ScanMalware.com

Security Scan Report: cibc-online-signin.com

Redirected to:
https://consent.youtube.com/m?continue=https%3A%2F%2Fwww.youtube.com%2...
Site favicon
Submitted: Oct 7, 2026, 10:19:53 PMCompleted: Oct 7, 2026, 10:20:29 PMpubliccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/6e72d57a-eb11-4361-8af9-89f7e172f6dfDomain and IP registration (RDAP)/api/v1/rdap/6e72d57a-eb11-4361-8af9-89f7e172f6dfCertificate Transparency/api/v1/ct/consent.youtube.comHow often this domain was scanned/api/v1/domain/stats/cibc-online-signin.comScan history for this domain/api/v1/domain/history/cibc-online-signin.com?limit=15

This website contacted 12 IPs in 1 country across 7 domains to perform 31 HTTP transactions. The main domain is consent.youtube.com and was registered 29 years ago.

Submitted URL: https://cibc-online-signin.com/

Effective URL:

https://consent.youtube.com/m?continue=https%3A%2F%2Fwww.youtube.com%2...
Redirected

AI Security Verdict

Confirmed Scam

Confidence: 92%

10
Risk Score

CIBC look-alike domain (cibc-online-signin.com) matches the analyst-vetted RosyGuard WebAssembly cloaker kit; it bounces scanners to a benign YouTube consent page. Treat as an active CIBC phishing site.

Risk Factors (5)
Known malicious phishing kit (RosyGuard cloaker) matched on the entry page
Bank-brand look-alike domain impersonating CIBC sign-in
Cloaking behavior: redirects scanners to a legitimate third-party consent page
WebAssembly fingerprinting gate used to selectively serve phishing content to real victims
Inline script encoding/decoding obfuscation
Domain age information unavailable

Details

Page Title

Before you continue to YouTube

Scan Type

public

Domain Name Analysis

You're looking at domain 'cibc-online-signin.com' on the commercial generic top-level domain (.com) while skipping any subdomain. The core label 'cibc-online-signin' covers 18 characters with six vowels and 10 consonants; it also includes two hyphens. Breaking it apart gives 5 words: c, ibc, online, sign, in. Median word length is three characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://cibc-online-signin.com/

Page Load Overview

2.25s
Total Load Time
543 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:3,076 chars
Detector Agreement:100%

Website Classification

Primary Category

corporate business33% confidence
Type: webapp
Method: ml+structural

All Detected Categories

corporate business
33%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
9142.251.110.138Google · CDNUnited States
AS15169Google LLC
2107.173.18.67Buffalo, New York, United States
AS36352HostPapa
2142.251.155.4Google · CDNUnited States
AS15169Google LLC
2142.251.20.94Google · CDNUnited States
AS15169Google LLC
2142.251.20.95Google · CDNUnited States
AS15169Google LLC
2142.251.14.94Google · CDNUnited States
AS15169Google LLC
2142.251.153.119Google · CDNUnited States
AS15169Google LLC
2107.173.18.69Buffalo, New York, United States
AS36352HostPapa
2107.173.18.68Buffalo, New York, United States
AS36352HostPapa
2142.251.152.4Google · CDNUnited States
AS15169Google LLC
3112--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1F8C475DB9134E07FEE33A5B1A9C8AA49F39D4491E20E0576BD74B66306DFDA21352330

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

6144:Biq3j6/8+Oq3j6/8+Iq3j6/8+tq3j6/8+eq3j6/8+dQISNt1/tjTunC1v93uXImT:OjTunC1v9qImT

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:588213:tSJIB8qmxCBgWCHAVVwkCiIBaGKzAAABoMgBhERDSBAoQAUkAsg32GE7eAZMHVJQCvEgAHUcrgpNkA+0XYFAwKHSiIE8TRRm

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffc7c7cfc7c3f3ff
Perceptual Hash:b193ce649bcc6493
Difference Hash:340c1e181e162600
Wavelet Hash:c2c7c2c6c2c2c2fe
Color Hash:#8453ac

Other Hashes

Crop Resistant:340c1e181e162600

Scan History

Scan history not available

Unable to load historical scan data