Security Scan Report: anti-roboter-dc7a9.firebaseapp.com

Submitted: Completed: publiccompleted
This website contacted 7 IPs in 1 country across 7 domains to perform 11 HTTP transactions. The main domain is firebaseapp.com and was registered 14 years ago.

Submitted URL: https://anti-roboter-dc7a9.firebaseapp.com/

AI Security Verdict

Moderate Risk

Confidence: 78%

5
Risk Score

Captcha-gate page on an anonymous Firebase subdomain whose only form posts to an unrelated pantheonsite.io /login URL naming the 'Miles & More' card-statement brand — phishing-chain shape; do not enter data.

Risk Factors (4)
Cross-origin form submission to an unrelated domain's /login endpoint
Reference to the 'Miles & More' brand on a domain that does not belong to it
Anonymous, unranked hosting-platform subdomain used as a single-purpose captcha gate
Disjointed German UI strings typical of a low-effort cloned phishing gate
Safety Factors (4)
No password, disguised-password or payment fields in the captured DOM
No threat-intelligence Indicators of Compromise, YARA match, kit-roster entry or IDS alert
Only third-party scripts are legitimate hCaptcha/Bootstrap CDN assets
Verdict cited a credential/login form, but DOM analysis found no password field (real or disguised) or payment field, and no other hard signal — credential-phishing framing unsupported; risk adjusted from 8 to 5
Domain age information unavailable

Details

Page Title

N/A

Scan Type

public

Domain Name Analysis

Domain 'anti-roboter-dc7a9.firebaseapp.com' uses the commercial generic top-level domain (.com); it also runs on subdomain 'anti-roboter-dc7a9'. Its registrable label 'firebaseapp' stretches across 11 characters split between 5 vowels and six consonants. Splitting it apart reveals three words: fire, base, app. Median word length is 4 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://anti-roboter-dc7a9.firebaseapp.com/

Page Load Overview

0.59s
Total Load Time
968 KB
Total Size

Language Analysis

Primary Language

🇩🇪German
Code: de
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:de
0
Detector Agreement:0%

Website Classification

Primary Category

unknown0% confidence
Type: static
Method: structural

All Detected Categories

No categories detected

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
5199.36.158.100Fastly · CDNUnited States
AS54113Fastly, Inc.
1104.18.10.207Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1104.19.230.21Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1104.19.229.21Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1104.18.12.205Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1104.18.11.207Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1104.18.13.205Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
117--

Detected Technologies8

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T178A195B012B20D141CA7A59AE55CB3CD96226F0BF94228B870DE43103BCFDFF9563566

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

96:6cyFKGeDgYLb2ZPcENUAkLBIyHzjPIQrrGe/gYLb2ZPcENUAkLBIQd1515:6cRGls2ZkENUAkLBIyJnG7s2ZkENUAkp

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:4856:AAEIAABAJAhMQFAgAAAiGIACEUGEAA1AIBnqAKAACAIhq9JgkwIFACAABJSQgcAXAAgBYiWEggACEAgAABgQkICgTABAQHAI

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:e7e7ffffffffffff
Perceptual Hash:e666668999999999
Difference Hash:080c000000000000
Wavelet Hash:ffe7ffff00000000
Color Hash:#6a2d86

Other Hashes

Crop Resistant:080c000000000000

Scan History

Scan history not available

Unable to load historical scan data