Security Scan Report: www.penfinancial.at

Redirected to:
https://consent.youtube.com/m?continue=https%3A%2F%2Fwww.youtube.com%2...
Site favicon
Submitted: Oct 10, 2026, 4:34:24 AMCompleted: Oct 10, 2026, 4:35:02 AMpubliccompleted

This website contacted 13 IPs in 1 country across 7 domains to perform 31 HTTP transactions. The main domain is consent.youtube.com and was registered 29 years ago.

Submitted URL: https://www.penfinancial.at/

Effective URL:

https://consent.youtube.com/m?continue=https%3A%2F%2Fwww.youtube.com%2...
Redirected

AI Security Verdict

Confirmed Scam

Confidence: 85%

9
Risk Score

Entry domain penfinancial.at impersonates a Canadian credit union and matches the analyst-vetted RosyGuard cloaking phishing kit; it then bounces visitors to a benign YouTube consent page. Treat as malicious.

Risk Factors (3)
Known malicious phishing kit (RosyGuard cloaker) identified by analyst-vetted kit roster
Domain name impersonates a financial institution (credit union) on a non-official domain
Off-domain redirect to a benign consent page consistent with cloaking/fingerprint gating
Domain age information unavailable

Details

Page Title

Before you continue to YouTube

Scan Type

public

Domain Name Analysis

You're looking at domain 'www.penfinancial.at' on the Austrian country-code top-level domain (.at), featuring subdomain 'www'. Count 12 characters in 'penfinancial' holding 5 vowels versus 7 consonants. Word splitting yields 2 words: pen, financial. Expect six characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://www.penfinancial.at/

Page Load Overview

2.69s
Total Load Time
541 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:3,076 chars
Detector Agreement:100%

Website Classification

Primary Category

corporate business33% confidence
Type: webapp
Method: ml+structural

All Detected Categories

corporate business
33%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
7192.178.183.113Google · CDNUnited States
AS15169Google LLC
2107.173.18.68Buffalo, New York, United States
AS36352HostPapa
2142.251.154.4Google · CDNUnited States
AS15169Google LLC
2142.251.14.94Google · CDNUnited States
AS15169Google LLC
2142.251.110.95Google · CDNUnited States
AS15169Google LLC
2192.178.183.94Google · CDNUnited States
AS15169Google LLC
2142.251.153.119Google · CDNUnited States
AS15169Google LLC
2107.173.18.67Buffalo, New York, United States
AS36352HostPapa
2107.173.18.69Buffalo, New York, United States
AS36352HostPapa
2142.251.156.4Google · CDNUnited States
AS15169Google LLC
3113--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T14BC464DF9134E07FE933A5B1A9C8AA89F39D4491E60E0576BD74B66306DFDA21342330

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

6144:4Pq3j6/8+Oq3j6/8+Iq3j6/8+tq3j6/8+eq3j6/8+dQISNt1/tjTunC1vSMuhqdo:ejTunC1vSDqdo

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:588486:STApLFBhZOHEA1QUv4gpFAkHZKEhRAAlHAIyAYdBxBpUBIoZFHOzDCMLDIAciFABgA5ShAmwYJFIABgh4spBgSe4KO4RUykS

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffc7c7cfc7c3f3ff
Perceptual Hash:b193ce649bcc6493
Difference Hash:340c1e181e162600
Wavelet Hash:c2c7c2c6c2c2c2fe
Color Hash:#e06c6c

Other Hashes

Crop Resistant:340c1e181e162600

Scan History

Scan history not available

Unable to load historical scan data