Security Scan: https://mbway-app.firebaseapp.com/

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/ea9d3001-783d-49ed-9d78-75887a5eb61f Domain and IP registration (RDAP)/api/v1/rdap/ea9d3001-783d-49ed-9d78-75887a5eb61fHow often this domain was scanned/api/v1/domain/stats/mbway-app.firebaseapp.com Scan history for this domain/api/v1/domain/history/mbway-app.firebaseapp.com?limit=15

This website contacted 1 IP in 1 country across 2 domains to perform 4 HTTP transactions. The main domain is firebaseapp.com and was registered 14 years ago.

Submitted URL: https://mbway-app.firebaseapp.com/

Effective URL:

https://mbapps-ueranneuain-dev.apps.sandbox-m3.1530.p1.openshiftapps.c...

Redirected

AI Security Verdict

Moderate Risk

Confidence: 78%

Risk Score

Free firebaseapp.com subdomain imitating the MB WAY payment brand, flagged as phishing by a single threat-intel source, and bouncing visitors to an unrelated OpenShift sandbox host that served no content. No forms were captured, but the brand-imitating hostname plus phishing report warrant avoiding it.

Risk Factors (4)

Single-source phishing report on the primary domain

Brand-imitating hostname (MB WAY payment service) on a non-official domain

Redirect from a free hosting subdomain to an unrelated third-party sandbox domain

No reachable, verifiable content at the destination; visitor intent cannot be confirmed

Safety Factors (4)

No credential, payment, email or password fields were parsed from the captured DOM (0 forms, 0 password fields)

No JavaScript malware patterns, no native-hunting rule high-precision hits, no IDS alerts and no credential exfiltration detected

The '502 Bad Gateway' text is the scanning proxy's own error page, not site content

No concrete malicious signal: the threat-feed matches name third-party or shared hosts, or rest on a single feed or a reputation label, so they were not counted; no hunting rule / Safe-Browsing / IDS / credential form / brand impersonation either. Elevated risk rested on domain age or reputation alone; clamped from 8 to 5

Domain age information unavailable

Details

Page Title

N/A

Scan Type

public

Domain Name Analysis

You're looking at domain 'mbway-app.firebaseapp.com' on the commercial generic top-level domain (.com); it also runs on subdomain 'mbway-app'. Count 11 characters in 'firebaseapp' containing five vowels alongside six consonants. Splitting it apart reveals 3 words: fire, base, app. Average segment length settles at four characters. No strong language cues emerged from the frequency lists.

Screenshot

Page did not load

The browser never reached this site, so there is no screenshot of it.

Page Load Overview

0.24s

Total Load Time

2 KB

Total Size

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
4	199.36.158.100Fastly · CDN	United States	AS54113Fastly, Inc.
4	1	-	-

Detected Technologies4

Meta-Refresh-Redirect

100%

HTTP/3

40%

HSTS

40%

Firebase

40%

Content Similarity HashesFor malware variant detection

Image Hashes

Perceptual Hashes

Average Hash:N/A

Perceptual Hash:N/A

Difference Hash:N/A

Wavelet Hash:N/A

Color Hash:N/A

Other Hashes

Crop Resistant:N/A

Scan History

Scan history not available

Unable to load historical scan data

Security Scan Report: mbway-app.firebaseapp.com