Security Scan Report: sbi-yono-login-mobile-banking.live

Submitted: Completed: publiccompleted

AI Security Verdict

High Risk

Confidence: 72%

7
Risk Score

Expired, parked domain whose hostname impersonates SBI YONO mobile banking; no live credential form was captured, but the deceptive bank-lookalike address should never be used for login.

Risk Factors (3)
Deceptive hostname impersonating a major bank's (SBI YONO) login/banking brand
Domain name combines bank brand + 'login-mobile-banking' lure pattern typical of phishing hosts
Expired domain parked with monetised ad/search content, indicating abandoned bank-lookalike infrastructure that could be re-registered and weaponised
Domain age information unavailable

Details

Page Title

N/A

Scan Type

public

Domain Name Analysis

Within the .live top-level domain, 'sbi-yono-login-mobile-banking.live' is registered while skipping any subdomain. The registrable portion 'sbi-yono-login-mobile-banking' spans 29 characters containing 10 vowels alongside 15 consonants; it also includes four hyphens. Segmentation suggests 6 words: s, bi, yono, login, mobile, banking. Median word length comes out to 4.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://sbi-yono-login-mobile-banking.live

Page Load Overview

2.81s
Total Load Time
299 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:57%
Script:Latin
Direction:ltr

Detection Details

Text Length:132 chars
Detector Agreement:100%

Website Classification

Primary Category

finance banking52% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

finance banking
52%
adult content
33%
phishing scam
27%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
6103.224.182.250San Diego, California, United States
AS133618Trellian Pty. Limited
118.245.60.77Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
154.88.44.186Aws · CLOUDAshburn, Virginia, United States
AS14618Amazon.com, Inc.
1185.111.111.154Frankfurt am Main, Hesse, Germany
AS212238Datacamp Limited
1188.114.96.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1188.114.97.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
194.237.101.74Frankfurt am Main, Hesse, Germany
AS202053UpCloud Ltd
1195.181.170.19Datacamp · CDNFrankfurt am Main, Hesse, Germany
AS60068Datacamp Limited
1185.111.111.157Frankfurt am Main, Hesse, Germany
AS212238Datacamp Limited
1212.147.230.112Finland
AS202053UpCloud Ltd
2116--

Detected Technologies1

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1C7F2E65446F2482115973024DE7F2A8937754A23658CED0CBC8C6A40FF9E9B74EB6BF4

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:eBZBsjBjrAyhtbgt4MiIO/5/9SLEgKbRzII8AoQhAoQDQxGA:OMMFYkI8eheDW

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:34385:EYAYLwScAQMwigDJg7joS0GCDAgC1hIIgAVgAVRLgI+LKAQNDSAAJr0aSE6AygEMtEIAQAkcJCIAtVALsCtGYFABgEcxUYEC

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0000c300000000ff
Perceptual Hash:a8609f4a9f4eb364
Difference Hash:719696979797b33b
Wavelet Hash:0043e7e7db0118ff
Color Hash:#44931f

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data