Security Scan Report: www.mrcooper.com

Site favicon
Submitted: Jun 11, 2026, 7:35:27 PMCompleted: Jun 11, 2026, 7:37:02 PMpubliccompleted
Loading additional data...

Summary

This website contacted 3 IPs in 1 country across 3 domains to perform 2 HTTP transactions. The main domain is mrcooper.com and was registered NaN years ago.

Submitted URL: https://www.mrcooper.com/get-started/rates

The Cisco Umbrella rank of the primary domain is #89,797 of the top 1 million websites

AI Security Verdict

Safe Website

Confidence: 95%

0
Risk Score

AI analysis skipped: Low-risk scan (score=23) on well-ranked domain #89,797.

Safety Factors
Well-established domain (ranked #89,797)
No forms or interactive credential elements
No IoC, YARA, or IDS alerts
Domain age information unavailable

Details

Page Title

Mortgage Rates with Mr. Cooper

Scan Type

public

Language

🇺🇸

English

(54% confidence)

Category

finance banking

(49%)

Domain Information

The domain 'www.mrcooper.com' uses the commercial generic top-level domain (.com) and includes subdomain 'www'. The registrable portion 'mrcooper' spans 8 characters with 3 vowels and five consonants. Splitting it apart reveals 2 words: mr, cooper. The median word length lands at four characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://www.mrcooper.com/get-started/rates

Page Load Overview

2.95s
Total Load Time
98
HTTP Requests
20
Domains
2.9 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:54%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:54%
Script Type:Latin
Text Length:6,683 chars
Detector Agreement:100%

Website Classification

Primary Category

finance banking49% confidence
Type: spa
Method: ml+structural+ocr_tiebreaker

All Detected Categories

finance banking
49%
forum community discussion
38%
adult content
37%
real estate property
36%
government public service
34%

Detected Features

Search

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
34104.16.79.73United States
AS13335Cloudflare, Inc.
323.174.47.131United States
AS16509Amazon.com, Inc.
32104.16.156.114United States
AS13335Cloudflare, Inc.
983--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T143D36DCA327071AC51538EEDDB2B6605A22DB07EB146C4D4B65FCEF586C7DC8B123928

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:f8aINIBER0yHdpdL9T7kXlczxtIfo9qhQqlg2VXvEQqlg2VXvq+iVw9:BcIBEOgxN2lc8fo9qR/m/q69

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:130792:oU4kYjFzUCxEAKTwlYBMsY5Fu1+iWIgIBAJlDNCAAFVCwwghCIWQdiJiAwAOl0QBKQPAMggRCULNQMBCJyAYiArAoa4hjSIp

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:fe000000ffffffff
Perceptual Hash:f155c5d5d414d4c5
Difference Hash:000b0a1c40000000
Wavelet Hash:00000000ffffffff
Color Hash:#6ce06c

Other Hashes

Crop Resistant:000b0a1c40000000

Scan History

Scan history not available

Unable to load historical scan data