ScanMalware.com

Security Scan Report: zimbra-security4989344.firebaseapp.com

Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/725f8a0c-bbcf-428e-b7b8-385cb1d98218Domain and IP registration (RDAP)/api/v1/rdap/725f8a0c-bbcf-428e-b7b8-385cb1d98218How often this domain was scanned/api/v1/domain/stats/zimbra-security4989344.firebaseapp.comScan history for this domain/api/v1/domain/history/zimbra-security4989344.firebaseapp.com?limit=15
This website contacted 1 IP in 1 country across 2 domains to perform 5 HTTP transactions. The main domain is firebaseapp.com and was registered 14 years ago.

Submitted URL: https://zimbra-security4989344.firebaseapp.com/

AI Security Verdict

Moderate Risk

Confidence: 58%

5
Risk Score

Empty firebaseapp.com subdomain using the Zimbra name and copied Zimbra meta text on a non-Zimbra host. No forms or malware signals found, but the brand misuse on an unknown-age host warrants caution.

Risk Factors (3)
Brand string (Zimbra) displayed on a non-official domain without disclosure or attribution
Free hosting-platform subdomain whose real creation date cannot be established
Empty/minimal content consistent with an unfinished or placeholder phishing setup
Safety Factors (5)
No credential, login, or payment fields detected (verified form facts: 0 forms)
No cross-origin form submissions or credential exfiltration
No third-party scripts; all JavaScript from own domain
No Indicators of Compromise, YARA malware patterns, IDS alerts, or kit-roster matches
No DevTools-blocking or obfuscated JS behavior observed
Domain age information unavailable

Details

Page Title

Background

Scan Type

public

Domain Name Analysis

Within the commercial generic top-level domain (.com), 'zimbra-security4989344.firebaseapp.com' is registered, featuring subdomain 'zimbra-security4989344'. The second-level label 'firebaseapp' is 11 characters long with 5 vowels and six consonants. Splitting it apart reveals 3 words: fire, base, app. Average segment length settles at 4 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://zimbra-security4989344.firebaseapp.com/

Page Load Overview

0.31s
Total Load Time
131 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:10 chars
Detector Agreement:100%

Website Classification

Primary Category

unknown0% confidence
Type: static
Method: structural

All Detected Categories

No categories detected

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
5199.36.158.100Fastly · CDNUnited States
AS54113Fastly, Inc.
51--

Detected Technologies3

HTTP/3
40%
HSTS
40%
Firebase
40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T18C14F1119EC86F6ADF54460940FD25C696FD4B5F44A2F18ACF73FE0A6F8A9044ACB1C8

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:nweek9UB6vVglfzSd4gqMkRqKcDL4RUhUxp57/QPvzctJseGfWpf521T31lWWQe:rek+OgBeS5RDpuETQPvmmhfMf5GtQe

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:202588:FRGKckC0aAR2ARURTJAk3ACoEQquUKIsEETziDgUYDAEFwVMotDQgCZAQgWhm8EwBBwMBtUCJCICnOSASJEo7AICAhhgB4AE

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:N/A
Perceptual Hash:N/A
Difference Hash:N/A
Wavelet Hash:N/A
Color Hash:N/A

Other Hashes

Crop Resistant:N/A

Scan History

Scan history not available

Unable to load historical scan data