ScanMalware.com

Security Scan Report: customer-iam-test-4a9cc.web.app

Site favicon
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/6f02d4df-1e89-4341-9797-c55d05925610Domain and IP registration (RDAP)/api/v1/rdap/6f02d4df-1e89-4341-9797-c55d05925610How often this domain was scanned/api/v1/domain/stats/customer-iam-test-4a9cc.web.appScan history for this domain/api/v1/domain/history/customer-iam-test-4a9cc.web.app?limit=15
This website contacted 9 IPs in 1 country across 8 domains to perform 112 HTTP transactions. The main domain is web.app and was registered 7 years ago.

Submitted URL: https://customer-iam-test-4a9cc.web.app/

AI Security Verdict

High Risk

Confidence: 72%

8
Risk Score

Page claims to be NEW Gruppe's central authentication service but runs on an anonymous, unranked Firebase 'test' subdomain and collects email/password. Brand-on-mismatched-host plus credential form warrants caution; no IoC/YARA/IDS hits found.

Risk Factors (4)
Credential-collecting login form (email + password) on a non-brand, auto-named Firebase subdomain
Page claims to be the central authentication service of 'NEW Gruppe' on a domain that is not NEW's own domain (brand claim on mismatched host)
Shared hosting-platform subdomain with unknown true age and unranked reputation
Test/deployment-style project name inconsistent with the official identity system of an established organisation
Domain age information unavailable

Details

Page Title

Login NEW

Scan Type

public

Domain Name Analysis

Domain 'customer-iam-test-4a9cc.web.app' uses the application-focused generic top-level domain (.app), featuring subdomain 'customer-iam-test-4a9cc'. Its registrable label 'web' stretches across 3 characters split between 1 vowel and two consonants. Tokenizing the label suggests one word: web. Median word length is 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://customer-iam-test-4a9cc.web.app/

Page Load Overview

6.02s
Total Load Time
1.5 MB
Total Size

Language Analysis

Primary Language

🇩🇪German
Code: de
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:de
Text Length:607 chars
Detector Agreement:75%

Website Classification

Primary Category

government public service41% confidence
Type: dynamic
Method: ml+structural+ocr_tiebreaker

All Detected Categories

government public service
41%
technology software
38%
news media journalism
28%
adult content
28%
blog personal website
25%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
16199.36.158.100Fastly · CDNUnited States
AS54113Fastly, Inc.
12142.251.110.97Google · CDNUnited States
AS15169Google LLC
1235.241.3.184Google · CDNKansas City, Missouri, United States
AS396982Google LLC
12172.217.114.4Google · CDNUnited States
AS15169Google LLC
1235.190.14.188Google · CDNKansas City, Missouri, United States
AS396982Google LLC
1234.120.28.121Google · CDNKansas City, Missouri, United States
AS396982Google LLC
1235.201.111.240Google · CDNKansas City, Missouri, United States
AS396982Google LLC
12172.217.113.4Google · CDNUnited States
AS15169Google LLC
12172.217.119.4Google · CDNUnited States
AS15169Google LLC
1129--

Detected Technologies6

X-UA-Compatible
100%
Google Tag Manager
50%
HTTP/3
40%
HSTS
40%
Firebase
40%
Vue.js
30%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1DDF20EA2F1E6044F3127582B6C25F3BC773D125C4E51EF74622DBAA902CA7C6DA7B046

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:W6ZMfkCpBXuOHIgcch3vXiU9Oyw6mhxd28Pwa4gZx3x2cdmIwCEJbfUUdGy+az1U:WefL0dW5OdGzSjMRmzbN1gTh

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:36241:hkzyXU1EuB6kBKIIgOSBBrWMCMqCCCEwwCsBY5WRAVODAThYIgAARFElFOEhQBiMEDFQcxtQQASYZO+QiFA3SBBBF8BNBgUq

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0000183c3c100000
Perceptual Hash:8ab931e4ce9964e6
Difference Hash:b105617961619d61
Wavelet Hash:0d013d3d3d3d2501
Color Hash:#71bf40

Other Hashes

Crop Resistant:c6c8c0c0c0c0c8c6,e0638373d0808585,b006617961619a60

Scan History

Scan history not available

Unable to load historical scan data