ScanMalware.com

Security Scan Report: customer-iam-test-4a9cc.web.app

Site favicon
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/44f3f01e-3c0d-4399-bdbe-a5fdcc20cb3fDomain and IP registration (RDAP)/api/v1/rdap/44f3f01e-3c0d-4399-bdbe-a5fdcc20cb3fHow often this domain was scanned/api/v1/domain/stats/customer-iam-test-4a9cc.web.appScan history for this domain/api/v1/domain/history/customer-iam-test-4a9cc.web.app?limit=15
This website contacted 9 IPs in 1 country across 8 domains to perform 112 HTTP transactions. The main domain is web.app and was registered 7 years ago.

Submitted URL: https://customer-iam-test-4a9cc.web.app/

AI Security Verdict

Confirmed Scam

Confidence: 88%

9
Risk Score

Harvests login credentials on a throwaway Firebase subdomain ('test' naming) while posing as the NEW Gruppe authentication service; Google Safe Browsing flags it for social engineering. Do not enter any credentials.

Risk Factors (5)
Google Safe Browsing Social Engineering (phishing) detection
Credential-harvesting login form (email + password) on the page
Impersonation of a corporate brand (NEW Gruppe) on a non-brand domain
Cloud/PaaS throwaway subdomain with 'test' naming and unknown creation date
Domain absent from Cisco Umbrella ranking despite claiming to be a corporate authentication service
Domain age information unavailable

Details

Page Title

Login NEW

Scan Type

public

Domain Name Analysis

The domain name 'customer-iam-test-4a9cc.web.app' uses the application-focused generic top-level domain (.app); it also runs on subdomain 'customer-iam-test-4a9cc'. The second-level label 'web' is 3 characters long holding 1 vowel versus two consonants. Breaking it apart gives 1 word: web. The median word length lands at three characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://customer-iam-test-4a9cc.web.app/

Page Load Overview

8.38s
Total Load Time
1.5 MB
Total Size

Language Analysis

Primary Language

🇩🇪German
Code: de
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:de
Text Length:607 chars
Detector Agreement:75%

Website Classification

Primary Category

technology software36% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

technology software
36%
government public service
29%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
16199.36.158.100Fastly · CDNUnited States
AS54113Fastly, Inc.
12142.251.14.97Google · CDNUnited States
AS15169Google LLC
1235.241.3.184Google · CDNKansas City, Missouri, United States
AS396982Google LLC
12172.217.116.4Google · CDNUnited States
AS15169Google LLC
1235.190.14.188Google · CDNKansas City, Missouri, United States
AS396982Google LLC
1234.120.28.121Google · CDNKansas City, Missouri, United States
AS396982Google LLC
12172.217.114.4Google · CDNUnited States
AS15169Google LLC
1235.201.111.240Google · CDNKansas City, Missouri, United States
AS396982Google LLC
12172.217.117.4Google · CDNUnited States
AS15169Google LLC
1129--

Detected Technologies6

X-UA-Compatible
100%
Google Tag Manager
50%
HTTP/3
40%
HSTS
40%
Firebase
40%
Vue.js
30%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1DDF20EA2F1E6044F3127582B6C25F3BC773D125C4E51EF74622DBAA902CA7C6DA7B046

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:W6ZMfkCpBXuOHIgcch3vXiU9Oyw6mhxd28Pwa4gZx3x2cdmIwCEJbfUUdGy+az1U:WefL0dW5OdGzSjMRmzbN1gTh

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:36241:hkzyXU1EuB6kBKIIgOSBBrWMCMqCCCEwwCsBY5WRAVODAThYIgAARFElFOEhQBiMEDFQcxtQQASYZO+QiFA3SBBBF8BNBgUq

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0000183c3c100000
Perceptual Hash:8ab931e4ce9964e6
Difference Hash:b105617961619d61
Wavelet Hash:0d013d3d3d3d2501
Color Hash:#2dd29e

Other Hashes

Crop Resistant:c6c8c0c0c0c0c8c6,e0638373d0808585,b006617961619a60

Scan History

Scan history not available

Unable to load historical scan data