Security Scan Report: mein.dkb.direct.de.koratlearningcity.com

Redirected to:
https://mein.dkb.direct.de.koratlearningcity.com/content/login.php?cli...
Submitted: Nov 21, 2025, 11:54:39 AMCompleted: Nov 21, 2025, 11:57:23 AMpubliccompleted
Loading additional data...

Summary

This website contacted 5 IPs in 2 countries across 2 domains to perform 15 HTTP transactions. The main domain is mein.dkb.direct.de.koratlearningcity.com and was registered NaN years ago.

Submitted URL: https://mein.dkb.direct.de.koratlearningcity.com/content/login.php

Effective URL: https://mein.dkb.direct.de.koratlearningcity.com/content/login.php?client_ID=50532nic2e163c810d538q567z780sx1&session_ID=780h609541y785zRedirected

AI Security Verdict

Confirmed Scam

Confidence: 95%

9
Risk Score

Confirmed phishing scam impersonating DKB on a newly registered unranked domain.

Risk Factors
Brand impersonation on a new, unranked domain
Apparent credential‑harvesting login interface
Suspicious subdomain structure mimicking legitimate bank
Domain age only 36 days (high‑risk new domain)
Domain age information unavailable

Details

Primary Scan Blocked — Fallback Capture Shown

The primary scanner could not load this page (possible bot protection). The screenshot and page details shown were captured by a fallback browser that loaded the page successfully.

Page Title

Willkommen

Scan Type

public

Language

🇩🇪

German

(80% confidence)

Category

technology software

(88%)

Domain Information

The domain name 'mein.dkb.direct.de.koratlearningcity.com' uses the commercial generic top-level domain (.com); it also runs on subdomain 'mein.dkb.direct.de'. Its registrable label 'koratlearningcity' stretches across 17 characters with 6 vowels and eleven consonants. Word splitting yields 4 words: kor, at, learning, city. The median word length lands at 3.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://mein.dkb.direct.de.koratlearningcity.com/content/login.php

Page Load Overview

2.04s
Total Load Time
15
HTTP Requests
2
Domains
45 KB
Total Size

Language Analysis

Primary Language

🇩🇪German
Code: de
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:de
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:de
Text Length:755 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software88% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

technology software
88%
adult content
82%
healthcare medical
72%
forum community discussion
70%
government public service
58%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
14103.30.127.13Thailand
AS56067453 Ladplacout Jorakhaebua
3104.17.25.14United States
AS13335CLOUDFLARENET
32606:4700::6811:180eUnited States
AS13335CLOUDFLARENET
32606:4700::6811:190eUnited States
AS13335CLOUDFLARENET
1104.17.24.14United States
AS13335CLOUDFLARENET
155--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T127A145505CEE4CFB021385C279917F4AF9EA9E37D50A4990BABF96A10FC9F819D4F404

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

96:+0tubVYevCeTxImrxCd5Jo/40W/JJ1zJn6lJmDJBFa/vZAVtYUiyiQ:AVTvfdImrxiJo/40W/J7UJm1BFa/vZAv

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:4811:EAAAAAQARAEgcAhYLAgAIjMCIADCoCIIQEgsKRAMoEgpABAiFBAEgQgKEICCIAZSUHTAkMwFAqAAgAAAAIACIOCAsFkRABGC

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:7fe7ffe7e7ffffff
Perceptual Hash:f737888c23239d8d
Difference Hash:922a0a4c0e320000
Wavelet Hash:6ee2e2e23a0e0c0c
Color Hash:#c5b187

Other Hashes

Crop Resistant:922a0a4c0e320000

Scan History

Scan history not available

Unable to load historical scan data