Security Scan Report: hypnose-lens.com

Redirected to: https://hypnose-lens.com/de/dkb/dkb/login.php

Submitted: Nov 23, 2025, 2:22:11 AMCompleted: Nov 23, 2025, 2:24:05 AMpubliccompleted
Loading additional data...

Summary

This website contacted 22 IPs in 3 countries across 6 domains to perform 16 HTTP transactions. The main domain is hypnose-lens.com and was registered NaN years ago.

Submitted URL: https://hypnose-lens.com/de/dkb/dkb/

Effective URL: https://hypnose-lens.com/de/dkb/dkb/login.phpRedirected

AI Security Verdict

High Risk

Confidence: 92%

8
Risk Score

Site impersonates DKB banking login on an unrelated domain; treat as high‑risk phishing.

Risk Factors
Brand impersonation (DKB) on a non‑official, unranked domain
Credential‑harvesting login form collecting passwords
Domain does not match the advertised brand (final_url ≠ official DKB domain)
Low reputation (UNRANKED) combined with brand claims
Domain age information unavailable

Details

Page Title

DKB Banking

Scan Type

public

Language

🇩🇪

German

(50% confidence)

Category

finance banking

(60%)

Domain Information

Domain 'hypnose-lens.com' uses the commercial generic top-level domain (.com) and has no subdomain. Count 12 characters in 'hypnose-lens' holding three vowels versus 8 consonants, plus 1 hyphen. Breaking it apart gives 3 words: hypnos, e, lens. Average segment length settles at 4 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://hypnose-lens.com/de/dkb/dkb/

Page Load Overview

1.14s
Total Load Time
16
HTTP Requests
6
Domains
533 KB
Total Size

Language Analysis

Primary Language

🇩🇪German
Code: de
Confidence:50%
Script:Latin
Direction:ltr

Detection Details

Language Code:de
Detection Confidence:50%
Script Type:Latin
Text Length:257 chars
Detector Agreement:100%

Website Classification

Primary Category

finance banking60% confidence
Type: webapp
Method: ml+structural

All Detected Categories

finance banking
60%

Detected Features

Login Form

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
8188.130.25.202Carrières-sur-Seine, Île-de-France, France
AS34177Celeste SAS
3104.16.174.226United States
AS13335CLOUDFLARENET
2142.250.186.170United States
AS15169GOOGLE
1142.250.186.131United States
AS15169GOOGLE
1104.17.24.14United States
AS13335CLOUDFLARENET
1151.101.194.137San Francisco, California, United States
AS54113FASTLY
0188.130.25.102Carrières-sur-Seine, Île-de-France, France
AS34177Celeste SAS
0104.16.175.226United States
AS13335CLOUDFLARENET
02a04:4e42:200::649United States
AS54113FASTLY
02606:4700::6811:180eUnited States
AS13335CLOUDFLARENET
1622--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T11D916220A4F4183B118360A97EA61A0EBE96D50BC80D490135FC1EDC1FC7E97CDB365E

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

96:dZcGe9oNJPIf6bj318GmFVs9O6Ej6oZjhhtz0fw:dyGe9oNJwExmFO9yj6oZjhhtz0fw

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:4396:AACBIQgQAAwoBEgRBBARIDOEAIABAQgAAEOoAgAAAHSAJBkAHAYBhGCIBAANIkAkIAgB0BAUOAEAgCMQIoAIQQCQYCkgIEB+

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffffffe7e700ffff
Perceptual Hash:b3e2cc1de6e219c8
Difference Hash:9409284d4c380408
Wavelet Hash:74e4ece4e400f0f0
Color Hash:#78753a

Scan History

Scan history not available

Unable to load historical scan data