Security Scan: Before you continue to YouTube

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/5e4ba900-2ef5-439d-b126-0c5af7c50264 Domain and IP registration (RDAP)/api/v1/rdap/5e4ba900-2ef5-439d-b126-0c5af7c50264How often this domain was scanned/api/v1/domain/stats/northerncu.at Scan history for this domain/api/v1/domain/history/northerncu.at?limit=15

This website contacted 12 IPs in 1 country across 7 domains to perform 31 HTTP transactions. The main domain is northerncu.at and was registered 3 weeks ago.

Submitted URL: https://northerncu.at/

Effective URL:

https://consent.youtube.com/m?continue=https%3A%2F%2Fwww.youtube.com%2...

Redirected

AI Security Verdict

Confirmed Scam

Confidence: 88%

Risk Score

RosyGuard cloaker (analyst-vetted CRITICAL phishing kit) with a YARA fingerprint-gate hit, served via a credit-union look-alike .at hostname that cloaks to a benign Google consent page. Treat as malicious.

Risk Factors (5)

Known malicious phishing kit (RosyGuard cloaker) identified by analyst-vetted kit roster with CRITICAL severity

YARA rule hit RosyGuard_Cloaker_Fingerprint_Gate on the captured HTML body

Deceptive hostname imitating a credit-union brand (northerncu.at) on a TLD associated with the kit's campaign

Cross-domain cloaking redirect to a benign Google consent page used to evade automated analysis

WebAssembly-based fingerprinting modules consistent with a client-side cloaking gate

Domain age information unavailable

Details

Page Title

Before you continue to YouTube

Scan Type

public

Favicon Hash

MMH3: 708578229

MD5: f3418a443e7d841097c714d69ec4bcb8

Domain Name Analysis

Domain 'northerncu.at' uses the Austrian country-code top-level domain (.at) with no subdomain. The registrable portion 'northerncu' spans 10 characters holding 3 vowels versus seven consonants. Splitting it apart reveals 2 words: northern, cu. Median word length comes out to five characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

3.42s

Total Load Time

536 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:3,076 chars

Detector Agreement:100%

Website Classification

Primary Category

corporate business33% confidence

Type: webapp

Method: ml+structural

All Detected Categories

corporate business

33%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
9	142.251.127.138Google · CDN	United States	AS15169Google LLC
2	107.173.18.68	Buffalo, New York, United States	AS36352HostPapa
2	142.251.153.4Google · CDN	United States	AS15169Google LLC
2	142.251.13.94Google · CDN	United States	AS15169Google LLC
2	142.251.20.95Google · CDN	United States	AS15169Google LLC
2	142.250.154.94Google · CDN	United States	AS15169Google LLC
2	142.251.152.119Google · CDN	United States	AS15169Google LLC
2	107.173.18.69	Buffalo, New York, United States	AS36352HostPapa
2	107.173.18.67	Buffalo, New York, United States	AS36352HostPapa
2	142.251.156.4Google · CDN	United States	AS15169Google LLC
31	12	-	-