Security Scan: https://verify-that-you-are-human.web.app/

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/ab52e90f-372c-401a-b261-3a0098bc6e70 Domain and IP registration (RDAP)/api/v1/rdap/ab52e90f-372c-401a-b261-3a0098bc6e70 Certificate Transparency/api/v1/ct/verify-that-you-are-human.web.app How often this domain was scanned/api/v1/domain/stats/verify-that-you-are-human.web.app Scan history for this domain/api/v1/domain/history/verify-that-you-are-human.web.app?limit=15

This website contacted 5 IPs in 1 country across 7 domains to perform 12 HTTP transactions. The main domain is verify-that-you-are-human.web.app and was registered 8 years ago.

Submitted URL: https://verify-that-you-are-human.web.app/

AI Security Verdict

Moderate Risk

Confidence: 55%

Risk Score

Bare hCaptcha human-verification gate on a free web.app subdomain with a phishing-style name. No credential or payment form, no threat-intel, YARA or IDS hits; risks are the suspicious naming and unknown tenure.

Risk Factors (3)

Standalone human-verification gate on a free hosting subdomain named 'verify-that-you-are-human' matches the opening step of common phishing/redirect lures

Unknown subdomain age on a shared .web.app platform namespace (anyone can publish instantly)

Unranked/unknown reputation domain

Safety Factors (6)

No credential, password, or payment fields present (0 password, 0 disguised-password, 0 payment fields)

No Indicators of Compromise matches against the page or its resources

No JavaScript malware (YARA) hits, no native-YARA high-precision hits, no IDS/Suricata alerts

No known malicious kit identified in the kit roster; no credential exfiltration detected

CAPTCHA integration uses the legitimate hCaptcha service rather than a self-hosted fake challenge

Verdict cited a credential/login form, but DOM analysis found no password field (real or disguised) or payment field, and no other hard signal — credential-phishing framing unsupported; risk adjusted from 4 to 4

Domain age information unavailable

Details

Page Title

N/A

Scan Type

public

Favicon Hash

MMH3: 2088965388

MD5: a851004b4179b3c5bf8823308ce30d76

Domain Name Analysis

The domain 'verify-that-you-are-human.web.app' uses the application-focused generic top-level domain (.app) with subdomain 'verify-that-you-are-human'. Count 3 characters in 'web' containing one vowel alongside 2 consonants. Splitting it apart reveals 1 word: web. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

0.45s

Total Load Time

1023 KB

Total Size

Language Analysis

Primary Language

🏳️UNKNOWN

Code: unknown

Confidence:0%

Detection Details

Detector Agreement:0%

Website Classification

Primary Category

unknown0% confidence

Type: static

Method: structural

All Detected Categories

No categories detected

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
4	199.36.158.100Fastly · CDN	United States	AS54113Fastly, Inc.
2	104.19.230.21Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	104.18.13.205Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	104.19.229.21Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	104.18.12.205Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
12	5	-	-