ScanMalware.com

Security Scan Report: banking.justalittlebyte.ovh

Site favicon
Submitted: May 12, 2026, 11:27:40 AMCompleted: May 12, 2026, 11:29:14 AMpubliccompleted
Loading additional data...

Summary

This website contacted 29 IPs in 3 countries across 44 domains to perform 21 HTTP transactions. The main domain is banking.justalittlebyte.ovh and was registered NaN years ago.

Submitted URL: https://banking.justalittlebyte.ovh/login

AI Security Verdict

Confirmed Scam

Confidence: 95%

10
Risk Score

The site harvests passwords, contacts a known malicious IP, and triggers critical IDS alerts – confirmed phishing scam.

Risk Factors
Unranked domain with brand mismatch
Credential‑only password field
Critical IDS alerts for data exfiltration and C2 activity
Malicious IP indicator of compromise
High number of redirects
Domain age information unavailable

Details

Page Title

Cloudflare Banking - Banking Services

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

finance banking

(39%)

Domain Information

Within the .ovh top-level domain, 'banking.justalittlebyte.ovh' is registered and includes subdomain 'banking'. The core label 'justalittlebyte' covers 15 characters with five vowels and 10 consonants. It segments into four words: just, a, little, byte. Expect 4 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://banking.justalittlebyte.ovh/login

Page Load Overview

9.93s
Total Load Time
393
HTTP Requests
50
Domains
474 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en
Text Length:742 chars
Detector Agreement:100%

Website Classification

Primary Category

finance banking39% confidence
Type: spa
Method: ml+structural

All Detected Categories

finance banking
39%
technology software
34%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
29104.17.25.14United States
AS13335Cloudflare, Inc.
132.16.168.111Frankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
131.1.1.1Australia
AS13335Cloudflare, Inc.
13172.64.147.236United States
AS13335Cloudflare, Inc.
13150.171.28.10United States
AS8075Microsoft Corporation
13104.19.154.16United States
AS13335Cloudflare, Inc.
13165.227.154.73Frankfurt am Main, Hesse, Germany
AS14061DigitalOcean, LLC
1379.141.160.87Chicago, Illinois, United States
AS202015HZ Hosting Ltd
13104.20.23.154United States
AS13335Cloudflare, Inc.
13172.67.222.32United States
AS13335Cloudflare, Inc.
39329--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T11D2377367C0ECC621E163A58217AFE7CB089B11B4891DDE5F6DDCB050783FFA9A40A95

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:6rooKu5n9U45WtaEV/DdVoD8xKfX2RfGZnfjOSlvh06x/vmfP7m2i4FC:C2trV/DdV5tRSFhlx/GRiCC

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:47434:s0RMlxnWxEEKeGBABMxooAggA7hWAIAGDIQnCGCQ5CUJgDRyoyAigyFI4gENvJAyDmhhIAMmB+CAgD4wqIiFFPDSAACIkEBR

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:bce7e7e7ffe7e7ff
Perceptual Hash:f3dd8e468c231b89
Difference Hash:610c4c0c100c4d00
Wavelet Hash:00e6e6e6e4e4e2e2
Color Hash:#6f53ac

Other Hashes

Crop Resistant:610c4c0c100c4d00

Scan History

Scan history not available

Unable to load historical scan data