ScanMalware.com

Security Scan Report: customer-iam-297e8.firebaseapp.com

Redirected to:
https://www.facebook.com/login.php?skip_api_login=1&api_key=2416230733...
Site favicon
Submitted: Sep 27, 2026, 1:50:52 AMCompleted: Sep 27, 2026, 1:54:19 AMpubliccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/127ccb1d-f71b-4424-b6bb-11ca3f05beb0Domain and IP registration (RDAP)/api/v1/rdap/127ccb1d-f71b-4424-b6bb-11ca3f05beb0Certificate Transparency/api/v1/ct/facebook.comHow often this domain was scanned/api/v1/domain/stats/customer-iam-297e8.firebaseapp.comScan history for this domain/api/v1/domain/history/customer-iam-297e8.firebaseapp.com?limit=15

This website contacted 17 IPs in 2 countries across 13 domains to perform 154 HTTP transactions. The main domain is facebook.com and was registered 19 years ago.

Submitted URL: https://customer-iam-297e8.firebaseapp.com/

Effective URL:

https://www.facebook.com/login.php?skip_api_login=1&api_key=2416230733...
Redirected

AI Security Verdict

High Risk

Confidence: 70%

7
Risk Score

Login page collecting email/password while wearing the 'NEW Gruppe' brand on a free firebaseapp.com subdomain of unknown age - a typical credential-phishing shape. Do not sign in; verify only via new.de.

Risk Factors (5)
Collects email/password credentials on a shared hosting-platform subdomain
Brand 'NEW' (NEW Gruppe) displayed on a non-official, non-matching domain
Firebase subdomain age unknown - could have been created minutes before the scan
Domain is unranked / absent from Cisco Umbrella top 1M
Single-source threat-intelligence flag on the primary domain and URL
Domain age information unavailable

Details

Page Title

Login NEW

Scan Type

public

Domain Name Analysis

You're looking at domain 'customer-iam-297e8.firebaseapp.com' on the commercial generic top-level domain (.com), featuring subdomain 'customer-iam-297e8'. Count 11 characters in 'firebaseapp' holding five vowels versus 6 consonants. It segments into three words: fire, base, app. The median word length lands at four characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://customer-iam-297e8.firebaseapp.com/

Page Load Overview

28.00s
Total Load Time
3.8 MB
Total Size

Language Analysis

Primary Language

🇩🇪German
Code: de
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:de
Text Length:1,370 chars
Detector Agreement:75%

Website Classification

Primary Category

blog personal website93% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

blog personal website
93%
social media network
89%
government public service
81%
technology software
75%
news media journalism
73%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
10199.36.158.100Fastly · CDNUnited States
AS54113Fastly, Inc.
9142.251.14.97Google · CDNUnited States
AS15169Google LLC
935.241.3.184Google · CDNKansas City, Missouri, United States
AS396982Google LLC
9172.217.116.4Google · CDNUnited States
AS15169Google LLC
935.190.14.188Google · CDNKansas City, Missouri, United States
AS396982Google LLC
934.120.28.121Google · CDNKansas City, Missouri, United States
AS396982Google LLC
9172.217.117.4Google · CDNUnited States
AS15169Google LLC
935.201.111.240Google · CDNKansas City, Missouri, United States
AS396982Google LLC
9142.250.154.97Google · CDNUnited States
AS15169Google LLC
9172.217.115.4Google · CDNUnited States
AS15169Google LLC
15417--

Detected Technologies3

HTTP/3
40%
HSTS
40%
Firebase
40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1C9F21EA2F1E6044F3127082B6C25F3B8773D124C4E41EF74662DBAA913CA7C6DA7B046

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:LfZMekCpBXuOHIgcch3vXiU9Oyw6mhxd28Pwa4gZx3x2cdmIwCEJbfUUdGy+az13:LhsL0dW5OdGzSjMRmzoNJg6u

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:36745:geET0F2syIAIAGYILIg6gTUMxAoACCFyQASQTJoCpDAYAKzAguEhQRE1EemglBCaCMVIMhgAIAJyJeCzSJBhEQDMENwQdAIp

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0000183c3c100000
Perceptual Hash:8ab931e4ce9964e6
Difference Hash:b105617961619d61
Wavelet Hash:05013d3d3d3dd101
Color Hash:#862d2d

Other Hashes

Crop Resistant:c6c8c0c0c0c0c8c6,e0638373d0808585,b006617961619a60

Scan History

Scan history not available

Unable to load historical scan data