Security Scan Report: franchiseregistrierung.kaisers-original.com

Redirected to:
blob:https://tdpromob.ru/de3c3005-5315-45a3-a9ae-74958c3e0ff1
Submitted: Completed: publiccompleted
This website contacted 2 IPs in 2 countries across 2 domains to perform 2 HTTP transactions. The main domain is kaisers-original.com and was registered 7 years ago.

Submitted URL: https://franchiseregistrierung.kaisers-original.com/wp-includes/html-api/ghiemoz/lcukarx/kmcsder/link.html

Effective URL:
blob:https://tdpromob.ru/de3c3005-5315-45a3-a9ae-74958c3e0ff1
Redirected

AI Security Verdict

Confirmed Scam

Confidence: 97%

10
Risk Score

Compromised WordPress host serving a multi-step Capital One phishing kit that harvests usernames, passwords, card/billing data, SSN and SMS codes; the real bank never asks for this.

Risk Factors (5)
Impersonation of Capital One brand on an unrelated, non-official domain
Harvesting of banking credentials, email passwords, card/billing data, SSN and SMS one-time codes
Hosted inside WordPress system paths (/wp-includes/) of a compromised site
Content rendered from a foreign blob: URL on tdpromob.ru
Multi-step fake verification flow designed to defeat user suspicion
Domain age information unavailable

Details

Page Title

Sign In – Capital One

Scan Type

public

Domain Name Analysis

You're looking at domain 'franchiseregistrierung.kaisers-original.com' on the commercial generic top-level domain (.com) and includes subdomain 'franchiseregistrierung'. Count 16 characters in 'kaisers-original' holding 7 vowels versus eight consonants, along with 1 hyphen. Splitting it apart reveals three words: kaiser, s, original. The median word length lands at six characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://franchiseregistrierung.kaisers-original.com/wp-includes/html-api/ghiemoz/lcukarx/kmcsder/link.html

Page Load Overview

1.02s
Total Load Time
39 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:1,451 chars
Detector Agreement:75%

Website Classification

Primary Category

finance banking78% confidence
Type: webapp
Method: ml+structural

All Detected Categories

finance banking
78%
government public service
54%
documentation technical
47%
technology software
41%
corporate business
36%

Detected Features

Login Form

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1212.126.64.121Austria
AS12401internic Datenkommunikations GmbH
15.253.61.98Russia
AS211642AdminVPS OOO
22--

Detected Technologies5

40%
PHPv8.4.5
40%
OpenSSLv3.4.0
40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T120735C0262F645AAA16B81D823E75B5E3E815843C04AD5283EFC86DC5FD79D4E9333EC

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:2SFQBAg9ZZiY9aIZTDjX1ld8kCQKHoV9pjV9HaV9g9V9PV9XJ8H2irGGtNrg279g:2h7Pi5IjpjjHajg9jPjXJ8HG

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:78755:gwBICGAJIEQBLG0nFQgkwKmAoIJJfAlQzaBFwCCHUwsQtDzxLgYgBwAHJ0J4DBBgCYQbxAAWqQYBkBHgkgCIU0jQSysASIED

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:7fe7e7efe7e7e7fe
Perceptual Hash:b38acc2337899937
Difference Hash:c00c0c144d0c0c0c
Wavelet Hash:00e7e7e7e0e0e700
Color Hash:#8c40bf

Other Hashes

Crop Resistant:c00c0c144d0c0c0c

Scan History

Scan history not available

Unable to load historical scan data