Security Scan Report: mein.dkb.direct.de.koratlearningcity.com

Redirected to: https://mein.dkb.direct.de.koratlearningcity.com/content/login.php?client_ID=50532nic2e163c810d538q567z780sx1&session_ID=780h609541y785z

Submitted: Nov 21, 2025, 11:54:39 AMCompleted: Nov 21, 2025, 11:57:23 AMpubliccompleted
Loading additional data...

Summary

This website contacted 5 IPs in 2 countries across 2 domains to perform 15 HTTP transactions. The main domain is mein.dkb.direct.de.koratlearningcity.com and was registered NaN years ago.

Submitted URL: https://mein.dkb.direct.de.koratlearningcity.com/content/login.php

Effective URL: https://mein.dkb.direct.de.koratlearningcity.com/content/login.php?client_ID=50532nic2e163c810d538q567z780sx1&session_ID=780h609541y785zRedirected

AI Security Verdict

Confirmed Scam

Confidence: 95%

9
Risk Score

Confirmed phishing scam impersonating DKB on a newly registered unranked domain.

Risk Factors
Brand impersonation on a new, unranked domain
Apparent credential‑harvesting login interface
Suspicious subdomain structure mimicking legitimate bank
Domain age only 36 days (high‑risk new domain)
Domain age information unavailable

Details

Bot Protection Detected

This website is protected by Cloudflare bot protection. Our scanner was challenged or blocked during access.

Page Title

Willkommen

Scan Type

public

Language

🇩🇪

German

(80% confidence)

Category

technology software

(88%)

Domain Information

The domain name 'mein.dkb.direct.de.koratlearningcity.com' uses the commercial generic top-level domain (.com); it also runs on subdomain 'mein.dkb.direct.de'. Its registrable label 'koratlearningcity' stretches across 17 characters with 6 vowels and eleven consonants. Word splitting yields 4 words: kor, at, learning, city. The median word length lands at 3.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://mein.dkb.direct.de.koratlearningcity.com/content/login.php

Page Load Overview

2.04s
Total Load Time
15
HTTP Requests
2
Domains
45 KB
Total Size

Language Analysis

Primary Language

🇩🇪German
Code: de
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:de
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:de
Text Length:755 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software88% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

technology software
88%
adult content
82%
healthcare medical
72%
forum community discussion
70%
government public service
58%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
14103.30.127.13Thailand
AS56067453 Ladplacout Jorakhaebua
3104.17.25.14United States
AS13335CLOUDFLARENET
32606:4700::6811:180eUnited States
AS13335CLOUDFLARENET
32606:4700::6811:190eUnited States
AS13335CLOUDFLARENET
1104.17.24.14United States
AS13335CLOUDFLARENET
155--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T127A145505CEE4CFB021385C279917F4AF9EA9E37D50A4990BABF96A10FC9F819D4F404

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

96:+0tubVYevCeTxImrxCd5Jo/40W/JJ1zJn6lJmDJBFa/vZAVtYUiyiQ:AVTvfdImrxiJo/40W/J7UJm1BFa/vZAv

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:4811:EAAAAAQARAEgcAhYLAgAIjMCIADCoCIIQEgsKRAMoEgpABAiFBAEgQgKEICCIAZSUHTAkMwFAqAAgAAAAIACIOCAsFkRABGC

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:7fe7ffe7e7ffffff
Perceptual Hash:f737888c23239d8d
Difference Hash:922a0a4c0e320000
Wavelet Hash:6ee2e2e23a0e0c0c
Color Hash:#c5b187

Other Hashes

Crop Resistant:922a0a4c0e320000

Scan History

Scan history not available

Unable to load historical scan data