Security Scan: SFE

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/8154948d-5df5-46f7-934d-823781a8d1d3 Domain and IP registration (RDAP)/api/v1/rdap/8154948d-5df5-46f7-934d-823781a8d1d3How often this domain was scanned/api/v1/domain/stats/studentfinance-help.firebaseapp.com Scan history for this domain/api/v1/domain/history/studentfinance-help.firebaseapp.com?limit=15

This website contacted 17 IPs in 3 countries across 9 domains to perform 66 HTTP transactions. The main domain is firebaseapp.com and was registered 14 years ago.

Submitted URL: https://studentfinance-help.firebaseapp.com/

Effective URL:

https://logon.slc.co.uk/welcome/secured/login?_locale=en_GB&cookieCons...

Redirected

AI Security Verdict

High Risk

Confidence: 58%

Risk Score

Unknown-age Firebase page branded 'SFE' that redirects to the genuine Student Loans Company login; the credential form belongs to the official logon.slc.co.uk SSO, no threat-intel or malware hits, but the unsolicited branded redirector is opaque.

Risk Factors (4)

Page is served from a shared free-hosting namespace (firebaseapp.com) with unknown subdomain age, so the platform's 1995 registration says nothing about this page.

Student Finance England branding appears on a hosting subdomain that is not an official SLC or gov.uk domain.

Multi-hop cross-domain redirect chain with a circular redirect back to logon.slc.co.uk, an opaque navigation pattern for users.

Scanner-vs-client content mismatch (datacenter IP received a challenge page) — consistent with bot protection but also hides the entry page from automated inspection.

Domain age information unavailable

Details

Page Title

SFE

Scan Type

public

Favicon Hash

MMH3: 1190606557

MD5: de7abc5226925203ac10b0a4a94af949

Domain Name Analysis

Within the commercial generic top-level domain (.com), 'studentfinance-help.firebaseapp.com' is registered and includes subdomain 'studentfinance-help'. Its registrable label 'firebaseapp' stretches across 11 characters split between 5 vowels and six consonants. Segmentation suggests 3 words: fire, base, app. Average segment length settles at four characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

1.84s

Total Load Time

1.1 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:14 chars

Detector Agreement:0%

Website Classification

Primary Category

unknown0% confidence

Type: dynamic

Method: structural

All Detected Categories

No categories detected

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
18	199.36.158.100Fastly · CDN	United States	AS54113Fastly, Inc.
3	62.255.142.225	Ealing, England, United Kingdom	AS32787Akamai Technologies, Inc.
3	62.255.142.228	Ealing, England, United Kingdom	AS32787Akamai Technologies, Inc.
3	3.174.46.41Cloudfront · CDN	United States	AS16509Amazon.com, Inc.
3	143.204.181.129Cloudfront · CDN	United States	AS16509Amazon.com, Inc.
3	142.251.13.138Google · CDN	United States	AS15169Google LLC
3	52.16.57.137Aws · CLOUD	Dublin, Leinster, Ireland	AS16509Amazon.com, Inc.
3	3.174.46.24Cloudfront · CDN	United States	AS16509Amazon.com, Inc.
3	143.204.181.20Cloudfront · CDN	United States	AS16509Amazon.com, Inc.
3	142.251.20.139Google · CDN	United States	AS15169Google LLC
66	17	-	-