ScanMalware.com

Security Scan Report: nsbanking.com

Redirected to:
https://www.banking-gateway.com/
Submitted: Apr 13, 2026, 4:16:01 PMCompleted: Apr 13, 2026, 4:16:52 PMpubliccompleted
Loading additional data...

Summary

This website contacted 14 IPs in 2 countries across 14 domains to perform 1 HTTP transaction. The main domain is banking-gateway.com and was registered NaN years ago.

Submitted URL: http://nsbanking.com/

Effective URL: https://www.banking-gateway.com/Redirected

AI Security Verdict

Moderate Risk

Confidence: 78%

6
Risk Score

The site shows moderate risk due to several login forms and heavily obfuscated JavaScript, but lacks clear malicious indicators.

Risk Factors
Presence of multiple credential‑collection forms
Highly obfuscated JavaScript (charcode manipulation, excessive concatenation)
Unranked domain reputation
Safety Factors
Domain age >20 years (well‑established)
No external credential exfiltration detected
No malware YARA matches or IDS alerts
Form actions point to the same domain (no cross‑origin posting)
Domain age information unavailable

Details

Page Title

Home - Future Banking

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

finance banking

(59%)

Domain Information

Within the commercial generic top-level domain (.com), 'nsbanking.com' is registered. The core label 'nsbanking' covers 9 characters split between 2 vowels and 7 consonants. Segmentation suggests 2 words: ns, banking. Average segment length settles at 4.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of http://nsbanking.com/

Page Load Overview

7.66s
Total Load Time
236
HTTP Requests
23
Domains
5.3 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en-US
Text Length:10,342 chars
Detector Agreement:100%

Website Classification

Primary Category

finance banking59% confidence
Type: spa
Method: ml+structural

All Detected Categories

finance banking
59%
news/blog
20%
social_media
20%

Detected Features

Login Form
Search
Articles
Comments
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
2823.185.0.4United States
AS54113Fastly, Inc.
16172.64.155.119United States
AS13335Cloudflare, Inc.
16162.247.243.39United States
AS54113Fastly, Inc.
1654.163.244.1Ashburn, Virginia, United States
AS14618Amazon.com, Inc.
16104.17.109.19United States
AS13335Cloudflare, Inc.
16142.251.153.119Germany
AS13335
16172.67.74.152United States
AS13335Cloudflare, Inc.
1623.185.0.1United States
AS54113Fastly, Inc.
16104.17.24.14United States
AS13335Cloudflare, Inc.
16104.26.12.19GermanyUnknown
23614--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T15D045BA275E4E8B206F756C8D036A618D1FA5133D64188D4F3BD8BF91F91CAD8533A38

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:QvRRvO8uVzI+imnoeQ9/3Yiww314YApQ2JGD3Dr75lkqGo2zvtAs+Egv:+UJIxL9f514Y0mT

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:178408:iZJnBQQKAAxcZCSoWQMABUwMTSCcvPoAEBDNAoSMAADZgjUCAeIBEwSCFVIEBAEIDXCRAAgLVSEhyyI8FYQYmEjEGPMAEBrY

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Scan History

Scan history not available

Unable to load historical scan data