Security Scan: Online

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/56f1e8d4-e23b-4761-af57-0483583a93d8 Domain and IP registration (RDAP)/api/v1/rdap/56f1e8d4-e23b-4761-af57-0483583a93d8 Certificate Transparency/api/v1/ct/santander.co.uk How often this domain was scanned/api/v1/domain/stats/manage-unauthorised-payee.firebaseapp.com Scan history for this domain/api/v1/domain/history/manage-unauthorised-payee.firebaseapp.com?limit=15

This website contacted 27 IPs in 3 countries across 18 domains to perform 85 HTTP transactions. The main domain is santander.co.uk and was registered 22 years ago.

Submitted URL: https://manage-unauthorised-payee.firebaseapp.com/

Effective URL:

https://www.santander.co.uk/

Redirected

AI Security Verdict

Moderate Risk

Confidence: 60%

Risk Score

Entry host is a lure-named Firebase subdomain that redirects to the genuine, established Santander UK site. The rendered page shows no credential/payment forms and no threat-intel hits, so risk comes only from the suspicious redirector, not the destination.

Risk Factors (4)

Entry domain is a free shared-hosting subdomain (firebaseapp.com) whose actual content-creation date is unknown — apex age is not attributable to this page

Entry hostname 'manage-unauthorised-payee' uses payment/account-lure wording unrelated to the destination brand, consistent with a phishing redirector

Cross-domain redirect chain (2 redirects) with no visible legitimate business rationale from the entry host

Datacenter scanner received a bot-protection/challenge page while a residential client received real content (mismatch noted, not malicious on its own)

Safety Factors (3)

Final rendered content is the official Santander UK site on the brand's own domain (www.santander.co.uk) — the brand question is settled by the final destination

Page content (meta description, ISA promotion copy) matches genuine Santander UK marketing content

External domains loaded are ordinary analytics/consent tooling (Adobe, LaunchDarkly, OneTrust, Facebook)

Domain age information unavailable

Details

Page Title

Online

Scan Type

public

Favicon Hash

MMH3: -647019517

MD5: 7aae90ebc4f50a35a497ccffcf817f15

Domain Name Analysis

Within the commercial generic top-level domain (.com), 'manage-unauthorised-payee.firebaseapp.com' is registered with subdomain 'manage-unauthorised-payee'. The core label 'firebaseapp' covers 11 characters containing 5 vowels alongside 6 consonants. Segmentation suggests three words: fire, base, app. Median word length comes out to four characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

2.06s

Total Load Time

2.4 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:11,598 chars

Detector Agreement:80%

Website Classification

Primary Category

finance banking76% confidence

Type: spa

Method: ml+structural

All Detected Categories

finance banking

76%

corporate business

36%

Detected Features

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
7	199.36.158.100Fastly · CDN	United States	AS54113Fastly, Inc.
3	2.17.100.155Akamai · CDN	Frankfurt am Main, Hesse, Germany	AS20940Akamai International B.V.
3	142.251.14.94Google · CDN	United States	AS15169Google LLC
3	2.23.245.90Akamai · CDN	Frankfurt am Main, Hesse, Germany	AS16625Akamai Technologies, Inc.
3	172.64.155.119Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
3	2.17.100.241Akamai · CDN	Frankfurt am Main, Hesse, Germany	AS20940Akamai International B.V.
3	146.75.121.55Fastly · CDN	Frankfurt am Main, Hesse, Germany	AS54113Fastly, Inc.
3	54.234.71.121Aws · CLOUD	Ashburn, Virginia, United States	AS14618Amazon.com, Inc.
3	2.17.100.128Akamai · CDN	Frankfurt am Main, Hesse, Germany	AS20940Akamai International B.V.
3	23.52.181.12Akamai · CDN	Frankfurt am Main, Hesse, Germany	AS16625Akamai Technologies, Inc.
85	27	-	-