ScanMalware.com

Security Scan Report: customer-iam-297e8.web.app

Site favicon
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/9f6436d2-0791-427d-9574-2823f0f69e30Domain and IP registration (RDAP)/api/v1/rdap/9f6436d2-0791-427d-9574-2823f0f69e30How often this domain was scanned/api/v1/domain/stats/customer-iam-297e8.web.appScan history for this domain/api/v1/domain/history/customer-iam-297e8.web.app?limit=15
This website contacted 11 IPs in 1 country across 9 domains to perform 114 HTTP transactions. The main domain is web.app and was registered 7 years ago.

Submitted URL: https://customer-iam-297e8.web.app/

AI Security Verdict

Confirmed Scam

Confidence: 95%

10
Risk Score

Safe Browsing flags this web.app page for social engineering; it impersonates NEW Gruppe's login to harvest email/password credentials on a non-official domain. Avoid entering credentials and report it.

Risk Factors (5)
Google Safe Browsing Social Engineering threat on the exact URL
Credential-harvesting login form (email + password) on a free web.app subdomain
Brand impersonation: page claims to be the NEW Gruppe authentication service on a domain that is not NEW Gruppe's official domain
Suspicious use of a free hosting-platform subdomain styled as a corporate SSO portal
Third-party consent/analytics scripts are normal, but they do not offset the phishing indicators
Domain age information unavailable

Details

Page Title

Login NEW

Scan Type

public

Domain Name Analysis

Within the application-focused generic top-level domain (.app), 'customer-iam-297e8.web.app' is registered, featuring subdomain 'customer-iam-297e8'. The second-level label 'web' is 3 characters long holding 1 vowel versus two consonants. Splitting it apart reveals one word: web. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://customer-iam-297e8.web.app/

Page Load Overview

6.13s
Total Load Time
1.4 MB
Total Size

Language Analysis

Primary Language

🇩🇪German
Code: de
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:de
Text Length:652 chars
Detector Agreement:75%

Website Classification

Primary Category

social media network85% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

social media network
85%
technology software
62%
government public service
57%
news media journalism
45%
corporate business
33%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
14199.36.158.100Fastly · CDNUnited States
AS54113Fastly, Inc.
10142.251.110.97Google · CDNUnited States
AS15169Google LLC
1035.241.3.184Google · CDNKansas City, Missouri, United States
AS396982Google LLC
10172.217.116.4Google · CDNUnited States
AS15169Google LLC
1035.190.14.188Google · CDNKansas City, Missouri, United States
AS396982Google LLC
1034.120.28.121Google · CDNKansas City, Missouri, United States
AS396982Google LLC
10172.217.119.4Google · CDNUnited States
AS15169Google LLC
1035.201.111.240Google · CDNKansas City, Missouri, United States
AS396982Google LLC
10172.217.117.4Google · CDNUnited States
AS15169Google LLC
10172.217.115.4Google · CDNUnited States
AS15169Google LLC
11411--

Detected Technologies6

X-UA-Compatible
100%
Google Tag Manager
50%
HTTP/3
40%
HSTS
40%
Firebase
40%
Vue.js
30%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T117F20FA3F5E6004F2527582B6825F3BD7B3D124C4A01EF746329BAAD13CA7C6DA7B045

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:HfZMdkCpBXuOHIgcch3vXiU9Oyw6mhxd28Pwa4gZx3x2cdmIwCEJbfUUdGy+az16:HhNL0dW5OdGzSjMRmzlgzn

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:34362:EhJYE2BiKsBgVIwIEYjAyUhoBC0YCYEBCkiodgiIV4wIYCQgpQGkAZ4SFAAIMiHTFWgMwBJCoCwhkGLOl1eCkKCQEaIIEYGD

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:dfe3f7c7e7ffff00
Perceptual Hash:b4bc1c9838985ede
Difference Hash:b006061e0c0c0061
Wavelet Hash:dec3c3c3c2c2fe00
Color Hash:#40acbf

Other Hashes

Crop Resistant:b006061e0c0c0061

Scan History

Scan history not available

Unable to load historical scan data