ScanMalware.com

Security Scan Report: customer-iam-297e8.web.app

Site favicon
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/e38c7e5d-f3eb-4dd7-935b-5c14d06b34cbDomain and IP registration (RDAP)/api/v1/rdap/e38c7e5d-f3eb-4dd7-935b-5c14d06b34cbHow often this domain was scanned/api/v1/domain/stats/customer-iam-297e8.web.appScan history for this domain/api/v1/domain/history/customer-iam-297e8.web.app?limit=15
This website contacted 10 IPs in 1 country across 9 domains to perform 114 HTTP transactions. The main domain is web.app and was registered 7 years ago.

Submitted URL: https://customer-iam-297e8.web.app/

AI Security Verdict

High Risk

Confidence: 75%

8
Risk Score

Login page claiming to be the NEW Gruppe central authentication service on a random Firebase subdomain, collecting email and password. Brand/domain mismatch plus a credential form make this a likely phishing page — do not enter credentials.

Risk Factors (4)
Brand impersonation: 'NEW Gruppe' authentication service branding on a non-brand Firebase hosting subdomain
Emails/passwords collected by a login form on a newly-published, unranked shared-hosting tenant
Form submitted via 'javascript:' handler with no declared action destination
SSO buttons for four unrelated identity providers (Google, Microsoft, Facebook, Apple) on a single copied login page
Domain age information unavailable

Details

Page Title

Login NEW

Scan Type

public

Domain Name Analysis

Domain 'customer-iam-297e8.web.app' uses the application-focused generic top-level domain (.app); it also runs on subdomain 'customer-iam-297e8'. The registrable portion 'web' spans 3 characters holding one vowel versus two consonants. Tokenizing the label suggests 1 word: web. The median word length lands at 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://customer-iam-297e8.web.app/

Page Load Overview

6.34s
Total Load Time
1.4 MB
Total Size

Language Analysis

Primary Language

🇩🇪German
Code: de
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:de
Text Length:652 chars
Detector Agreement:75%

Website Classification

Primary Category

social media network84% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

social media network
84%
technology software
61%
government public service
55%
news media journalism
45%
corporate business
32%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
15199.36.158.100Fastly · CDNUnited States
AS54113Fastly, Inc.
11142.251.110.97Google · CDNUnited States
AS15169Google LLC
1135.241.3.184Google · CDNKansas City, Missouri, United States
AS396982Google LLC
11172.217.116.4Google · CDNUnited States
AS15169Google LLC
1135.190.14.188Google · CDNKansas City, Missouri, United States
AS396982Google LLC
1134.120.28.121Google · CDNKansas City, Missouri, United States
AS396982Google LLC
11172.217.119.4Google · CDNUnited States
AS15169Google LLC
1135.201.111.240Google · CDNKansas City, Missouri, United States
AS396982Google LLC
11172.217.114.4Google · CDNUnited States
AS15169Google LLC
11172.217.113.4Google · CDNUnited States
AS15169Google LLC
11410--

Detected Technologies6

X-UA-Compatible
100%
Google Tag Manager
50%
HTTP/3
40%
HSTS
40%
Firebase
40%
Vue.js
30%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T184F21EA2F1E6044F3127482B6C25F3B8773D124C4E41EF74662DBAA913CA7C6DA7B046

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:LfZMzkCpBXuOHIgcch3vXiU9Oyw6mhxd28Pwa4gZx3x2cdmIwCEJbfUUdGy+az1T:LhbL0dW5OdGzSjMRmzoNJg6W

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:36745:FOki0CXGyP4gBjISKCQaLTwoBMKAAAExQyYZARIlMSIoAASQDkQcYVcBBuGAwhyCWAMcMhowQKHyROBLiJD9ARRAJFRIMFAc

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0000183c3c100000
Perceptual Hash:8ab931e4ce9964e6
Difference Hash:b105617961619d61
Wavelet Hash:05013d3d3d3dd101
Color Hash:#44931f

Other Hashes

Crop Resistant:c6c8c0c0c0c0c8c6,e0638373d0808585,b006617961619a60

Scan History

Scan history not available

Unable to load historical scan data