Security Scan Report: etransfer-accept.duckdns.org

Submitted: Completed: publiccompleted
This website contacted 6 IPs in 2 countries across 5 domains to perform 11 HTTP transactions. The main domain is duckdns.org and was registered 13 years ago.

Submitted URL: https://etransfer-accept.duckdns.org/captcha.php

The Cisco Umbrella rank of the primary domain is #76,811 of the top 1 million websites

AI Security Verdict

High Risk

Confidence: 88%

8
Risk Score

Bank-branded 'AccèsD' verification page on a duckdns.org subdomain impersonating Desjardins; invalid reCAPTCHA key and e-Transfer lure mark it as a phishing-kit landing page. No credential form on this step, but interaction should be avoided entirely.

Risk Factors (5)
Impersonation of a different entity's brand: Desjardins / AccèsD banking portal reproduced on an unrelated domain
Free dynamic-DNS subdomain used to host a bank-branded security-verification page
Broken/invalid reCAPTCHA site key for this domain — characteristic of a phishing kit using a copied key
Domain name crafted to resemble an Interac e-Transfer acceptance flow
Network IDS dynamic-DNS alerts associated with the page
Domain age information unavailable

Details

Page Title

AccèsD — Vérification de sécurité

Scan Type

public

Domain Name Analysis

You're looking at domain 'etransfer-accept.duckdns.org' on the non-profit oriented generic top-level domain (.org) with subdomain 'etransfer-accept'. Count 7 characters in 'duckdns' containing one vowel alongside 6 consonants. Breaking it apart gives 2 words: duck, dns. Median word length is 3.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://etransfer-accept.duckdns.org/captcha.php

Page Load Overview

1.46s
Total Load Time
842 KB
Total Size

Language Analysis

Primary Language

🇫🇷French
Code: fr
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:fr
Text Length:204 chars
Detector Agreement:100%

Website Classification

Primary Category

finance banking71% confidence
Type: static
Method: ml+structural

All Detected Categories

finance banking
71%
government public service
31%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
6198.44.111.68Los Angeles, California, United States
AS36352HostPapa
1142.251.154.119Google · CDNUnited States
AS15169Google LLC
12.21.209.219Akamai · CDNAubervilliers, Île-de-France, France
AS16625Akamai Technologies, Inc.
1142.251.110.94Google · CDNUnited States
AS15169Google LLC
1142.251.152.119Google · CDNUnited States
AS15169Google LLC
1142.251.155.119Google · CDNUnited States
AS15169Google LLC
116--

Detected Technologies5

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T14242E673988C3436A63D5FFAE1DA2B4A7199E511FC834950ECAD4E6481CDE59318B38C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:3sbEgk2BZsLt5OkxW9yNAKFfkchd9pFifbU0xQ:3sbE0BZe5IcPMchd9pF6Y0xQ

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:12144:SgAGRzZkMA6gAArgISANyIRlRnEQD3AR2FgQlIEAABQKA8JS4UkBCKZBgip0IQDUUgg8UMWhgMcIDIZlSAEcSAEQQkNAFpAJ

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffffdf0000ffffff
Perceptual Hash:b838cec64739b8b8
Difference Hash:34a41810a0000000
Wavelet Hash:ff50000000ff0000
Color Hash:#40acbf

Scan History

Scan history not available

Unable to load historical scan data