Security Scan Report: 65admin.postbank.com.mkww.h2977615.stratoserver.net

Redirected to:
https://65admin.postbank.com.mkww.h2977615.stratoserver.net/landing#/
Site favicon
Submitted: Completed: publiccompleted
This website contacted 7 IPs in 2 countries across 3 domains to perform 71 HTTP transactions. The main domain is stratoserver.net and was registered 19 years ago.

Submitted URL: https://65admin.postbank.com.mkww.h2977615.stratoserver.net

Effective URL:
https://65admin.postbank.com.mkww.h2977615.stratoserver.net/landing#/
Redirected

The Cisco Umbrella rank of the primary domain is #216,940 of the top 1 million websites

AI Security Verdict

Moderate Risk

Confidence: 68%

5
Risk Score

URL places the bank name 'postbank.com' inside a shared Strato hosting subdomain, which Postbank does not control. The page itself is only a Mattermost app-launch screen with no forms, but the deceptive hostname warrants avoiding it.

Risk Factors (3)
Deceptive hostname: a well-known bank's name (postbank.com) used as a subdomain on an unrelated shared-hosting domain
Hostname/content mismatch — a self-hosted Mattermost instance presented under a bank-branded URL
No legitimacy signals beyond the hosting provider's own domain age; operator identity unverifiable
Safety Factors (6)
No credential, login or payment forms on the page (0 forms, 0 password fields, 0 payment fields)
No Indicators of Compromise matched in threat intelligence
No JavaScript malware/hunting-rule patterns and no obfuscated or cross-origin data-exfiltration scripts
No network IDS alerts and no known malicious kit in the roster
No hidden/disguised fields and no cross-origin form submissions
Established domain (7272 days old) with no strong malicious indicators — risk clamped from 7 to 5
Domain age information unavailable

Details

Page Title

Reincarnate Mattermost

Scan Type

public

Domain Name Analysis

The domain name '65admin.postbank.com.mkww.h2977615.stratoserver.net' uses the network infrastructure generic top-level domain (.net), featuring subdomain '65admin.postbank.com.mkww.h2977615'. The core label 'stratoserver' covers 12 characters holding 4 vowels versus 8 consonants. Splitting it apart reveals 2 words: strato, server. Expect six characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Reincarnate Mattermost a Where would you like to view this? You can view in the desktop app or continue in your web browser. View in Desktop App View in Browser O Remember my preference Don't ha...

Page Load Overview

9.11s
Total Load Time
5.0 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:300 chars
Detector Agreement:94%

Website Classification

Primary Category

unknown0% confidence
Type: dynamic
Method: structural

All Detected Categories

No categories detected

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
5481.169.242.140Germany
AS6724Strato GmbH
1665.8.131.70Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
103.174.46.61Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
1065.8.131.35Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
103.174.46.88Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
1065.8.131.110Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
1065.8.131.82Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
717--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1F744E9D1FA2F1C3FAD9353185ED7628CA23E96718DEA4C7A741D1328C5D50CE32AB489

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:bu1SgK+7CiaY3ravdDzfVH8aLm9RjTLUIDc04nKdJTEDZj8V/NjtFHOec2E1T:k7/DmvdDzfytbldJ4WV1TurT

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:256196:AJQIUgAiQOARaAIYUG4M1pCSkgKQMYIXCExIQBwHICrBkIDE4gUGeoBoAN0arHUkVTTpOAgTAIAoGLggRKhAJtpFNJTeGKwh

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:bfcf938387dfffff
Perceptual Hash:bc3cc3933ec68c38
Difference Hash:6896b72736300020
Wavelet Hash:008f8181838fcfcf
Color Hash:07000000180

Scan History

Scan history not available

Unable to load historical scan data