Security Scan Report: wellsfargobank.fyi

Site favicon
Submitted: Oct 10, 2026, 11:05:01 AMCompleted: Oct 10, 2026, 11:05:37 AMpubliccompleted

AI Security Verdict

Confirmed Scam

Confidence: 92%

9
Risk Score

One-day-old domain impersonating Wells Fargo with banking lures and Google Safe Browsing Social Engineering flag; a phishing clone — do not enter credentials.

Risk Factors (5)
Established brand (Wells Fargo) impersonated on a non-official domain (wellsfargobank.fyi)
Google Safe Browsing Social Engineering / phishing threat
Domain only 1 day old
Unranked domain claiming to be a major bank brand
Financial incentive lures ($325/$125 checking bonuses, 0% intro APR) used to draw victims to a sign-on page
Domain age information unavailable

Details

Page Title

Online Banking — Banking that works for you

Scan Type

public

Domain Name Analysis

You're looking at domain 'wellsfargobank.fyi' on the .fyi top-level domain without a subdomain. Its registrable label 'wellsfargobank' stretches across 14 characters split between 4 vowels and 10 consonants. Splitting it apart reveals 3 words: wells, fargo, bank. Average segment length settles at five characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://wellsfargobank.fyi

Page Load Overview

2.08s
Total Load Time
721 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:3,031 chars
Detector Agreement:100%

Website Classification

Primary Category

finance banking65% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

finance banking
65%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1063.176.8.218Aws · CLOUDFrankfurt am Main, Hesse, Germany
AS16509Amazon.com, Inc.
1104.26.7.237Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1142.251.14.95Google · CDNUnited States
AS15169Google LLC
1195.181.175.41Datacamp · CDNFrankfurt am Main, Hesse, Germany
AS60068Datacamp Limited
1104.18.67.220Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1142.251.14.94Google · CDNUnited States
AS15169Google LLC
118.159.126.105Aws · CLOUDFrankfurt am Main, Hesse, Germany
AS16509Amazon.com, Inc.
1195.181.175.40Datacamp · CDNFrankfurt am Main, Hesse, Germany
AS60068Datacamp Limited
1104.26.6.237Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1172.67.73.66Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2314--

Detected Technologies3

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T153D2C820021C2E3E67074AE5FA69B77572B8724BD21FC418B5BC02B15BCEDC9E927794

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:XcniIiZaiTiyiGiBiWi1ilupNaAQQ6be8Th:XcniIiZaiTiyiGiBiWi1ilupNalNb3Th

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:30415:RYRjglwIMjClANUFGem8GpEwQR8C4cjUYUEESspA4gFFKH5BDKCUjpwBEBHExNEAIYNIAVSQykoJwwSpUE1ASoGCC7LRexWC

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00ffefffffffffc2
Perceptual Hash:f70a750a750a750f
Difference Hash:c40a4c4c300e0c96
Wavelet Hash:00232323ffc7e7c2
Color Hash:#8c40bf

Scan History

Scan history not available

Unable to load historical scan data