typical of cloaked redirect landing pages
Unranked destination domain of unknown age on a .shop TLD
Safety Factors (5)
No password, disguised-password, email or payment fields present (verified form counts: 0/0/0/0)
No Indicators of Compromise matched against the page or its resources
No JavaScript malware (YARA) patterns and no network IDS alerts
No cross-origin form submissions and no credential exfiltration detected
Third-party script hosts: none — all JavaScript served from the site's own domain
Domain age information unavailable

Details

Page Title

Math Captcha Verification

Scan Type

public

Domain Name Analysis

You're looking at domain 'site-connect-26.web.app' on the application-focused generic top-level domain (.app) with subdomain 'site-connect-26'. The core label 'web' covers 3 characters holding one vowel versus two consonants. Segmentation suggests one word: web. The median word length lands at 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://site-connect-26.web.app/#/Yk44dlU0N2dTVnUwdHFzbWlUOWhla0VNZmVubnNGb0h6TkRkb05na1lZY2F3aVBwN1dBNUdwTXlzeGc4djk2SXlBaEFhU3VCL3pXK3pzN3VxNTVMRVFHdkNMM0pnYmJkWC9IWUVwdWUxcXM9

Page Load Overview

0.54s
Total Load Time
2 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:78 chars
Detector Agreement:100%

Website Classification

Primary Category

healthcare medical32% confidence
Type: static
Method: ml+structural

All Detected Categories

healthcare medical
32%
government public service
27%
documentation technical
26%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
2199.36.158.100Fastly · CDNUnited States
AS54113Fastly, Inc.
151.77.144.244France
AS16276OVH SAS
32--

Detected Technologies3

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1F0F0E18E58D14002289254531F9E754462528AEFA44AC840FDCDCB240F0075FDD1FEC6

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

12:haxj/q2pzRXDdBx4Duu/V7xHzvc4NbxrZWxIo74j:haPRXDiiu/VG4Nt274j

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:573:AAAAAAIAAAAAAAAAAgAAAAAAAABAAAAgAAAIhIAAAACgAAIAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAGAAAAAAAAAAQAAAAA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:3fffffffffffffff
Perceptual Hash:870f0f0f0f0f0f0f
Difference Hash:c000000000000000
Wavelet Hash:30f0f0f0f0f0f0f0
Color Hash:#d22d7a

Other Hashes

Crop Resistant:c000000000000000

Scan History

Scan history not available

Unable to load historical scan data