Security Scan: Secure Payment Portal

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/affe7185-c1b9-4724-a4a9-05773a0020d4 Domain and IP registration (RDAP)/api/v1/rdap/affe7185-c1b9-4724-a4a9-05773a0020d4 Certificate Transparency/api/v1/ct/mnmbk-6c118.firebaseapp.com How often this domain was scanned/api/v1/domain/stats/mnmbk-6c118.firebaseapp.com Scan history for this domain/api/v1/domain/history/mnmbk-6c118.firebaseapp.com?limit=15

This website contacted 3 IPs in 1 country across 2 domains to perform 3 HTTP transactions. The main domain is mnmbk-6c118.firebaseapp.com and was registered 10 years ago.

Submitted URL: https://mnmbk-6c118.firebaseapp.com/

AI Security Verdict

Low Risk

Confidence: 65%

Risk Score

Unbranded 'Secure Payment Portal' on an anonymous firebaseapp.com subdomain pushing an 'authenticate' prompt with no real payment or login fields. No IoC, malware or exfiltration evidence, but anonymous and deceptive — avoid entering any data.

Risk Factors (4)

Anonymous firebaseapp.com subdomain with a random string identifier presenting itself as a 'Secure Payment Portal'

Deceptive security reassurance language ('For security reasons, please authenticate', 'secure and encrypted') with no identifiable service or merchant

Unranked domain (not in Cisco Umbrella top 1M) making an unverifiable payment/authentication claim

Page content does not substantiate any real payment or authentication functionality, indicating a lure or redirect shell

Safety Factors (7)

No Indicators of Compromise matches against the page or its resources

No YARA JavaScript malware patterns and no native-YARA high-precision hits

No network IDS/Suricata alerts

No credential exfiltration and no cross-origin JS network targets

No password, disguised-password or payment fields present, so no data collection observed on this page

No brand impersonation detected (no other entity's brand displayed)

Verdict cited a credential/login form, but DOM analysis found no password field (real or disguised) or payment field, and no other hard signal — credential-phishing framing unsupported; risk adjusted from 5 to 3

Domain age information unavailable

Details

Page Title

Secure Payment Portal

Scan Type

public

Domain Name Analysis

Within the commercial generic top-level domain (.com), 'mnmbk-6c118.firebaseapp.com' is registered; it also runs on subdomain 'mnmbk-6c118'. Its registrable label 'firebaseapp' stretches across 11 characters containing 5 vowels alongside 6 consonants. Splitting it apart reveals 3 words: fire, base, app. Expect four characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

1.09s

Total Load Time

3 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:118 chars

Detector Agreement:100%

Website Classification

Primary Category

finance banking84% confidence

Type: static

Method: ml+structural

All Detected Categories

finance banking

84%

government public service

42%

news media journalism

41%

cryptocurrency blockchain

39%

documentation technical

39%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
1	199.36.158.100Fastly · CDN	United States	AS54113Fastly, Inc.
1	104.26.10.233Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	172.67.74.226Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
3	3	-	-