Security Scan Report: customer-iam-test-4a9cc.web.app

Site favicon
Submitted: Completed: publiccompleted
This website contacted 9 IPs in 1 country across 8 domains to perform 114 HTTP transactions. The main domain is web.app and was registered 7 years ago.

Submitted URL: https://customer-iam-test-4a9cc.web.app/

AI Security Verdict

Confirmed Scam

Confidence: 92%

9
Risk Score

Safe Browsing social-engineering hit plus an email/password login claiming to be the 'NEW Gruppe' authentication service on an unranked Firebase test subdomain: a credential phishing page.

Risk Factors (5)
Google Safe Browsing Social Engineering threat
Credential-harvesting login form (email + password) on a shared hosting subdomain
Brand 'NEW Gruppe' authentication service claimed on a domain unrelated to that brand
Unknown-age, unranked Firebase web.app tenant with test-style naming
Form action is javascript: rather than a documented same-brand endpoint
Domain age information unavailable

Details

Page Title

Login NEW

Scan Type

public

Domain Name Analysis

Within the application-focused generic top-level domain (.app), 'customer-iam-test-4a9cc.web.app' is registered, featuring subdomain 'customer-iam-test-4a9cc'. Its registrable label 'web' stretches across 3 characters containing 1 vowel alongside 2 consonants. Tokenizing the label suggests one word: web. Expect 3 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://customer-iam-test-4a9cc.web.app/

Page Load Overview

2.19s
Total Load Time
1.5 MB
Total Size

Language Analysis

Primary Language

🇩🇪German
Code: de
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:de
Text Length:607 chars
Detector Agreement:75%

Website Classification

Primary Category

technology software36% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

technology software
36%
government public service
29%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
18199.36.158.100Fastly · CDNUnited States
AS54113Fastly, Inc.
12142.251.110.97Google · CDNUnited States
AS15169Google LLC
1235.241.3.184Google · CDNKansas City, Missouri, United States
AS396982Google LLC
1235.190.14.188Google · CDNKansas City, Missouri, United States
AS396982Google LLC
12172.217.112.4Google · CDNUnited States
AS15169Google LLC
12172.217.116.4Google · CDNUnited States
AS15169Google LLC
1234.120.28.121Google · CDNKansas City, Missouri, United States
AS396982Google LLC
1235.201.111.240Google · CDNKansas City, Missouri, United States
AS396982Google LLC
12172.217.118.4Google · CDNUnited States
AS15169Google LLC
1149--

Detected Technologies6

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T17AE2EDA3F5E6004F2127582B6C25F3BC7B3D125C4E01EF756329BAA912C97C6DA7B046

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:66ZMfkCpBXuOHIgcch3vXiU9Oyw6mhxd28Pwa4gZx3x2cdmIwCEJbfUUdGy+az1i:6efL0dW5OdGzSjMRmzxgTh

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:33067:YhQKkkBxIZriAYSEMSACgwVuiAoCoAADhI4BJIriheE0yCAVMAkgAroQFjjQEuXJQQAAnBAwKIYhBCCI4kt0tAMISQmAgASL

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:dfe7f7c7cfffff00
Perceptual Hash:b0b84e9839b94ece
Difference Hash:b016069e1c2c0061
Wavelet Hash:dec3c2c2c6c2ff00
Color Hash:#d22d9b

Other Hashes

Crop Resistant:b016069e1c2c0061

Scan History

Scan history not available

Unable to load historical scan data