Security Scan: Verification Recaptcha

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/e1d4e231-a64a-48e6-86bd-63424ce4584b Domain and IP registration (RDAP)/api/v1/rdap/e1d4e231-a64a-48e6-86bd-63424ce4584bHow often this domain was scanned/api/v1/domain/stats/wwxhajudjgwjklckvzgs6.web.app Scan history for this domain/api/v1/domain/history/wwxhajudjgwjklckvzgs6.web.app?limit=15

This website contacted 2 IPs in 1 country across 3 domains to perform 3 HTTP transactions. The main domain is web.app and was registered 7 years ago.

Submitted URL: https://wwxhajudjgwjklckvzgs6.web.app/

AI Security Verdict

High Risk

Confidence: 82%

Risk Score

Fake reCAPTCHA checkbox drawn by the page itself — no reCAPTCHA script was ever loaded. A classic verification-gate lure on a throwaway Firebase subdomain. No forms or malware, but avoid interacting.

Risk Factors (4)

Fake reCAPTCHA checkbox fabricated on-page without any reCAPTCHA script request — a hallmark of ClickFix / social-engineering gateway pages

Impersonation of the reCAPTCHA (Google) verification widget to lend false legitimacy

Randomized, machine-generated-looking hosting subdomain with unknown true age

No legitimate purpose for a page that only displays a verification gate

Domain age information unavailable

Details

Page Title

Verification Recaptcha

Scan Type

public

Favicon Hash

MMH3: 973443000

MD5: 7fb80e09ed4955771b4cb9bc49e3e504

Domain Name Analysis

Domain 'wwxhajudjgwjklckvzgs6.web.app' uses the application-focused generic top-level domain (.app) and includes subdomain 'wwxhajudjgwjklckvzgs6'. Count 3 characters in 'web' containing one vowel alongside 2 consonants. Tokenizing the label suggests 1 word: web. The median word length lands at three characters. No strong language cues emerged from the frequency lists.