Security Scan Report: verify-that-you-are-human.firebaseapp.com

Site favicon
Submitted: Sep 30, 2026, 8:54:35 AMCompleted: Sep 30, 2026, 8:55:27 AMpubliccompleted

AI Security Verdict

Moderate Risk

Confidence: 55%

5
Risk Score

A bare CAPTCHA gate on a free firebaseapp.com subdomain named 'verify-that-you-are-human'. No credentials or payment data are collected and no threat-intel, YARA or IDS hits were found, but the anonymous hosting and lure-style name warrant caution.

Risk Factors (3)
Hosted on a free, instantly-provisioned hosting platform (firebaseapp.com) where the true page age cannot be established
Deceptive/high-pressure subdomain name engineered to read like a security verification prompt
No reputation ranking in Cisco Umbrella top 1M
Safety Factors (5)
No credential, password, or payment fields on the page (password = 0, disguised password = 0, payment = 0)
No cross-origin credential exfiltration detected
No Indicators of Compromise matches, no YARA malware patterns, no IDS alerts, no known malicious kit
Only third-party interaction is with the legitimate hCaptcha verification service
No brand impersonation of another entity and no self-claimed brand identity
Domain age information unavailable

Details

Page Title

N/A

Scan Type

public

Domain Name Analysis

The domain name 'verify-that-you-are-human.firebaseapp.com' uses the commercial generic top-level domain (.com); it also runs on subdomain 'verify-that-you-are-human'. Count 11 characters in 'firebaseapp' with five vowels and 6 consonants. Splitting it apart reveals three words: fire, base, app. The median word length lands at 4 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://verify-that-you-are-human.firebaseapp.com/

Page Load Overview

0.35s
Total Load Time
1020 KB
Total Size

Language Analysis

Primary Language

🏳️UNKNOWN
Code: unknown
Confidence:0%

Detection Details

0
Detector Agreement:0%

Website Classification

Primary Category

unknown0% confidence
Type: static
Method: structural

All Detected Categories

No categories detected

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
6199.36.158.100Fastly · CDNUnited States
AS54113Fastly, Inc.
6104.19.229.21Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
6104.18.12.205Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
6104.19.230.21Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
6104.18.13.205Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
305--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1858196B46A31191D5C1B66C4F0796BCAC2336B4AFE41587460D9859133CFEE9428F94B

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

96:9Zk/2joOwxaT4reHXpjtcQrsTDuLW2ZRENUAkLBI8d1515:9O/moJreRaJ2ZRENUAkLBI8dHH

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:4007:BCCgCKCwAgAFEAAAAIABAEgEAABICAAkYFLQAgECCBABCAIhQDAAAKAAAAMAAQAIDIgEIMQARilAQQFAoQ0ACgAEgkCAAgCU

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffe7e7e7e7e7ffff
Perceptual Hash:e3338ccccc993366
Difference Hash:004d4d4d4d4d0400
Wavelet Hash:3c24242424242434
Color Hash:#77862d

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data