Security Report: bancfirstonline.com - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/1080b5e9-e9ee-4ab7-b53b-6805a304e122 Domain and IP registration (RDAP)/api/v1/rdap/1080b5e9-e9ee-4ab7-b53b-6805a304e122How often this domain was scanned/api/v1/domain/stats/bancfirstonline.com Scan history for this domain/api/v1/domain/history/bancfirstonline.com?limit=15

This website contacted 6 IPs in 1 country across 31 domains to perform 100 HTTP transactions. The main domain is bancfirstonline.com and was registered 19 years ago.

Submitted URL: https://bancfirstonline.com

Effective URL:

https://www.bancfirst.bank/

Redirected

The Cisco Umbrella rank of the primary domain is #942,008 of the top 1 million websites

AI Security Verdict

High Risk

Confidence: 88%

Risk Score

The site impersonates BancFirst and harvests login credentials; treat as high‑risk phishing.

Risk Factors (5)

Brand impersonation (different entity's brand on non‑official domain)

Credential collection forms (username/password)

Low Cisco Umbrella ranking for a claimed major bank

Presence of hidden __RequestVerificationToken (common in phishing kits)

Multiple redirects (3) before reaching final URL

Domain age information unavailable

Details

Page Title

BancFirst | Bank in Oklahoma | Accounts | Loans

Scan Type

public

Favicon Hash

MMH3: 2130851095

MD5: 418175d98840a54132606e252fa8c19c

Domain Name Analysis

Domain 'bancfirstonline.com' uses the commercial generic top-level domain (.com) while skipping any subdomain. The second-level label 'bancfirstonline' is 15 characters long holding five vowels versus 10 consonants. Breaking it apart gives four words: ban, c, first, online. Median word length comes out to four characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

10.55s

Total Load Time

4.6 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:9,210 chars

Detector Agreement:100%

Website Classification

Primary Category

finance banking86% confidence

Type: webapp

Method: ml+structural

All Detected Categories

finance banking

86%

technology software

65%

government public service

34%

social_media

25%

forum

20%

Detected Features

OG: website

Schema.org

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
20	142.251.20.97Google · CDN	United States	AS15169Google LLC
16	104.18.38.231Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
16	3.160.150.46Cloudfront · CDN	United States	AS16509Amazon.com, Inc.
16	142.251.127.95Google · CDN	United States	AS15169Google LLC
16	142.251.151.4Google · CDN	United States	AS15169Google LLC
16	44.214.165.163Aws · CLOUD	Ashburn, Virginia, United States	AS14618Amazon.com, Inc.
100	6	-	-