Security Scan Report: anti-roboter-dc7a9.web.app

Submitted: Completed: publiccompleted
This website contacted 5 IPs in 1 country across 7 domains to perform 11 HTTP transactions. The main domain is web.app and was registered 7 years ago.

Submitted URL: https://anti-roboter-dc7a9.web.app/

AI Security Verdict

Moderate Risk

Confidence: 68%

5
Risk Score

Bare captcha gate on a disposable Firebase subdomain whose only form posts cross-origin to an unrelated Pantheon dev site's /login path named after the Miles & More brand — phishing-gate pattern.

Risk Factors (4)
Cross-origin form submission to an unrelated domain's /login endpoint
Disposable Firebase subdomain with unknown creation date and unranked reputation
Captcha-only gate page with no site identity or content
Form target hostname evokes a third-party loyalty/billing brand
Safety Factors (5)
No Indicators of Compromise or threat-intelligence matches
No JavaScript malware or YARA hits; no network IDS alerts
Verified form facts show 0 password, 0 disguised-password and 0 payment fields
Captcha provider contacted (hCaptcha) is a well-ranked legitimate service
Verdict cited a credential/login form, but DOM analysis found no password field (real or disguised) or payment field, and no other hard signal — credential-phishing framing unsupported; risk adjusted from 7 to 5
Domain age information unavailable

Details

Page Title

N/A

Scan Type

public

Domain Name Analysis

Within the application-focused generic top-level domain (.app), 'anti-roboter-dc7a9.web.app' is registered; it also runs on subdomain 'anti-roboter-dc7a9'. The second-level label 'web' is 3 characters long containing one vowel alongside two consonants. It segments into one word: web. Median word length comes out to 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://anti-roboter-dc7a9.web.app/

Page Load Overview

1.05s
Total Load Time
968 KB
Total Size

Language Analysis

Primary Language

🇩🇪German
Code: de
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:de
0
Detector Agreement:0%

Website Classification

Primary Category

unknown0% confidence
Type: static
Method: structural

All Detected Categories

No categories detected

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
3199.36.158.100Fastly · CDNUnited States
AS54113Fastly, Inc.
2104.18.10.207Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2104.19.230.21Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2104.19.229.21Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2104.18.13.205Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
115--

Detected Technologies8

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T180A185B112B10D141CA7E295E95DB3CD96226F47F642387870EE43103BCFEFA856356A

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

96:6cyFusOnQYLn2ZPcENUAkLBI7Hkj0IQrrsqnQYLn2ZPcENUAkLBIQd1515:6ck02ZkENUAkLBI7HA02ZkENUAkLBIQV

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:4824:AAEqAADAEBABEBAwAEggEIAwA0EEAAgAADHKAAEgDKAAp0BACwENkABUgKQAgYRRQACAaoUEgiGD0CAAQAAgAhCobAAYQGCI

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:e7e7ffffffffffff
Perceptual Hash:e666668999999999
Difference Hash:080c000000000000
Wavelet Hash:ffe7ffff00000000
Color Hash:#87c58a

Other Hashes

Crop Resistant:080c000000000000

Scan History

Scan history not available

Unable to load historical scan data